From e5624b5d48670e85f092cdbc1be8d095e8d3050c Mon Sep 17 00:00:00 2001 From: Monica Sarbu Date: Mon, 29 May 2017 16:02:21 +0200 Subject: [PATCH 1/2] Load dashboards using the Kibana API If the Elasticsearch version is older than 6.x, then the dashboards are loaded directly into Elasticsearch. The old dashboards are moved to the 5.x directory. --- .travis.yml | 6 - auditbeat/auditbeat.reference.yml | 21 +- auditbeat/auditbeat.yml | 25 + .../default/dashboard/auditbeat-audit.json | 132 +++++ dev-tools/cmd/dashboards/.gitignore | 2 + dev-tools/cmd/dashboards/Makefile | 5 + .../dashboards/export_5x_dashboards.py} | 0 dev-tools/cmd/dashboards/export_dashboards.go | 121 ++++ dev-tools/cmd/import_dashboards/.gitignore | 1 - dev-tools/cmd/import_dashboards/Makefile | 5 - .../import_dashboards/import_dashboards.go | 227 -------- filebeat/filebeat.reference.yml | 21 +- filebeat/filebeat.yml | 25 + .../dashboard/Filebeat-Apache2-Dashboard.json | 0 .../{ => 5.x}/search/Apache2-access-logs.json | 0 .../{ => 5.x}/search/Apache2-errors-log.json | 0 .../Apache2-access-unique-IPs-map.json | 0 .../visualization/Apache2-browsers.json | 0 .../Apache2-error-logs-over-time.json | 0 .../Apache2-operating-systems.json | 0 .../Apache2-response-codes-of-top-URLs.json | 0 .../Apache2-response-codes-over-time.json | 0 .../default/dashboard/filebeat-apache2.json | 167 ++++++ .../dfbb49f0-0a0f-11e7-8a62-2d05eaaac5cb.json | 0 .../4ac0a370-0a11-11e7-8b04-eb22a5669f27.json | 0 .../2bb0fa70-0a11-11e7-9e84-43da493ad0c7.json | 0 .../5ebdbe50-0a0f-11e7-825f-6748cda7d858.json | 0 .../6295bdd0-0a0e-11e7-825f-6748cda7d858.json | 0 .../c5411910-0a87-11e7-8b04-eb22a5669f27.json | 0 .../d1726930-0a7f-11e7-8b04-eb22a5669f27.json | 0 .../default/dashboard/filebeat-auditd.json | 121 ++++ .../26309570-2419-11e7-a83b-d5f4cebac9ff.json | 0 .../b9163ea0-2417-11e7-a83b-d5f4cebac9ff.json | 0 .../f693d260-2417-11e7-a83b-d5f4cebac9ff.json | 0 .../710043e0-2417-11e7-a83b-d5f4cebac9ff.json | 0 .../c876e6a0-2418-11e7-a83b-d5f4cebac9ff.json | 0 .../ffaf5a30-2413-11e7-a0d9-39604d45ca7f.json | 0 .../0bc34b60-2419-11e7-a83b-d5f4cebac9ff.json | 0 .../2cf77780-2418-11e7-a83b-d5f4cebac9ff.json | 0 .../a59b5e00-2417-11e7-a83b-d5f4cebac9ff.json | 0 .../d8e5dc40-2417-11e7-a83b-d5f4cebac9ff.json | 0 .../fb09d4b0-2418-11e7-a83b-d5f4cebac9ff.json | 0 .../default/dashboard/filebeat-icinga.json | 78 +++ .../dashboard/Filebeat-MySQL-Dashboard.json | 0 .../search/Filebeat-MySQL-Slow-log.json | 0 .../search/Filebeat-MySQL-error-log.json | 0 .../MySQL-Error-logs-levels.json | 0 .../MySQL-Slow-logs-by-count.json | 0 .../MySQL-Slow-queries-over-time.json | 0 .../visualization/MySQL-error-logs.json | 0 .../visualization/MySQL-slowest-queries.json | 0 .../default/dashboard/filebeat-mysql.json | 146 +++++ .../dashboard/Filebeat-Nginx-Dashboard.json | 0 .../search/Filebeat-Nginx-module.json | 0 .../visualization/Errors-over-time.json | 0 .../visualization/New-Visualization.json | 0 .../visualization/Nginx-Access-Browsers.json | 0 .../visualization/Nginx-Access-Map.json | 0 .../visualization/Nginx-Access-OSes.json | 0 ...inx-Access-Response-codes-by-top-URLs.json | 0 .../{ => 5.x}/visualization/Sent-sizes.json | 0 .../default/dashboard/filebeat-nginx.json | 151 +++++ .../7fea2930-478e-11e7-b1f0-cb29bac6bf8b.json | 0 .../0ab87b80-478e-11e7-b1f0-cb29bac6bf8b.json | 0 .../73613570-4791-11e7-be88-2ddb32f3df97.json | 0 .../78b9afe0-478f-11e7-b1f0-cb29bac6bf8b.json | 0 .../d2864600-478f-11e7-be88-2ddb32f3df97.json | 0 .../dcccaa80-4791-11e7-be88-2ddb32f3df97.json | 0 .../default/dashboard/filebeat-redis.json | 117 ++++ .../0d3f2380-fa78-11e6-ae9b-81e5311e8cab.json | 0 .../277876d0-fa2c-11e6-bbd3-29c986c96e5a.json | 0 .../5517a150-f9ce-11e6-8115-a7c18106d86a.json | 0 .../dashboard/Filebeat-syslog-dashboard.json | 0 .../62439dc0-f9c9-11e6-a747-6121780e0414.json | 0 .../8030c1b0-fa77-11e6-ae9b-81e5311e8cab.json | 0 .../{ => 5.x}/search/Syslog-system-logs.json | 0 .../b6f321e0-fa25-11e6-bbd3-29c986c96e5a.json | 0 .../eb0039f0-fa7f-11e6-a1df-a78bd7504d38.json | 0 .../12667040-fa80-11e6-a1df-a78bd7504d38.json | 0 .../341ffe70-f9ce-11e6-8115-a7c18106d86a.json | 0 .../346bb290-fa80-11e6-a1df-a78bd7504d38.json | 0 .../3cec3eb0-f9d3-11e6-8a3e-2b904044ea1d.json | 0 .../51164310-fa2b-11e6-bbd3-29c986c96e5a.json | 0 .../5c7af030-fa2a-11e6-bbd3-29c986c96e5a.json | 0 .../5dd15c00-fa78-11e6-ae9b-81e5311e8cab.json | 0 .../78b74f30-f9cd-11e6-8115-a7c18106d86a.json | 0 .../Syslog-events-by-hostname.json | 0 .../Syslog-hostnames-and-processes.json | 0 .../d16bb400-f9cc-11e6-8115-a7c18106d86a.json | 0 .../d56ee420-fa79-11e6-a1df-a78bd7504d38.json | 0 .../dc589770-fa2b-11e6-bbd3-29c986c96e5a.json | 0 .../e121b140-fa78-11e6-a1df-a78bd7504d38.json | 0 .../f398d2f0-fa77-11e6-ae9b-81e5311e8cab.json | 0 .../default/dashboard/filebeat-system.json | 94 ++++ .../f3e771c0-eb19-11e6-be20-559646f8b9ba.json | 0 .../kibana/5.x/index-pattern/heartbeat.json | 6 + .../02014c80-29d2-11e7-a68f-bfaa2341cc52.json | 0 .../091c3a90-eb1e-11e6-be20-559646f8b9ba.json | 0 .../0f4c0560-eb20-11e6-9f11-159ff202874a.json | 0 .../1738dbc0-eb1d-11e6-be20-559646f8b9ba.json | 0 .../920e8140-eb1a-11e6-be20-559646f8b9ba.json | 0 .../c65ef340-eb19-11e6-be20-559646f8b9ba.json | 0 .../default/index-pattern/heartbeat.json | 16 + heartbeat/heartbeat.reference.yml | 21 +- heartbeat/heartbeat.yml | 25 + libbeat/_meta/config.reference.yml | 21 +- libbeat/_meta/config.yml | 25 + .../kibana/5.x/index-pattern/libbeat.json | 6 + .../kibana/default/index-pattern/libbeat.json | 16 + libbeat/beat/beat.go | 19 +- libbeat/common/config.go | 2 +- libbeat/common/url.go | 70 +++ libbeat/common/url_test.go | 103 ++++ libbeat/dashboards/dashboards.go | 116 +++- libbeat/dashboards/es_loader.go | 326 +++++++++++ ..._integration_test.go => es_loader_test.go} | 43 +- libbeat/dashboards/importer.go | 329 ++--------- libbeat/dashboards/kibana_loader.go | 82 +++ .../testdata/testbeat-dashboards.zip | Bin 3005 -> 21420 bytes libbeat/docker-compose.yml | 8 + .../report/elasticsearch/elasticsearch.go | 2 +- libbeat/outputs/elasticsearch/client.go | 4 + .../outputs/elasticsearch/elasticsearch.go | 4 +- libbeat/outputs/elasticsearch/url.go | 51 -- libbeat/outputs/elasticsearch/url_test.go | 77 +-- .../transport/transptest/testing_test.go | 2 +- libbeat/scripts/Makefile | 20 +- libbeat/scripts/generate_index_pattern.py | 98 ++-- libbeat/setup/kibana/client.go | 163 ++++++ libbeat/setup/kibana/config.go | 15 + libbeat/tests/system/config/mockbeat.yml.j2 | 4 +- libbeat/tests/system/test_dashboard.py | 89 +-- metricbeat/metricbeat.reference.yml | 21 +- metricbeat/metricbeat.yml | 25 + ...Metricbeat-Apache-HTTPD-server-status.json | 0 .../kibana/{ => 5.x}/search/Apache-HTTPD.json | 0 .../visualization/Apache-HTTPD-CPU.json | 0 .../Apache-HTTPD-Hostname-list.json | 0 .../Apache-HTTPD-Load1-slash-5-slash-15.json | 0 .../Apache-HTTPD-Scoreboard.json | 0 ...pache-HTTPD-Total-accesses-and-kbytes.json | 0 .../visualization/Apache-HTTPD-Uptime.json | 0 .../visualization/Apache-HTTPD-Workers.json | 0 .../default/dashboard/Metricbeat-apache.json | 156 +++++ .../dashboard/Metricbeat-Docker.json | 0 .../{ => 5.x}/search/Metricbeat-Docker.json | 0 .../visualization/Docker-CPU-usage.json | 0 .../visualization/Docker-Network-IO.json | 0 .../Docker-Number-of-Containers.json | 0 .../Docker-containers-per-host.json | 0 .../visualization/Docker-containers.json | 0 .../Docker-images-and-names.json | 0 .../visualization/Docker-memory-usage.json | 0 .../default/dashboard/Metricbeat-docker.json | 135 +++++ .../f2dc7320-f519-11e6-a3c9-9d1f7c42b045.json | 0 .../58000780-f529-11e6-844d-b170e2f0a07e.json | 0 .../95388680-f52a-11e6-969c-518c48c913e4.json | 0 .../9a9a8bf0-f52a-11e6-969c-518c48c913e4.json | 0 .../ab226b50-f52a-11e6-969c-518c48c913e4.json | 0 .../b046cb80-f52a-11e6-969c-518c48c913e4.json | 0 .../b59a5200-f52a-11e6-969c-518c48c913e4.json | 0 .../default/dashboard/Metricbeat-golang.json | 113 ++++ .../kafka/consumergroup/consumergroup.go | 2 +- .../022a54c0-2bf5-11e7-859b-f78b612cde28.json | 0 .../022a54c0-2bf5-11e7-859b-f78b612cde28.json | 0 .../16fa4470-2bfd-11e7-859b-f78b612cde28.json | 0 .../174a6ad0-30e0-11e7-8df8-6d3604a72912.json | 0 .../294546b0-30d6-11e7-8df8-6d3604a72912.json | 0 .../408fccf0-30d6-11e7-8df8-6d3604a72912.json | 0 .../44f12b40-2bf4-11e7-859b-f78b612cde28.json | 0 .../58e644f0-30d6-11e7-8df8-6d3604a72912.json | 0 .../7aac4fd0-30e0-11e7-8df8-6d3604a72912.json | 0 .../a4c9d360-30df-11e7-8df8-6d3604a72912.json | 0 .../cd059410-2bfb-11e7-859b-f78b612cde28.json | 0 .../d6564360-2bfc-11e7-859b-f78b612cde28.json | 0 .../da1ff7c0-30ed-11e7-b9e5-2b5b07213ab3.json | 0 .../e1018b90-2bfb-11e7-859b-f78b612cde28.json | 0 .../dashboard/Metricbeat-kubernetes.json | 200 +++++++ .../dashboard/Metricbeat-MongoDB.json | 0 .../{ => 5.x}/search/MongoDB-search.json | 0 .../MongoDB-Concurrent-transactions-Read.json | 0 ...MongoDB-Concurrent-transactions-Write.json | 0 .../MongoDB-Engine-ampersand-Version.json | 0 .../MongoDB-WiredTiger-Cache.json | 0 .../visualization/MongoDB-asserts.json | 0 .../visualization/MongoDB-hosts.json | 0 .../visualization/MongoDB-memory-stats.json | 0 .../MongoDB-operation-counters.json | 0 .../default/dashboard/Metricbeat-mongodb.json | 172 ++++++ .../66881e90-0006-11e7-bf7f-c9acc3d3e306.json | 0 .../67e88e60-0005-11e7-aaf1-b342e4b94bb0.json | 0 .../0f506420-0006-11e7-bf7f-c9acc3d3e306.json | 0 .../1a99f2b0-0006-11e7-bf7f-c9acc3d3e306.json | 0 .../1eda2280-0008-11e7-82f3-2f380154876c.json | 0 .../1ede99e0-0009-11e7-8cd4-73b67e9e3f3c.json | 0 .../45a00c10-0006-11e7-bf7f-c9acc3d3e306.json | 0 .../4c36c420-000a-11e7-8cd4-73b67e9e3f3c.json | 0 .../a2175300-000a-11e7-b001-85aac4878445.json | 0 .../e784dc50-0005-11e7-bf7f-c9acc3d3e306.json | 0 .../default/dashboard/Metricbeat-mysql.json | 168 ++++++ .../{ => 5.x}/dashboard/Metricbeat-Redis.json | 0 .../{ => 5.x}/search/Metricbeat-Redis.json | 0 .../visualization/Redis-Clients-Metrics.json | 0 .../Redis-Connected-clients.json | 0 .../visualization/Redis-Keyspaces.json | 0 .../visualization/Redis-Server-Versions.json | 0 .../{ => 5.x}/visualization/Redis-hosts.json | 0 .../visualization/Redis-multiplexing-API.json | 0 .../visualization/Redis-server-mode.json | 0 .../default/dashboard/Metricbeat-redis.json | 138 +++++ .../79ffd6e0-faa0-11e6-947f-177f697178b8.json | 0 .../CPU-slash-Memory-per-container.json | 0 .../{ => 5.x}/dashboard/Metricbeat-cpu.json | 0 .../Metricbeat-filesystem-per-Host.json | 0 .../dashboard/Metricbeat-filesystem.json | 0 .../dashboard/Metricbeat-memory.json | 0 .../dashboard/Metricbeat-network.json | 0 .../dashboard/Metricbeat-overview.json | 0 .../dashboard/Metricbeat-processes.json | 0 .../dashboard/Metricbeat-system-overview.json | 0 .../d1f1f9e0-1b1c-11e7-b09e-037021c4f8df.json | 0 .../{ => 5.x}/search/Cpu-Load-stats.json | 0 .../kibana/{ => 5.x}/search/Cpu-stats.json | 0 .../{ => 5.x}/search/Filesystem-stats.json | 0 .../kibana/{ => 5.x}/search/Fsstats.json | 0 .../kibana/{ => 5.x}/search/Load-stats.json | 0 .../kibana/{ => 5.x}/search/Memory-stats.json | 0 .../kibana/{ => 5.x}/search/Network-data.json | 0 .../{ => 5.x}/search/Process-stats.json | 0 .../kibana/{ => 5.x}/search/System-stats.json | 0 .../089b85d0-1b16-11e7-b09e-037021c4f8df.json | 0 .../1aae9140-1b93-11e7-8ada-3df93aab833e.json | 0 .../217025e0-2a69-11e7-99f0-399f2a11b723.json | 0 .../26732e20-1b91-11e7-bec4-a5e9ec5cab8b.json | 0 .../2e224660-1b19-11e7-b09e-037021c4f8df.json | 0 .../34f97ee0-1b96-11e7-8ada-3df93aab833e.json | 0 .../4d546850-1b15-11e7-b09e-037021c4f8df.json | 0 .../4e4bb1e0-1b1b-11e7-b09e-037021c4f8df.json | 0 .../522ee670-1b92-11e7-bec4-a5e9ec5cab8b.json | 0 .../6b7b9a40-faa1-11e6-86b1-cd7735ff7e23.json | 0 .../83e12df0-1b91-11e7-bec4-a5e9ec5cab8b.json | 0 .../855899e0-1b1c-11e7-b09e-037021c4f8df.json | 0 .../95490a10-1e23-11e7-958f-490b8dcb96d8.json | 0 .../visualization/Available-Memory.json | 0 .../{ => 5.x}/visualization/CPU-Usage.json | 0 .../visualization/CPU-usage-over-time.json | 0 .../visualization/CPU-usage-per-process.json | 0 .../visualization/Container-Block-IO.json | 0 .../visualization/Container-CPU-usage.json | 0 .../visualization/Container-Memory-stats.json | 0 .../Disk-space-distribution.json | 0 .../visualization/Disk-space-overview.json | 0 .../{ => 5.x}/visualization/Disk-space.json | 0 .../Disk-utilization-over-time.json | 0 .../Free-disk-space-over-days.json | 0 .../In-vs-Out-Network-Bytes.json | 0 .../visualization/Memory-usage-over-time.json | 0 .../Memory-usage-per-process.json | 0 .../{ => 5.x}/visualization/Memory-usage.json | 0 .../visualization/Network-Bytes.json | 0 .../visualization/Network-Packetloss.json | 0 .../visualization/Number-of-Pids.json | 0 .../Number-of-processes-over-time.json | 0 .../visualization/Number-of-processes.json | 0 .../Packet-loss-on-interfaces.json | 0 .../visualization/Servers-overview.json | 0 .../visualization/Swap-usage-over-time.json | 0 .../{ => 5.x}/visualization/Swap-usage.json | 0 .../visualization/System-Load-over-time.json | 0 .../visualization/System-Navigation.json | 0 .../{ => 5.x}/visualization/System-load.json | 0 .../System-overview-by-host.json | 0 .../visualization/Top-10-interfaces.json | 0 .../Top-disks-by-memory-usage.json | 0 .../visualization/Top-hosts-by-CPU-usage.json | 0 .../visualization/Top-hosts-by-disk-size.json | 0 .../Top-hosts-by-memory-usage.json | 0 .../Top-processes-by-CPU-usage.json | 0 .../Top-processes-by-memory-usage.json | 0 .../{ => 5.x}/visualization/Total-Memory.json | 0 .../visualization/Total-files-over-days.json | 0 .../aa984970-1e0b-11e7-852e-cdcfcfdffddd.json | 0 .../ab2d1e90-1b1a-11e7-b09e-037021c4f8df.json | 0 .../bfa5e400-1b16-11e7-b09e-037021c4f8df.json | 0 .../d3166e80-1b91-11e7-bec4-a5e9ec5cab8b.json | 0 .../e0f001c0-1b18-11e7-b09e-037021c4f8df.json | 0 .../fe064790-1b1f-11e7-bec4-a5e9ec5cab8b.json | 0 .../6.x/dashboard/Metricbeat-system.json | 531 ++++++++++++++++++ .../default/dashboard/Metricbeat-system.json | 531 ++++++++++++++++++ .../dashboard/DNS-Unique-Domains.json | 0 .../_meta/kibana/{ => 5.x}/dashboard/DNS.json | 0 .../dashboard/Packetbeat-Cassandra.json | 0 .../dashboard/Packetbeat-Dashboard.json | 0 .../{ => 5.x}/dashboard/Packetbeat-Flows.json | 0 .../{ => 5.x}/dashboard/Packetbeat-HTTP.json | 0 .../Packetbeat-MongoDB-performance.json | 0 .../Packetbeat-MySQL-performance.json | 0 .../{ => 5.x}/dashboard/Packetbeat-NFS.json | 0 .../Packetbeat-PgSQL-performance.json | 0 .../Packetbeat-Thrift-performance.json | 0 .../kibana/5.x/index-pattern/packetbeat.json | 6 + .../{ => 5.x}/search/Cache-transactions.json | 0 .../{ => 5.x}/search/Cassandra-QueryView.json | 0 .../{ => 5.x}/search/DB-transactions.json | 0 .../_meta/kibana/{ => 5.x}/search/DNS.json | 0 .../kibana/{ => 5.x}/search/HTTP-errors.json | 0 .../{ => 5.x}/search/MongoDB-errors.json | 0 ...oDB-transactions-with-write-concern-0.json | 0 .../search/MongoDB-transactions.json | 0 .../{ => 5.x}/search/MySQL-Transactions.json | 0 .../kibana/{ => 5.x}/search/MySQL-errors.json | 0 .../{ => 5.x}/search/NFS-errors-search.json | 0 .../search/Packetbeat-Flows-Search.json | 0 .../{ => 5.x}/search/Packetbeat-Search.json | 0 .../kibana/{ => 5.x}/search/PgSQL-errors.json | 0 .../{ => 5.x}/search/PgSQL-transactions.json | 0 .../{ => 5.x}/search/RPC-transactions.json | 0 .../{ => 5.x}/search/Thrift-errors.json | 0 .../{ => 5.x}/search/Thrift-transactions.json | 0 .../{ => 5.x}/search/Transactions-errors.json | 0 .../{ => 5.x}/search/Web-transactions.json | 0 .../_meta/kibana/{ => 5.x}/search/nfs.json | 0 .../Bytes-Transferred-per-Domain.json | 0 .../visualization/Cache-transactions.json | 0 .../visualization/Cassandra-Ops.json | 0 .../visualization/Cassandra-RequestCount.json | 0 .../Cassandra-RequestCountByType.json | 0 .../Cassandra-RequestCountStackByType.json | 0 .../Cassandra-ResponseCountByType.json | 0 .../Cassandra-ResponseCountStackByType.json | 0 .../Cassandra-ResponseKeyspace.json | 0 .../visualization/Cassandra-ResponseTime.json | 0 .../visualization/Cassandra-ResponseType.json | 0 .../visualization/Client-locations.json | 0 .../visualization/Connections-over-time.json | 0 .../visualization/DB-transactions.json | 0 .../DNS-Count-and-Response-Time.json | 0 .../visualization/DNS-Query-Summary.json | 0 .../visualization/DNS-Question-Types.json | 0 .../DNS-Request-Status-Over-Time.json | 0 .../visualization/DNS-Response-Codes.json | 0 .../visualization/DNS-Top-10-Questions.json | 0 .../visualization/Errors-count-over-time.json | 0 .../Errors-vs-successful-transactions.json | 0 ...volution-of-the-CPU-times-per-process.json | 0 .../HTTP-codes-for-the-top-queries.json | 0 .../HTTP-error-codes-evolution.json | 0 .../visualization/HTTP-error-codes.json | 0 .../visualization/Latency-histogram.json | 0 .../visualization/MongoDB-commands.json | 0 .../MongoDB-errors-per-collection.json | 0 .../visualization/MongoDB-errors.json | 0 .../MongoDB-in-slash-out-throughput.json | 0 .../MongoDB-response-times-and-count.json | 0 .../MongoDB-response-times-by-collection.json | 0 .../Most-frequent-MySQL-queries.json | 0 .../Most-frequent-PgSQL-queries.json | 0 .../{ => 5.x}/visualization/MySQL-Errors.json | 0 .../visualization/MySQL-Methods.json | 0 .../visualization/MySQL-Reads-vs-Writes.json | 0 .../visualization/MySQL-throughput.json | 0 .../Mysql-response-times-percentiles.json | 0 .../visualization/NFS-bytes-in-slash-out.json | 0 .../visualization/NFS-clients-pie-chart.json | 0 .../{ => 5.x}/visualization/NFS-errors.json | 0 .../visualization/NFS-operation-table.json | 0 .../NFS-operations-area-chart.json | 0 .../visualization/NFS-response-times.json | 0 .../NFS-top-group-pie-chart.json | 0 .../NFS-top-users-pie-chart.json | 0 .../{ => 5.x}/visualization/Navigation.json | 0 .../Network-traffic-between-your-hosts.json | 0 ...nsactions-with-writeConcern-w-equal-0.json | 0 .../{ => 5.x}/visualization/PgSQL-Errors.json | 0 .../visualization/PgSQL-Methods.json | 0 .../visualization/PgSQL-Reads-vs-Writes.json | 0 .../PgSQL-response-times-percentiles.json | 0 .../visualization/PgSQL-throughput.json | 0 .../visualization/RPC-transactions.json | 0 .../visualization/Reads-versus-Writes.json | 0 .../Response-times-percentiles.json | 0 .../Response-times-repartition.json | 0 .../visualization/Slowest-MySQL-queries.json | 0 .../visualization/Slowest-PgSQL-queries.json | 0 .../Slowest-Thrift-RPC-methods.json | 0 .../visualization/Thrift-RPC-Errors.json | 0 .../Thrift-requests-per-minute.json | 0 .../Thrift-response-times-percentiles.json | 0 .../visualization/Top-10-HTTP-requests.json | 0 .../Top-Thrift-RPC-calls-with-errors.json | 0 .../visualization/Top-Thrift-RPC-methods.json | 0 .../Top-hosts-creating-traffic.json | 0 .../Top-hosts-receiving-traffic.json | 0 .../Top-slowest-MongoDB-queries.json | 0 .../Total-number-of-HTTP-transactions.json | 0 ...time-spent-in-each-MongoDB-collection.json | 0 .../Unique-FQDNs-per-eTLD 1-Table.json | 0 .../Unique-FQDNs-per-eTLD 1.json | 0 .../visualization/Web-transactions.json | 0 .../dc743240-1665-11e7-a6de-cbac1a3d0a7d.json | 0 .../default/index-pattern/packetbeat.json | 16 + packetbeat/packetbeat.reference.yml | 21 +- packetbeat/packetbeat.yml | 25 + testing/environments/args.yml | 4 +- .../dashboard/Winlogbeat-Dashboard.json | 0 .../kibana/5.x/index-pattern/winlogbeat.json | 6 + .../{ => 5.x}/search/Winlogbeat-Search.json | 0 .../visualization/Errors-count-over-time.json | 0 .../{ => 5.x}/visualization/Event-Levels.json | 0 ...volution-of-the-CPU-times-per-process.json | 0 ...mber-of-Events-Over-Time-By-Event-Log.json | 0 .../visualization/Number-of-Events.json | 0 .../{ => 5.x}/visualization/Sources.json | 0 .../visualization/Top-Event-IDs.json | 0 .../default/index-pattern/winlogbeat.json | 16 + winlogbeat/winlogbeat.reference.yml | 21 +- winlogbeat/winlogbeat.yml | 25 + 417 files changed, 4754 insertions(+), 806 deletions(-) create mode 100644 auditbeat/module/audit/_meta/kibana/default/dashboard/auditbeat-audit.json create mode 100644 dev-tools/cmd/dashboards/.gitignore create mode 100644 dev-tools/cmd/dashboards/Makefile rename dev-tools/{export_dashboards.py => cmd/dashboards/export_5x_dashboards.py} (100%) create mode 100644 dev-tools/cmd/dashboards/export_dashboards.go delete mode 100644 dev-tools/cmd/import_dashboards/.gitignore delete mode 100644 dev-tools/cmd/import_dashboards/Makefile delete mode 100644 dev-tools/cmd/import_dashboards/import_dashboards.go rename filebeat/module/apache2/_meta/kibana/{ => 5.x}/dashboard/Filebeat-Apache2-Dashboard.json (100%) rename filebeat/module/apache2/_meta/kibana/{ => 5.x}/search/Apache2-access-logs.json (100%) rename filebeat/module/apache2/_meta/kibana/{ => 5.x}/search/Apache2-errors-log.json (100%) rename filebeat/module/apache2/_meta/kibana/{ => 5.x}/visualization/Apache2-access-unique-IPs-map.json (100%) rename filebeat/module/apache2/_meta/kibana/{ => 5.x}/visualization/Apache2-browsers.json (100%) rename filebeat/module/apache2/_meta/kibana/{ => 5.x}/visualization/Apache2-error-logs-over-time.json (100%) rename filebeat/module/apache2/_meta/kibana/{ => 5.x}/visualization/Apache2-operating-systems.json (100%) rename filebeat/module/apache2/_meta/kibana/{ => 5.x}/visualization/Apache2-response-codes-of-top-URLs.json (100%) rename filebeat/module/apache2/_meta/kibana/{ => 5.x}/visualization/Apache2-response-codes-over-time.json (100%) create mode 100644 filebeat/module/apache2/_meta/kibana/default/dashboard/filebeat-apache2.json rename filebeat/module/auditd/_meta/kibana/{ => 5.x}/dashboard/dfbb49f0-0a0f-11e7-8a62-2d05eaaac5cb.json (100%) rename filebeat/module/auditd/_meta/kibana/{ => 5.x}/search/4ac0a370-0a11-11e7-8b04-eb22a5669f27.json (100%) rename filebeat/module/auditd/_meta/kibana/{ => 5.x}/visualization/2bb0fa70-0a11-11e7-9e84-43da493ad0c7.json (100%) rename filebeat/module/auditd/_meta/kibana/{ => 5.x}/visualization/5ebdbe50-0a0f-11e7-825f-6748cda7d858.json (100%) rename filebeat/module/auditd/_meta/kibana/{ => 5.x}/visualization/6295bdd0-0a0e-11e7-825f-6748cda7d858.json (100%) rename filebeat/module/auditd/_meta/kibana/{ => 5.x}/visualization/c5411910-0a87-11e7-8b04-eb22a5669f27.json (100%) rename filebeat/module/auditd/_meta/kibana/{ => 5.x}/visualization/d1726930-0a7f-11e7-8b04-eb22a5669f27.json (100%) create mode 100644 filebeat/module/auditd/_meta/kibana/default/dashboard/filebeat-auditd.json rename filebeat/module/icinga/_meta/kibana/{ => 5.x}/dashboard/26309570-2419-11e7-a83b-d5f4cebac9ff.json (100%) rename filebeat/module/icinga/_meta/kibana/{ => 5.x}/dashboard/b9163ea0-2417-11e7-a83b-d5f4cebac9ff.json (100%) rename filebeat/module/icinga/_meta/kibana/{ => 5.x}/dashboard/f693d260-2417-11e7-a83b-d5f4cebac9ff.json (100%) rename filebeat/module/icinga/_meta/kibana/{ => 5.x}/search/710043e0-2417-11e7-a83b-d5f4cebac9ff.json (100%) rename filebeat/module/icinga/_meta/kibana/{ => 5.x}/search/c876e6a0-2418-11e7-a83b-d5f4cebac9ff.json (100%) rename filebeat/module/icinga/_meta/kibana/{ => 5.x}/search/ffaf5a30-2413-11e7-a0d9-39604d45ca7f.json (100%) rename filebeat/module/icinga/_meta/kibana/{ => 5.x}/visualization/0bc34b60-2419-11e7-a83b-d5f4cebac9ff.json (100%) rename filebeat/module/icinga/_meta/kibana/{ => 5.x}/visualization/2cf77780-2418-11e7-a83b-d5f4cebac9ff.json (100%) rename filebeat/module/icinga/_meta/kibana/{ => 5.x}/visualization/a59b5e00-2417-11e7-a83b-d5f4cebac9ff.json (100%) rename filebeat/module/icinga/_meta/kibana/{ => 5.x}/visualization/d8e5dc40-2417-11e7-a83b-d5f4cebac9ff.json (100%) rename filebeat/module/icinga/_meta/kibana/{ => 5.x}/visualization/fb09d4b0-2418-11e7-a83b-d5f4cebac9ff.json (100%) create mode 100644 filebeat/module/icinga/_meta/kibana/default/dashboard/filebeat-icinga.json rename filebeat/module/mysql/_meta/kibana/{ => 5.x}/dashboard/Filebeat-MySQL-Dashboard.json (100%) rename filebeat/module/mysql/_meta/kibana/{ => 5.x}/search/Filebeat-MySQL-Slow-log.json (100%) rename filebeat/module/mysql/_meta/kibana/{ => 5.x}/search/Filebeat-MySQL-error-log.json (100%) rename filebeat/module/mysql/_meta/kibana/{ => 5.x}/visualization/MySQL-Error-logs-levels.json (100%) rename filebeat/module/mysql/_meta/kibana/{ => 5.x}/visualization/MySQL-Slow-logs-by-count.json (100%) rename filebeat/module/mysql/_meta/kibana/{ => 5.x}/visualization/MySQL-Slow-queries-over-time.json (100%) rename filebeat/module/mysql/_meta/kibana/{ => 5.x}/visualization/MySQL-error-logs.json (100%) rename filebeat/module/mysql/_meta/kibana/{ => 5.x}/visualization/MySQL-slowest-queries.json (100%) create mode 100644 filebeat/module/mysql/_meta/kibana/default/dashboard/filebeat-mysql.json rename filebeat/module/nginx/_meta/kibana/{ => 5.x}/dashboard/Filebeat-Nginx-Dashboard.json (100%) rename filebeat/module/nginx/_meta/kibana/{ => 5.x}/search/Filebeat-Nginx-module.json (100%) rename filebeat/module/nginx/_meta/kibana/{ => 5.x}/visualization/Errors-over-time.json (100%) rename filebeat/module/nginx/_meta/kibana/{ => 5.x}/visualization/New-Visualization.json (100%) rename filebeat/module/nginx/_meta/kibana/{ => 5.x}/visualization/Nginx-Access-Browsers.json (100%) rename filebeat/module/nginx/_meta/kibana/{ => 5.x}/visualization/Nginx-Access-Map.json (100%) rename filebeat/module/nginx/_meta/kibana/{ => 5.x}/visualization/Nginx-Access-OSes.json (100%) rename filebeat/module/nginx/_meta/kibana/{ => 5.x}/visualization/Nginx-Access-Response-codes-by-top-URLs.json (100%) rename filebeat/module/nginx/_meta/kibana/{ => 5.x}/visualization/Sent-sizes.json (100%) create mode 100644 filebeat/module/nginx/_meta/kibana/default/dashboard/filebeat-nginx.json rename filebeat/module/redis/_meta/kibana/{ => 5.x}/dashboard/7fea2930-478e-11e7-b1f0-cb29bac6bf8b.json (100%) rename filebeat/module/redis/_meta/kibana/{ => 5.x}/search/0ab87b80-478e-11e7-b1f0-cb29bac6bf8b.json (100%) rename filebeat/module/redis/_meta/kibana/{ => 5.x}/search/73613570-4791-11e7-be88-2ddb32f3df97.json (100%) rename filebeat/module/redis/_meta/kibana/{ => 5.x}/visualization/78b9afe0-478f-11e7-b1f0-cb29bac6bf8b.json (100%) rename filebeat/module/redis/_meta/kibana/{ => 5.x}/visualization/d2864600-478f-11e7-be88-2ddb32f3df97.json (100%) rename filebeat/module/redis/_meta/kibana/{ => 5.x}/visualization/dcccaa80-4791-11e7-be88-2ddb32f3df97.json (100%) create mode 100644 filebeat/module/redis/_meta/kibana/default/dashboard/filebeat-redis.json rename filebeat/module/system/_meta/kibana/{ => 5.x}/dashboard/0d3f2380-fa78-11e6-ae9b-81e5311e8cab.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/dashboard/277876d0-fa2c-11e6-bbd3-29c986c96e5a.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/dashboard/5517a150-f9ce-11e6-8115-a7c18106d86a.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/dashboard/Filebeat-syslog-dashboard.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/search/62439dc0-f9c9-11e6-a747-6121780e0414.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/search/8030c1b0-fa77-11e6-ae9b-81e5311e8cab.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/search/Syslog-system-logs.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/search/b6f321e0-fa25-11e6-bbd3-29c986c96e5a.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/search/eb0039f0-fa7f-11e6-a1df-a78bd7504d38.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/visualization/12667040-fa80-11e6-a1df-a78bd7504d38.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/visualization/341ffe70-f9ce-11e6-8115-a7c18106d86a.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/visualization/346bb290-fa80-11e6-a1df-a78bd7504d38.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/visualization/3cec3eb0-f9d3-11e6-8a3e-2b904044ea1d.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/visualization/51164310-fa2b-11e6-bbd3-29c986c96e5a.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/visualization/5c7af030-fa2a-11e6-bbd3-29c986c96e5a.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/visualization/5dd15c00-fa78-11e6-ae9b-81e5311e8cab.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/visualization/78b74f30-f9cd-11e6-8115-a7c18106d86a.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/visualization/Syslog-events-by-hostname.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/visualization/Syslog-hostnames-and-processes.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/visualization/d16bb400-f9cc-11e6-8115-a7c18106d86a.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/visualization/d56ee420-fa79-11e6-a1df-a78bd7504d38.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/visualization/dc589770-fa2b-11e6-bbd3-29c986c96e5a.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/visualization/e121b140-fa78-11e6-a1df-a78bd7504d38.json (100%) rename filebeat/module/system/_meta/kibana/{ => 5.x}/visualization/f398d2f0-fa77-11e6-ae9b-81e5311e8cab.json (100%) create mode 100644 filebeat/module/system/_meta/kibana/default/dashboard/filebeat-system.json rename heartbeat/_meta/kibana/{ => 5.x}/dashboard/f3e771c0-eb19-11e6-be20-559646f8b9ba.json (100%) create mode 100644 heartbeat/_meta/kibana/5.x/index-pattern/heartbeat.json rename heartbeat/_meta/kibana/{ => 5.x}/search/02014c80-29d2-11e7-a68f-bfaa2341cc52.json (100%) rename heartbeat/_meta/kibana/{ => 5.x}/visualization/091c3a90-eb1e-11e6-be20-559646f8b9ba.json (100%) rename heartbeat/_meta/kibana/{ => 5.x}/visualization/0f4c0560-eb20-11e6-9f11-159ff202874a.json (100%) rename heartbeat/_meta/kibana/{ => 5.x}/visualization/1738dbc0-eb1d-11e6-be20-559646f8b9ba.json (100%) rename heartbeat/_meta/kibana/{ => 5.x}/visualization/920e8140-eb1a-11e6-be20-559646f8b9ba.json (100%) rename heartbeat/_meta/kibana/{ => 5.x}/visualization/c65ef340-eb19-11e6-be20-559646f8b9ba.json (100%) create mode 100644 heartbeat/_meta/kibana/default/index-pattern/heartbeat.json create mode 100644 libbeat/_meta/kibana/5.x/index-pattern/libbeat.json create mode 100644 libbeat/_meta/kibana/default/index-pattern/libbeat.json create mode 100644 libbeat/common/url.go create mode 100644 libbeat/common/url_test.go create mode 100644 libbeat/dashboards/es_loader.go rename libbeat/dashboards/{importer_integration_test.go => es_loader_test.go} (64%) create mode 100644 libbeat/dashboards/kibana_loader.go create mode 100644 libbeat/setup/kibana/client.go create mode 100644 libbeat/setup/kibana/config.go rename metricbeat/module/apache/_meta/kibana/{ => 5.x}/dashboard/Metricbeat-Apache-HTTPD-server-status.json (100%) rename metricbeat/module/apache/_meta/kibana/{ => 5.x}/search/Apache-HTTPD.json (100%) rename metricbeat/module/apache/_meta/kibana/{ => 5.x}/visualization/Apache-HTTPD-CPU.json (100%) rename metricbeat/module/apache/_meta/kibana/{ => 5.x}/visualization/Apache-HTTPD-Hostname-list.json (100%) rename metricbeat/module/apache/_meta/kibana/{ => 5.x}/visualization/Apache-HTTPD-Load1-slash-5-slash-15.json (100%) rename metricbeat/module/apache/_meta/kibana/{ => 5.x}/visualization/Apache-HTTPD-Scoreboard.json (100%) rename metricbeat/module/apache/_meta/kibana/{ => 5.x}/visualization/Apache-HTTPD-Total-accesses-and-kbytes.json (100%) rename metricbeat/module/apache/_meta/kibana/{ => 5.x}/visualization/Apache-HTTPD-Uptime.json (100%) rename metricbeat/module/apache/_meta/kibana/{ => 5.x}/visualization/Apache-HTTPD-Workers.json (100%) create mode 100644 metricbeat/module/apache/_meta/kibana/default/dashboard/Metricbeat-apache.json rename metricbeat/module/docker/_meta/kibana/{ => 5.x}/dashboard/Metricbeat-Docker.json (100%) rename metricbeat/module/docker/_meta/kibana/{ => 5.x}/search/Metricbeat-Docker.json (100%) rename metricbeat/module/docker/_meta/kibana/{ => 5.x}/visualization/Docker-CPU-usage.json (100%) rename metricbeat/module/docker/_meta/kibana/{ => 5.x}/visualization/Docker-Network-IO.json (100%) rename metricbeat/module/docker/_meta/kibana/{ => 5.x}/visualization/Docker-Number-of-Containers.json (100%) rename metricbeat/module/docker/_meta/kibana/{ => 5.x}/visualization/Docker-containers-per-host.json (100%) rename metricbeat/module/docker/_meta/kibana/{ => 5.x}/visualization/Docker-containers.json (100%) rename metricbeat/module/docker/_meta/kibana/{ => 5.x}/visualization/Docker-images-and-names.json (100%) rename metricbeat/module/docker/_meta/kibana/{ => 5.x}/visualization/Docker-memory-usage.json (100%) create mode 100644 metricbeat/module/docker/_meta/kibana/default/dashboard/Metricbeat-docker.json rename metricbeat/module/golang/_meta/kibana/{ => 5.x}/dashboard/f2dc7320-f519-11e6-a3c9-9d1f7c42b045.json (100%) rename metricbeat/module/golang/_meta/kibana/{ => 5.x}/visualization/58000780-f529-11e6-844d-b170e2f0a07e.json (100%) rename metricbeat/module/golang/_meta/kibana/{ => 5.x}/visualization/95388680-f52a-11e6-969c-518c48c913e4.json (100%) rename metricbeat/module/golang/_meta/kibana/{ => 5.x}/visualization/9a9a8bf0-f52a-11e6-969c-518c48c913e4.json (100%) rename metricbeat/module/golang/_meta/kibana/{ => 5.x}/visualization/ab226b50-f52a-11e6-969c-518c48c913e4.json (100%) rename metricbeat/module/golang/_meta/kibana/{ => 5.x}/visualization/b046cb80-f52a-11e6-969c-518c48c913e4.json (100%) rename metricbeat/module/golang/_meta/kibana/{ => 5.x}/visualization/b59a5200-f52a-11e6-969c-518c48c913e4.json (100%) create mode 100644 metricbeat/module/golang/_meta/kibana/default/dashboard/Metricbeat-golang.json rename metricbeat/module/kubernetes/_meta/kibana/{ => 5.x}/dashboard/022a54c0-2bf5-11e7-859b-f78b612cde28.json (100%) rename metricbeat/module/kubernetes/_meta/kibana/{ => 5.x}/visualization/022a54c0-2bf5-11e7-859b-f78b612cde28.json (100%) rename metricbeat/module/kubernetes/_meta/kibana/{ => 5.x}/visualization/16fa4470-2bfd-11e7-859b-f78b612cde28.json (100%) rename metricbeat/module/kubernetes/_meta/kibana/{ => 5.x}/visualization/174a6ad0-30e0-11e7-8df8-6d3604a72912.json (100%) rename metricbeat/module/kubernetes/_meta/kibana/{ => 5.x}/visualization/294546b0-30d6-11e7-8df8-6d3604a72912.json (100%) rename metricbeat/module/kubernetes/_meta/kibana/{ => 5.x}/visualization/408fccf0-30d6-11e7-8df8-6d3604a72912.json (100%) rename metricbeat/module/kubernetes/_meta/kibana/{ => 5.x}/visualization/44f12b40-2bf4-11e7-859b-f78b612cde28.json (100%) rename metricbeat/module/kubernetes/_meta/kibana/{ => 5.x}/visualization/58e644f0-30d6-11e7-8df8-6d3604a72912.json (100%) rename metricbeat/module/kubernetes/_meta/kibana/{ => 5.x}/visualization/7aac4fd0-30e0-11e7-8df8-6d3604a72912.json (100%) rename metricbeat/module/kubernetes/_meta/kibana/{ => 5.x}/visualization/a4c9d360-30df-11e7-8df8-6d3604a72912.json (100%) rename metricbeat/module/kubernetes/_meta/kibana/{ => 5.x}/visualization/cd059410-2bfb-11e7-859b-f78b612cde28.json (100%) rename metricbeat/module/kubernetes/_meta/kibana/{ => 5.x}/visualization/d6564360-2bfc-11e7-859b-f78b612cde28.json (100%) rename metricbeat/module/kubernetes/_meta/kibana/{ => 5.x}/visualization/da1ff7c0-30ed-11e7-b9e5-2b5b07213ab3.json (100%) rename metricbeat/module/kubernetes/_meta/kibana/{ => 5.x}/visualization/e1018b90-2bfb-11e7-859b-f78b612cde28.json (100%) create mode 100644 metricbeat/module/kubernetes/_meta/kibana/default/dashboard/Metricbeat-kubernetes.json rename metricbeat/module/mongodb/_meta/kibana/{ => 5.x}/dashboard/Metricbeat-MongoDB.json (100%) rename metricbeat/module/mongodb/_meta/kibana/{ => 5.x}/search/MongoDB-search.json (100%) rename metricbeat/module/mongodb/_meta/kibana/{ => 5.x}/visualization/MongoDB-Concurrent-transactions-Read.json (100%) rename metricbeat/module/mongodb/_meta/kibana/{ => 5.x}/visualization/MongoDB-Concurrent-transactions-Write.json (100%) rename metricbeat/module/mongodb/_meta/kibana/{ => 5.x}/visualization/MongoDB-Engine-ampersand-Version.json (100%) rename metricbeat/module/mongodb/_meta/kibana/{ => 5.x}/visualization/MongoDB-WiredTiger-Cache.json (100%) rename metricbeat/module/mongodb/_meta/kibana/{ => 5.x}/visualization/MongoDB-asserts.json (100%) rename metricbeat/module/mongodb/_meta/kibana/{ => 5.x}/visualization/MongoDB-hosts.json (100%) rename metricbeat/module/mongodb/_meta/kibana/{ => 5.x}/visualization/MongoDB-memory-stats.json (100%) rename metricbeat/module/mongodb/_meta/kibana/{ => 5.x}/visualization/MongoDB-operation-counters.json (100%) create mode 100644 metricbeat/module/mongodb/_meta/kibana/default/dashboard/Metricbeat-mongodb.json rename metricbeat/module/mysql/_meta/kibana/{ => 5.x}/dashboard/66881e90-0006-11e7-bf7f-c9acc3d3e306.json (100%) rename metricbeat/module/mysql/_meta/kibana/{ => 5.x}/search/67e88e60-0005-11e7-aaf1-b342e4b94bb0.json (100%) rename metricbeat/module/mysql/_meta/kibana/{ => 5.x}/visualization/0f506420-0006-11e7-bf7f-c9acc3d3e306.json (100%) rename metricbeat/module/mysql/_meta/kibana/{ => 5.x}/visualization/1a99f2b0-0006-11e7-bf7f-c9acc3d3e306.json (100%) rename metricbeat/module/mysql/_meta/kibana/{ => 5.x}/visualization/1eda2280-0008-11e7-82f3-2f380154876c.json (100%) rename metricbeat/module/mysql/_meta/kibana/{ => 5.x}/visualization/1ede99e0-0009-11e7-8cd4-73b67e9e3f3c.json (100%) rename metricbeat/module/mysql/_meta/kibana/{ => 5.x}/visualization/45a00c10-0006-11e7-bf7f-c9acc3d3e306.json (100%) rename metricbeat/module/mysql/_meta/kibana/{ => 5.x}/visualization/4c36c420-000a-11e7-8cd4-73b67e9e3f3c.json (100%) rename metricbeat/module/mysql/_meta/kibana/{ => 5.x}/visualization/a2175300-000a-11e7-b001-85aac4878445.json (100%) rename metricbeat/module/mysql/_meta/kibana/{ => 5.x}/visualization/e784dc50-0005-11e7-bf7f-c9acc3d3e306.json (100%) create mode 100644 metricbeat/module/mysql/_meta/kibana/default/dashboard/Metricbeat-mysql.json rename metricbeat/module/redis/_meta/kibana/{ => 5.x}/dashboard/Metricbeat-Redis.json (100%) rename metricbeat/module/redis/_meta/kibana/{ => 5.x}/search/Metricbeat-Redis.json (100%) rename metricbeat/module/redis/_meta/kibana/{ => 5.x}/visualization/Redis-Clients-Metrics.json (100%) rename metricbeat/module/redis/_meta/kibana/{ => 5.x}/visualization/Redis-Connected-clients.json (100%) rename metricbeat/module/redis/_meta/kibana/{ => 5.x}/visualization/Redis-Keyspaces.json (100%) rename metricbeat/module/redis/_meta/kibana/{ => 5.x}/visualization/Redis-Server-Versions.json (100%) rename metricbeat/module/redis/_meta/kibana/{ => 5.x}/visualization/Redis-hosts.json (100%) rename metricbeat/module/redis/_meta/kibana/{ => 5.x}/visualization/Redis-multiplexing-API.json (100%) rename metricbeat/module/redis/_meta/kibana/{ => 5.x}/visualization/Redis-server-mode.json (100%) create mode 100644 metricbeat/module/redis/_meta/kibana/default/dashboard/Metricbeat-redis.json rename metricbeat/module/system/_meta/kibana/{ => 5.x}/dashboard/79ffd6e0-faa0-11e6-947f-177f697178b8.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/dashboard/CPU-slash-Memory-per-container.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/dashboard/Metricbeat-cpu.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/dashboard/Metricbeat-filesystem-per-Host.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/dashboard/Metricbeat-filesystem.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/dashboard/Metricbeat-memory.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/dashboard/Metricbeat-network.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/dashboard/Metricbeat-overview.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/dashboard/Metricbeat-processes.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/dashboard/Metricbeat-system-overview.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/dashboard/d1f1f9e0-1b1c-11e7-b09e-037021c4f8df.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/search/Cpu-Load-stats.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/search/Cpu-stats.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/search/Filesystem-stats.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/search/Fsstats.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/search/Load-stats.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/search/Memory-stats.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/search/Network-data.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/search/Process-stats.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/search/System-stats.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/089b85d0-1b16-11e7-b09e-037021c4f8df.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/1aae9140-1b93-11e7-8ada-3df93aab833e.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/217025e0-2a69-11e7-99f0-399f2a11b723.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/26732e20-1b91-11e7-bec4-a5e9ec5cab8b.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/2e224660-1b19-11e7-b09e-037021c4f8df.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/34f97ee0-1b96-11e7-8ada-3df93aab833e.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/4d546850-1b15-11e7-b09e-037021c4f8df.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/4e4bb1e0-1b1b-11e7-b09e-037021c4f8df.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/522ee670-1b92-11e7-bec4-a5e9ec5cab8b.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/6b7b9a40-faa1-11e6-86b1-cd7735ff7e23.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/83e12df0-1b91-11e7-bec4-a5e9ec5cab8b.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/855899e0-1b1c-11e7-b09e-037021c4f8df.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/95490a10-1e23-11e7-958f-490b8dcb96d8.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Available-Memory.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/CPU-Usage.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/CPU-usage-over-time.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/CPU-usage-per-process.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Container-Block-IO.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Container-CPU-usage.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Container-Memory-stats.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Disk-space-distribution.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Disk-space-overview.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Disk-space.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Disk-utilization-over-time.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Free-disk-space-over-days.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/In-vs-Out-Network-Bytes.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Memory-usage-over-time.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Memory-usage-per-process.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Memory-usage.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Network-Bytes.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Network-Packetloss.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Number-of-Pids.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Number-of-processes-over-time.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Number-of-processes.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Packet-loss-on-interfaces.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Servers-overview.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Swap-usage-over-time.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Swap-usage.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/System-Load-over-time.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/System-Navigation.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/System-load.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/System-overview-by-host.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Top-10-interfaces.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Top-disks-by-memory-usage.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Top-hosts-by-CPU-usage.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Top-hosts-by-disk-size.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Top-hosts-by-memory-usage.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Top-processes-by-CPU-usage.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Top-processes-by-memory-usage.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Total-Memory.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/Total-files-over-days.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/aa984970-1e0b-11e7-852e-cdcfcfdffddd.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/ab2d1e90-1b1a-11e7-b09e-037021c4f8df.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/bfa5e400-1b16-11e7-b09e-037021c4f8df.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/d3166e80-1b91-11e7-bec4-a5e9ec5cab8b.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/e0f001c0-1b18-11e7-b09e-037021c4f8df.json (100%) rename metricbeat/module/system/_meta/kibana/{ => 5.x}/visualization/fe064790-1b1f-11e7-bec4-a5e9ec5cab8b.json (100%) create mode 100644 metricbeat/module/system/_meta/kibana/6.x/dashboard/Metricbeat-system.json create mode 100644 metricbeat/module/system/_meta/kibana/default/dashboard/Metricbeat-system.json rename packetbeat/_meta/kibana/{ => 5.x}/dashboard/DNS-Unique-Domains.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/dashboard/DNS.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/dashboard/Packetbeat-Cassandra.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/dashboard/Packetbeat-Dashboard.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/dashboard/Packetbeat-Flows.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/dashboard/Packetbeat-HTTP.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/dashboard/Packetbeat-MongoDB-performance.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/dashboard/Packetbeat-MySQL-performance.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/dashboard/Packetbeat-NFS.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/dashboard/Packetbeat-PgSQL-performance.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/dashboard/Packetbeat-Thrift-performance.json (100%) create mode 100644 packetbeat/_meta/kibana/5.x/index-pattern/packetbeat.json rename packetbeat/_meta/kibana/{ => 5.x}/search/Cache-transactions.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/Cassandra-QueryView.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/DB-transactions.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/DNS.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/HTTP-errors.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/MongoDB-errors.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/MongoDB-transactions-with-write-concern-0.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/MongoDB-transactions.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/MySQL-Transactions.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/MySQL-errors.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/NFS-errors-search.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/Packetbeat-Flows-Search.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/Packetbeat-Search.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/PgSQL-errors.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/PgSQL-transactions.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/RPC-transactions.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/Thrift-errors.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/Thrift-transactions.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/Transactions-errors.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/Web-transactions.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/search/nfs.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Bytes-Transferred-per-Domain.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Cache-transactions.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Cassandra-Ops.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Cassandra-RequestCount.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Cassandra-RequestCountByType.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Cassandra-RequestCountStackByType.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Cassandra-ResponseCountByType.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Cassandra-ResponseCountStackByType.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Cassandra-ResponseKeyspace.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Cassandra-ResponseTime.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Cassandra-ResponseType.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Client-locations.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Connections-over-time.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/DB-transactions.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/DNS-Count-and-Response-Time.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/DNS-Query-Summary.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/DNS-Question-Types.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/DNS-Request-Status-Over-Time.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/DNS-Response-Codes.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/DNS-Top-10-Questions.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Errors-count-over-time.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Errors-vs-successful-transactions.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Evolution-of-the-CPU-times-per-process.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/HTTP-codes-for-the-top-queries.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/HTTP-error-codes-evolution.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/HTTP-error-codes.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Latency-histogram.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/MongoDB-commands.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/MongoDB-errors-per-collection.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/MongoDB-errors.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/MongoDB-in-slash-out-throughput.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/MongoDB-response-times-and-count.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/MongoDB-response-times-by-collection.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Most-frequent-MySQL-queries.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Most-frequent-PgSQL-queries.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/MySQL-Errors.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/MySQL-Methods.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/MySQL-Reads-vs-Writes.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/MySQL-throughput.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Mysql-response-times-percentiles.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/NFS-bytes-in-slash-out.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/NFS-clients-pie-chart.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/NFS-errors.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/NFS-operation-table.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/NFS-operations-area-chart.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/NFS-response-times.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/NFS-top-group-pie-chart.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/NFS-top-users-pie-chart.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Navigation.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Network-traffic-between-your-hosts.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Number-of-MongoDB-transactions-with-writeConcern-w-equal-0.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/PgSQL-Errors.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/PgSQL-Methods.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/PgSQL-Reads-vs-Writes.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/PgSQL-response-times-percentiles.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/PgSQL-throughput.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/RPC-transactions.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Reads-versus-Writes.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Response-times-percentiles.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Response-times-repartition.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Slowest-MySQL-queries.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Slowest-PgSQL-queries.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Slowest-Thrift-RPC-methods.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Thrift-RPC-Errors.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Thrift-requests-per-minute.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Thrift-response-times-percentiles.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Top-10-HTTP-requests.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Top-Thrift-RPC-calls-with-errors.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Top-Thrift-RPC-methods.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Top-hosts-creating-traffic.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Top-hosts-receiving-traffic.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Top-slowest-MongoDB-queries.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Total-number-of-HTTP-transactions.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Total-time-spent-in-each-MongoDB-collection.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Unique-FQDNs-per-eTLD 1-Table.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Unique-FQDNs-per-eTLD 1.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/Web-transactions.json (100%) rename packetbeat/_meta/kibana/{ => 5.x}/visualization/dc743240-1665-11e7-a6de-cbac1a3d0a7d.json (100%) create mode 100644 packetbeat/_meta/kibana/default/index-pattern/packetbeat.json rename winlogbeat/_meta/kibana/{ => 5.x}/dashboard/Winlogbeat-Dashboard.json (100%) create mode 100644 winlogbeat/_meta/kibana/5.x/index-pattern/winlogbeat.json rename winlogbeat/_meta/kibana/{ => 5.x}/search/Winlogbeat-Search.json (100%) rename winlogbeat/_meta/kibana/{ => 5.x}/visualization/Errors-count-over-time.json (100%) rename winlogbeat/_meta/kibana/{ => 5.x}/visualization/Event-Levels.json (100%) rename winlogbeat/_meta/kibana/{ => 5.x}/visualization/Evolution-of-the-CPU-times-per-process.json (100%) rename winlogbeat/_meta/kibana/{ => 5.x}/visualization/Number-of-Events-Over-Time-By-Event-Log.json (100%) rename winlogbeat/_meta/kibana/{ => 5.x}/visualization/Number-of-Events.json (100%) rename winlogbeat/_meta/kibana/{ => 5.x}/visualization/Sources.json (100%) rename winlogbeat/_meta/kibana/{ => 5.x}/visualization/Top-Event-IDs.json (100%) create mode 100644 winlogbeat/_meta/kibana/default/index-pattern/winlogbeat.json diff --git a/.travis.yml b/.travis.yml index 688d0b51172..0a4baf85bfb 100644 --- a/.travis.yml +++ b/.travis.yml @@ -85,12 +85,6 @@ jobs: go: $GO_VERSION stage: test - # Dashboards - - os: linux - env: TARGETS="-C dev-tools/cmd/import_dashboards" - go: $GO_VERSION - stage: test - # Generators - os: linux env: TARGETS="-C generator/metricbeat test" diff --git a/auditbeat/auditbeat.reference.yml b/auditbeat/auditbeat.reference.yml index 68b12013210..370b46f9b81 100644 --- a/auditbeat/auditbeat.reference.yml +++ b/auditbeat/auditbeat.reference.yml @@ -619,7 +619,7 @@ output.elasticsearch: #============================== Dashboards ===================================== # These settings control loading the sample dashboards to the Kibana index. Loading # the dashboards is disabled by default and can be enabled either by setting the -# options here, or by using the `-setup` CLI flag. +# options here, or by using the `-setup` CLI flag or the `setup` command. #setup.dashboards.enabled: false # The URL from where to download the dashboards archive. By default this URL @@ -675,6 +675,25 @@ output.elasticsearch: # Overwrite existing template #setup.template.overwrite: false +#============================== Kibana ===================================== + +# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API. +# This requires a Kibana endpoint configuration. +setup.kibana: + + # Kibana Host + # Scheme and port can be left out and will be set to the default (http and 5601) + # In case you specify and additional path, the scheme is required: http://localhost:5601/path + # IPv6 addresses should always be defined as: https://[2001:db8::1]:5601 + #host: "localhost:5601" + + # Optional protocol and basic auth crendentials. + #protocol: "https" + #username: "elastic" + #password: "changeme" + + # Optional HTTP Path + #path: "" #================================ HTTP Endpoint ====================================== # Each beat can expose internal data points through a http endpoint. For security diff --git a/auditbeat/auditbeat.yml b/auditbeat/auditbeat.yml index c72f56b7c4e..47b13199d40 100644 --- a/auditbeat/auditbeat.yml +++ b/auditbeat/auditbeat.yml @@ -38,6 +38,31 @@ auditbeat.modules: #fields: # env: staging + +#============================== Dashboards ===================================== +# These settings control loading the sample dashboards to the Kibana index. Loading +# the dashboards is disabled by default and can be enabled either by setting the +# options here, or by using the `-setup` CLI flag or the `setup` command. +#setup.dashboards.enabled: false + +# The URL from where to download the dashboards archive. By default this URL +# has a value which is computed based on the Beat name and version. For released +# versions, this URL points to the dashboard archive on the artifacts.elastic.co +# website. +#setup.dashboards.url: + +#============================== Kibana ===================================== + +# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API. +# This requires a Kibana endpoint configuration. +setup.kibana: + + # Kibana Host + # Scheme and port can be left out and will be set to the default (http and 5601) + # In case you specify and additional path, the scheme is required: http://localhost:5601/path + # IPv6 addresses should always be defined as: https://[2001:db8::1]:5601 + #host: "localhost:5601" + #================================ Outputs ===================================== # Configure what outputs to use when sending the data collected by the beat. diff --git a/auditbeat/module/audit/_meta/kibana/default/dashboard/auditbeat-audit.json b/auditbeat/module/audit/_meta/kibana/default/dashboard/auditbeat-audit.json new file mode 100644 index 00000000000..f1a4b09b30d --- /dev/null +++ b/auditbeat/module/audit/_meta/kibana/default/dashboard/auditbeat-audit.json @@ -0,0 +1,132 @@ +{ + "objects": [ + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\n \"filter\": []\n}" + }, + "savedSearchId": "02014c80-29d2-11e7-a68f-bfaa2341cc52", + "title": "HTTP ping times", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\n \"title\": \"HTTP ping times\",\n \"type\": \"area\",\n \"params\": {\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"scale\": \"linear\",\n \"interpolate\": \"linear\",\n \"mode\": \"stacked\",\n \"times\": [],\n \"addTimeMarker\": false,\n \"defaultYExtents\": false,\n \"setYExtents\": false\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"max\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"resolve.rtt.us\",\n \"customLabel\": \"\"\n }\n },\n {\n \"id\": \"3\",\n \"enabled\": true,\n \"type\": \"max\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"tcp.rtt.connect.us\"\n }\n },\n {\n \"id\": \"5\",\n \"enabled\": true,\n \"type\": \"max\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"tls.rtt.handshake.us\"\n }\n },\n {\n \"id\": \"4\",\n \"enabled\": true,\n \"type\": \"max\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"http.rtt.response_header.us\"\n }\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"date_histogram\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"@timestamp\",\n \"interval\": \"auto\",\n \"customInterval\": \"2h\",\n \"min_doc_count\": 1,\n \"extended_bounds\": {}\n }\n }\n ],\n \"listeners\": {}\n}" + }, + "id": "c65ef340-eb19-11e6-be20-559646f8b9ba", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\n \"filter\": []\n}" + }, + "savedSearchId": "02014c80-29d2-11e7-a68f-bfaa2341cc52", + "title": "HTTP monitors status", + "uiStateJSON": "{\n \"vis\": {\n \"colors\": {\n \"200\": \"#B7DBAB\",\n \"monitor.status: up\": \"#629E51\",\n \"monitor.status: down\": \"#E24D42\"\n },\n \"legendOpen\": true\n }\n}", + "version": 1, + "visState": "{\n \"title\": \"HTTP monitors status\",\n \"type\": \"pie\",\n \"params\": {\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"bottom\",\n \"isDonut\": false\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"cardinality\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"monitor.id\"\n }\n },\n {\n \"id\": \"3\",\n \"enabled\": true,\n \"type\": \"filters\",\n \"schema\": \"segment\",\n \"params\": {\n \"filters\": [\n {\n \"input\": {\n \"query\": {\n \"query_string\": {\n \"query\": \"monitor.status: up\",\n \"analyze_wildcard\": true\n }\n }\n },\n \"label\": \"\"\n },\n {\n \"input\": {\n \"query\": {\n \"query_string\": {\n \"query\": \"monitor.status: down\",\n \"analyze_wildcard\": true\n }\n }\n }\n }\n ]\n }\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"http.response.status\",\n \"size\": 5,\n \"order\": \"desc\",\n \"orderBy\": \"1\"\n }\n }\n ],\n \"listeners\": {}\n}" + }, + "id": "920e8140-eb1a-11e6-be20-559646f8b9ba", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\n \"filter\": []\n}" + }, + "savedSearchId": "02014c80-29d2-11e7-a68f-bfaa2341cc52", + "title": "HTTP monitors", + "uiStateJSON": "{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n }\n }\n }\n}", + "version": 1, + "visState": "{\n \"title\": \"HTTP monitors\",\n \"type\": \"table\",\n \"params\": {\n \"perPage\": 10,\n \"showPartialRows\": false,\n \"showMeticsAtAllLevels\": false,\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n },\n \"showTotal\": false,\n \"totalFunc\": \"sum\"\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"max\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"monitor.duration.us\"\n }\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"bucket\",\n \"params\": {\n \"field\": \"monitor.id\",\n \"size\": 5,\n \"order\": \"desc\",\n \"orderBy\": \"1\"\n }\n },\n {\n \"id\": \"5\",\n \"enabled\": true,\n \"type\": \"max\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"resolve.rtt.us\"\n }\n },\n {\n \"id\": \"6\",\n \"enabled\": true,\n \"type\": \"max\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"tcp.rtt.connect.us\"\n }\n },\n {\n \"id\": \"7\",\n \"enabled\": true,\n \"type\": \"max\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"tls.rtt.handshake.us\"\n }\n },\n {\n \"id\": \"8\",\n \"enabled\": true,\n \"type\": \"max\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"http.rtt.response_header.us\"\n }\n }\n ],\n \"listeners\": {}\n}" + }, + "id": "1738dbc0-eb1d-11e6-be20-559646f8b9ba", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\n \"filter\": []\n}" + }, + "savedSearchId": "02014c80-29d2-11e7-a68f-bfaa2341cc52", + "title": "HTTP up status", + "uiStateJSON": "{\n \"vis\": {\n \"colors\": {\n \"monitor.status: up\": \"#629E51\",\n \"monitor.status: down\": \"#E24D42\"\n }\n }\n}", + "version": 1, + "visState": "{\n \"title\": \"HTTP up status\",\n \"type\": \"area\",\n \"params\": {\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"scale\": \"linear\",\n \"interpolate\": \"linear\",\n \"mode\": \"percentage\",\n \"times\": [],\n \"addTimeMarker\": false,\n \"defaultYExtents\": false,\n \"setYExtents\": true,\n \"yAxis\": {\n \"max\": 100,\n \"min\": 0\n }\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {}\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"date_histogram\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"@timestamp\",\n \"interval\": \"auto\",\n \"customInterval\": \"2h\",\n \"min_doc_count\": 1,\n \"extended_bounds\": {}\n }\n },\n {\n \"id\": \"3\",\n \"enabled\": true,\n \"type\": \"filters\",\n \"schema\": \"group\",\n \"params\": {\n \"filters\": [\n {\n \"input\": {\n \"query\": {\n \"query_string\": {\n \"query\": \"monitor.status: down\",\n \"analyze_wildcard\": true\n }\n }\n },\n \"label\": \"\"\n },\n {\n \"input\": {\n \"query\": {\n \"query_string\": {\n \"query\": \"monitor.status: up\",\n \"analyze_wildcard\": true\n }\n }\n }\n }\n ]\n }\n }\n ],\n \"listeners\": {}\n}" + }, + "id": "091c3a90-eb1e-11e6-be20-559646f8b9ba", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\n \"filter\": []\n}" + }, + "savedSearchId": "02014c80-29d2-11e7-a68f-bfaa2341cc52", + "title": "HTTP duration heatmap", + "uiStateJSON": "{\n \"vis\": {\n \"defaultColors\": {\n \"0 - 2\": \"rgb(247,251,255)\",\n \"2 - 3\": \"rgb(227,238,249)\",\n \"3 - 4\": \"rgb(208,225,242)\",\n \"4 - 5\": \"rgb(182,212,233)\",\n \"5 - 6\": \"rgb(148,196,223)\",\n \"6 - 8\": \"rgb(107,174,214)\",\n \"8 - 9\": \"rgb(74,152,201)\",\n \"9 - 10\": \"rgb(46,126,188)\",\n \"10 - 11\": \"rgb(23,100,171)\",\n \"11 - 12\": \"rgb(8,74,145)\"\n }\n }\n}", + "version": 1, + "visState": "{\n \"title\": \"HTTP duration heatmap\",\n \"type\": \"heatmap\",\n \"params\": {\n \"addTooltip\": true,\n \"addLegend\": true,\n \"enableHover\": false,\n \"legendPosition\": \"right\",\n \"times\": [],\n \"colorsNumber\": 10,\n \"colorSchema\": \"Blues\",\n \"setColorRange\": false,\n \"colorsRange\": [],\n \"invertColors\": false,\n \"percentageMode\": false,\n \"valueAxes\": [\n {\n \"show\": false,\n \"id\": \"ValueAxis-1\",\n \"type\": \"value\",\n \"scale\": {\n \"type\": \"linear\",\n \"defaultYExtents\": false\n },\n \"labels\": {\n \"show\": false,\n \"rotate\": 0,\n \"color\": \"#555\"\n }\n }\n ]\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {}\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"date_histogram\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"@timestamp\",\n \"interval\": \"auto\",\n \"customInterval\": \"2h\",\n \"min_doc_count\": 1,\n \"extended_bounds\": {}\n }\n },\n {\n \"id\": \"3\",\n \"enabled\": true,\n \"type\": \"histogram\",\n \"schema\": \"group\",\n \"params\": {\n \"field\": \"monitor.duration.us\",\n \"interval\": 50000,\n \"extended_bounds\": {}\n }\n }\n ],\n \"listeners\": {}\n}" + }, + "id": "0f4c0560-eb20-11e6-9f11-159ff202874a", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "columns": [ + "monitor.id", + "http.url", + "monitor.status", + "http.response.status", + "monitor.duration.us", + "tcp.rtt.connect.us", + "tls.rtt.handshake.us", + "resolve.rtt.us", + "http.rtt.content.us" + ], + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\n \"index\": \"heartbeat-*\",\n \"highlightAll\": true,\n \"query\": {\n \"query_string\": {\n \"analyze_wildcard\": true,\n \"query\": \"*\"\n }\n },\n \"filter\": [\n {\n \"$state\": {\n \"store\": \"appState\"\n },\n \"meta\": {\n \"alias\": null,\n \"disabled\": false,\n \"index\": \"heartbeat-*\",\n \"key\": \"monitor.name\",\n \"negate\": false,\n \"value\": \"http\"\n },\n \"query\": {\n \"match\": {\n \"monitor.name\": {\n \"query\": \"http\",\n \"type\": \"phrase\"\n }\n }\n }\n }\n ]\n}" + }, + "sort": [ + "@timestamp", + "desc" + ], + "title": "Heartbeat HTTP pings", + "version": 1 + }, + "id": "02014c80-29d2-11e7-a68f-bfaa2341cc52", + "type": "search", + "version": 5 + }, + { + "attributes": { + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}" + }, + "optionsJSON": "{\"darkTheme\":false}", + "panelsJSON": "[{\"col\":1,\"id\":\"c65ef340-eb19-11e6-be20-559646f8b9ba\",\"panelIndex\":1,\"row\":7,\"size_x\":12,\"size_y\":4,\"type\":\"visualization\"},{\"col\":9,\"id\":\"920e8140-eb1a-11e6-be20-559646f8b9ba\",\"panelIndex\":2,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"1738dbc0-eb1d-11e6-be20-559646f8b9ba\",\"panelIndex\":3,\"row\":1,\"size_x\":8,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"091c3a90-eb1e-11e6-be20-559646f8b9ba\",\"panelIndex\":4,\"row\":5,\"size_x\":12,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"0f4c0560-eb20-11e6-9f11-159ff202874a\",\"panelIndex\":5,\"row\":11,\"size_x\":12,\"size_y\":5,\"type\":\"visualization\"}]", + "timeRestore": false, + "title": "Heartbeat HTTP monitoring", + "uiStateJSON": "{\"P-3\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-5\":{\"vis\":{\"defaultColors\":{\"0 - 2\":\"rgb(247,251,255)\",\"2 - 3\":\"rgb(227,238,249)\",\"3 - 4\":\"rgb(208,225,242)\",\"4 - 5\":\"rgb(182,212,233)\",\"5 - 6\":\"rgb(148,196,223)\",\"6 - 8\":\"rgb(107,174,214)\",\"8 - 9\":\"rgb(74,152,201)\",\"9 - 10\":\"rgb(46,126,188)\",\"10 - 11\":\"rgb(23,100,171)\",\"11 - 12\":\"rgb(8,74,145)\"}}}}", + "version": 1 + }, + "id": "f3e771c0-eb19-11e6-be20-559646f8b9ba", + "type": "dashboard", + "version": 1 + } + ], + "version": "6.0.0-alpha3-SNAPSHOT" +} \ No newline at end of file diff --git a/dev-tools/cmd/dashboards/.gitignore b/dev-tools/cmd/dashboards/.gitignore new file mode 100644 index 00000000000..10537f25420 --- /dev/null +++ b/dev-tools/cmd/dashboards/.gitignore @@ -0,0 +1,2 @@ +# Executable +export_dashboards diff --git a/dev-tools/cmd/dashboards/Makefile b/dev-tools/cmd/dashboards/Makefile new file mode 100644 index 00000000000..e20f7e47fd0 --- /dev/null +++ b/dev-tools/cmd/dashboards/Makefile @@ -0,0 +1,5 @@ + +BEAT?= + +export_dashboards: + go build -ldflags "-X main.beat=${BEAT}" -o export_dashboards diff --git a/dev-tools/export_dashboards.py b/dev-tools/cmd/dashboards/export_5x_dashboards.py similarity index 100% rename from dev-tools/export_dashboards.py rename to dev-tools/cmd/dashboards/export_5x_dashboards.py diff --git a/dev-tools/cmd/dashboards/export_dashboards.go b/dev-tools/cmd/dashboards/export_dashboards.go new file mode 100644 index 00000000000..f4014f08fb5 --- /dev/null +++ b/dev-tools/cmd/dashboards/export_dashboards.go @@ -0,0 +1,121 @@ +package main + +import ( + "crypto/tls" + "encoding/json" + "flag" + "fmt" + "io/ioutil" + "net/http" + "net/url" + "strings" + + "github.com/elastic/beats/libbeat/common" +) + +var exportAPI = "/api/kibana/dashboards/export" + +func makeURL(url, path string, params url.Values) string { + + if len(params) == 0 { + return url + path + } + + return strings.Join([]string{url, path, "?", params.Encode()}, "") +} + +func ExtractIndexPattern(body []byte) ([]byte, error) { + + var contents common.MapStr + + err := json.Unmarshal(body, &contents) + if err != nil { + return nil, err + } + + objects, ok := contents["objects"].([]interface{}) + if !ok { + return nil, fmt.Errorf("Key objects not found or wrong type") + } + + var result []interface{} + for _, obj := range objects { + _type, ok := obj.(map[string]interface{})["type"].(string) + if !ok { + return nil, fmt.Errorf("type key not found or not string") + } + if _type != "index-pattern" { + result = append(result, obj) + } + } + contents["objects"] = result + + newBody, err := json.MarshalIndent(contents, "", " ") + if err != nil { + return nil, fmt.Errorf("Error mashaling: %v", err) + } + + return newBody, nil + +} + +func Export(client *http.Client, conn string, dashboards []string, out string) error { + + params := url.Values{} + + for _, dashboard := range dashboards { + params.Add("dashboard", dashboard) + } + + fullURL := makeURL(conn, exportAPI, params) + fmt.Printf("Calling HTTP GET %v\n", fullURL) + + req, err := http.NewRequest("GET", fullURL, nil) + + resp, err := client.Do(req) + if err != nil { + return fmt.Errorf("GET HTTP request fails with: %v", err) + } + + defer resp.Body.Close() + + body, err := ioutil.ReadAll(resp.Body) + if err != nil { + return fmt.Errorf("fail to read response %s", err) + } + + if resp.StatusCode != 200 { + return fmt.Errorf("HTTP GET %s fails with %s, %s", fullURL, resp.Status, body) + } + + body, err = ExtractIndexPattern(body) + if err != nil { + return fmt.Errorf("fail to extract the index pattern: %v", err) + } + + err = ioutil.WriteFile(out, body, 0666) + + fmt.Printf("The dashboards were exported under the %s file\n", out) + return err +} + +func main() { + + kibanaURL := flag.String("kibana", "http://localhost:5601", "Kibana URL") + fileOutput := flag.String("output", "output.json", "Output file") + + flag.Parse() + + args := flag.Args() + + transCfg := &http.Transport{ + TLSClientConfig: &tls.Config{InsecureSkipVerify: true}, // ignore expired SSL certificates + } + + client := &http.Client{Transport: transCfg} + + err := Export(client, *kibanaURL, args, *fileOutput) + if err != nil { + fmt.Printf("ERROR: fail to export the dashboards: %s\n", err) + } +} diff --git a/dev-tools/cmd/import_dashboards/.gitignore b/dev-tools/cmd/import_dashboards/.gitignore deleted file mode 100644 index 89494be505c..00000000000 --- a/dev-tools/cmd/import_dashboards/.gitignore +++ /dev/null @@ -1 +0,0 @@ -import_dashboards diff --git a/dev-tools/cmd/import_dashboards/Makefile b/dev-tools/cmd/import_dashboards/Makefile deleted file mode 100644 index 9fc807cf0bc..00000000000 --- a/dev-tools/cmd/import_dashboards/Makefile +++ /dev/null @@ -1,5 +0,0 @@ - -BEAT?= - -import_dashboards: - go build -ldflags "-X main.beat=${BEAT}" -o import_dashboards diff --git a/dev-tools/cmd/import_dashboards/import_dashboards.go b/dev-tools/cmd/import_dashboards/import_dashboards.go deleted file mode 100644 index 5faf2c8f2b8..00000000000 --- a/dev-tools/cmd/import_dashboards/import_dashboards.go +++ /dev/null @@ -1,227 +0,0 @@ -package main - -import ( - "errors" - "flag" - "fmt" - "os" - "time" - - "github.com/elastic/beats/libbeat/common/fmtstr" - "github.com/elastic/beats/libbeat/dashboards" - "github.com/elastic/beats/libbeat/outputs" - "github.com/elastic/beats/libbeat/outputs/elasticsearch" - "github.com/elastic/beats/libbeat/outputs/outil" - "github.com/elastic/beats/libbeat/outputs/transport" - "github.com/elastic/beats/libbeat/version" -) - -var usage = fmt.Sprintf(` -Usage: ./import_dashboards [options] - -Kibana dashboards are stored in a special index in Elasticsearch together with the searches, visualizations, and indexes that they use. - -To import the official Kibana dashboards for your Beat version into a local Elasticsearch instance, use: - - ./import_dashboards - -To import the official Kibana dashboards for your Beat version into a remote Elasticsearch instance with Shield, use: - - ./import_dashboards -es https://xyz.found.io -user user -pass password - -For more details, check https://www.elastic.co/guide/en/beats/libbeat/5.0/import-dashboards.html. - -`) - -var beat string - -type Options struct { - KibanaIndex string - ES string - Index string - Dir string - File string - Beat string - URL string - User string - Pass string - Certificate string - CertificateKey string - CertificateAuthority string - Insecure bool // Allow insecure SSL connections. - OnlyDashboards bool - OnlyIndex bool - Snapshot bool - Quiet bool -} - -type CommandLine struct { - flagSet *flag.FlagSet - opt Options -} - -type Importer struct { - cl *CommandLine - client *elasticsearch.Client -} - -func DefineCommandLine() (*CommandLine, error) { - var cl CommandLine - - cl.flagSet = flag.NewFlagSet("import", flag.ContinueOnError) - - cl.flagSet.Usage = func() { - - os.Stderr.WriteString(usage) - cl.flagSet.PrintDefaults() - } - - cl.flagSet.StringVar(&cl.opt.KibanaIndex, "k", ".kibana", "Kibana index") - cl.flagSet.StringVar(&cl.opt.ES, "es", "http://127.0.0.1:9200", "Elasticsearch URL") - cl.flagSet.StringVar(&cl.opt.User, "user", "", "Username to connect to Elasticsearch. By default no username is passed.") - cl.flagSet.StringVar(&cl.opt.Pass, "pass", "", "Password to connect to Elasticsearch. By default no password is passed.") - cl.flagSet.StringVar(&cl.opt.Index, "i", "", "The Elasticsearch index name. This overwrites the index name defined in the dashboards and index pattern. Example: metricbeat-*") - cl.flagSet.StringVar(&cl.opt.Dir, "dir", "", "Directory containing the subdirectories: dashboard, visualization, search, index-pattern. Example: etc/kibana/") - cl.flagSet.StringVar(&cl.opt.File, "file", "", "Zip archive file containing the Beats dashboards. The archive contains a directory for each Beat.") - cl.flagSet.StringVar(&cl.opt.URL, "url", - fmt.Sprintf("https://artifacts.elastic.co/downloads/beats/beats-dashboards/beats-dashboards-%s.zip", version.GetDefaultVersion()), - "URL to the zip archive containing the Beats dashboards") - cl.flagSet.StringVar(&cl.opt.Beat, "beat", beat, "The Beat name that is used to select what dashboards to install from a zip. An empty string selects all.") - cl.flagSet.BoolVar(&cl.opt.OnlyDashboards, "only-dashboards", false, "Import only dashboards together with visualizations and searches. By default import both, dashboards and the index-pattern.") - cl.flagSet.BoolVar(&cl.opt.OnlyIndex, "only-index", false, "Import only the index-pattern. By default imports both, dashboards and the index pattern.") - cl.flagSet.BoolVar(&cl.opt.Snapshot, "snapshot", false, "Import dashboards from snapshot builds.") - cl.flagSet.StringVar(&cl.opt.CertificateAuthority, "cacert", "", "Certificate Authority for server verification") - cl.flagSet.StringVar(&cl.opt.Certificate, "cert", "", "Certificate for SSL client authentication in PEM format.") - cl.flagSet.StringVar(&cl.opt.CertificateKey, "key", "", "Client Certificate Key in PEM format.") - cl.flagSet.BoolVar(&cl.opt.Insecure, "insecure", false, `Allows "insecure" SSL connections`) - cl.flagSet.BoolVar(&cl.opt.Quiet, "quiet", false, "Suppresses all status messages. Error messages are still printed to stderr.") - - return &cl, nil -} - -func (cl *CommandLine) ParseCommandLine() error { - - cl.opt.Beat = beat - - if err := cl.flagSet.Parse(os.Args[1:]); err != nil { - return err - } - - if cl.opt.URL == "" && cl.opt.File == "" && cl.opt.Dir == "" { - return errors.New("Missing input. Please specify one of the options -file, -url or -dir") - } - - if cl.opt.Certificate != "" && cl.opt.CertificateKey == "" { - return errors.New("A certificate key needs to be passed as well by using the -key option.") - } - - if cl.opt.CertificateKey != "" && cl.opt.Certificate == "" { - return errors.New("A certificate needs to be passed as well by using the -cert option.") - } - - return nil -} - -func New() (*dashboards.Importer, error) { - /* define the command line arguments */ - cl, err := DefineCommandLine() - if err != nil { - cl.flagSet.Usage() - return nil, err - } - /* parse command line arguments */ - err = cl.ParseCommandLine() - if err != nil { - return nil, err - } - - cfg := dashboards.DashboardsConfig{ - Enabled: true, - KibanaIndex: cl.opt.KibanaIndex, - Index: cl.opt.Index, - Dir: cl.opt.Dir, - File: cl.opt.File, - Beat: cl.opt.Beat, - URL: cl.opt.URL, - OnlyDashboards: cl.opt.OnlyDashboards, - OnlyIndex: cl.opt.OnlyIndex, - Snapshot: cl.opt.Snapshot, - SnapshotURL: fmt.Sprintf("https://beats-nightlies.s3.amazonaws.com/dashboards/beats-dashboards-%s-SNAPSHOT.zip", version.GetDefaultVersion()), - } - - /* prepare the Elasticsearch index pattern */ - fmtstr, err := fmtstr.CompileEvent(cl.opt.Index) - if err != nil { - return nil, fmt.Errorf("Failed to build the Elasticsearch index pattern: %s", err) - } - indexSel := outil.MakeSelector(outil.FmtSelectorExpr(fmtstr, "")) - - var tlsConfig outputs.TLSConfig - var tls *transport.TLSConfig - - if cl.opt.Insecure { - tlsConfig.VerificationMode = transport.VerifyNone - } - - if len(cl.opt.Certificate) > 0 && len(cl.opt.CertificateKey) > 0 { - tlsConfig.Certificate = outputs.CertificateConfig{ - Certificate: cl.opt.Certificate, - Key: cl.opt.CertificateKey, - } - } - - if len(cl.opt.CertificateAuthority) > 0 { - tlsConfig.CAs = []string{cl.opt.CertificateAuthority} - } - - tls, err = outputs.LoadTLSConfig(&tlsConfig) - if err != nil { - return nil, fmt.Errorf("Failed to load the SSL certificate: %s", err) - } - - /* connect to Elasticsearch */ - client, err := elasticsearch.NewClient( - elasticsearch.ClientSettings{ - URL: cl.opt.ES, - Index: indexSel, - TLS: tls, - Username: cl.opt.User, - Password: cl.opt.Pass, - Timeout: 60 * time.Second, - }, - nil, - ) - if err != nil { - return nil, fmt.Errorf("Failed to connect to Elasticsearch: %s", err) - } - - statusMsg := dashboards.MessageOutputter(func(msg string, a ...interface{}) { - if cl.opt.Quiet { - return - } - - if len(a) == 0 { - fmt.Println(msg) - } else { - fmt.Println(fmt.Sprintf(msg, a...)) - } - }) - - return dashboards.NewImporter(&cfg, client, &statusMsg) -} - -func main() { - - importer, err := New() - if err != nil { - fmt.Fprintln(os.Stderr, err) - fmt.Fprintln(os.Stderr, "Exiting") - os.Exit(1) - } - err = importer.Import() - if err != nil { - fmt.Fprintln(os.Stderr, err) - fmt.Fprintln(os.Stderr, "Exiting") - os.Exit(1) - } -} diff --git a/filebeat/filebeat.reference.yml b/filebeat/filebeat.reference.yml index a08e717ed61..729edeaed48 100644 --- a/filebeat/filebeat.reference.yml +++ b/filebeat/filebeat.reference.yml @@ -1001,7 +1001,7 @@ output.elasticsearch: #============================== Dashboards ===================================== # These settings control loading the sample dashboards to the Kibana index. Loading # the dashboards is disabled by default and can be enabled either by setting the -# options here, or by using the `-setup` CLI flag. +# options here, or by using the `-setup` CLI flag or the `setup` command. #setup.dashboards.enabled: false # The URL from where to download the dashboards archive. By default this URL @@ -1057,6 +1057,25 @@ output.elasticsearch: # Overwrite existing template #setup.template.overwrite: false +#============================== Kibana ===================================== + +# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API. +# This requires a Kibana endpoint configuration. +setup.kibana: + + # Kibana Host + # Scheme and port can be left out and will be set to the default (http and 5601) + # In case you specify and additional path, the scheme is required: http://localhost:5601/path + # IPv6 addresses should always be defined as: https://[2001:db8::1]:5601 + #host: "localhost:5601" + + # Optional protocol and basic auth crendentials. + #protocol: "https" + #username: "elastic" + #password: "changeme" + + # Optional HTTP Path + #path: "" #================================ HTTP Endpoint ====================================== # Each beat can expose internal data points through a http endpoint. For security diff --git a/filebeat/filebeat.yml b/filebeat/filebeat.yml index 7bcd5af29d7..d941334e647 100644 --- a/filebeat/filebeat.yml +++ b/filebeat/filebeat.yml @@ -165,6 +165,31 @@ filebeat.prospectors: #fields: # env: staging + +#============================== Dashboards ===================================== +# These settings control loading the sample dashboards to the Kibana index. Loading +# the dashboards is disabled by default and can be enabled either by setting the +# options here, or by using the `-setup` CLI flag or the `setup` command. +#setup.dashboards.enabled: false + +# The URL from where to download the dashboards archive. By default this URL +# has a value which is computed based on the Beat name and version. For released +# versions, this URL points to the dashboard archive on the artifacts.elastic.co +# website. +#setup.dashboards.url: + +#============================== Kibana ===================================== + +# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API. +# This requires a Kibana endpoint configuration. +setup.kibana: + + # Kibana Host + # Scheme and port can be left out and will be set to the default (http and 5601) + # In case you specify and additional path, the scheme is required: http://localhost:5601/path + # IPv6 addresses should always be defined as: https://[2001:db8::1]:5601 + #host: "localhost:5601" + #================================ Outputs ===================================== # Configure what outputs to use when sending the data collected by the beat. diff --git a/filebeat/module/apache2/_meta/kibana/dashboard/Filebeat-Apache2-Dashboard.json b/filebeat/module/apache2/_meta/kibana/5.x/dashboard/Filebeat-Apache2-Dashboard.json similarity index 100% rename from filebeat/module/apache2/_meta/kibana/dashboard/Filebeat-Apache2-Dashboard.json rename to filebeat/module/apache2/_meta/kibana/5.x/dashboard/Filebeat-Apache2-Dashboard.json diff --git a/filebeat/module/apache2/_meta/kibana/search/Apache2-access-logs.json b/filebeat/module/apache2/_meta/kibana/5.x/search/Apache2-access-logs.json similarity index 100% rename from filebeat/module/apache2/_meta/kibana/search/Apache2-access-logs.json rename to filebeat/module/apache2/_meta/kibana/5.x/search/Apache2-access-logs.json diff --git a/filebeat/module/apache2/_meta/kibana/search/Apache2-errors-log.json b/filebeat/module/apache2/_meta/kibana/5.x/search/Apache2-errors-log.json similarity index 100% rename from filebeat/module/apache2/_meta/kibana/search/Apache2-errors-log.json rename to filebeat/module/apache2/_meta/kibana/5.x/search/Apache2-errors-log.json diff --git a/filebeat/module/apache2/_meta/kibana/visualization/Apache2-access-unique-IPs-map.json b/filebeat/module/apache2/_meta/kibana/5.x/visualization/Apache2-access-unique-IPs-map.json similarity index 100% rename from filebeat/module/apache2/_meta/kibana/visualization/Apache2-access-unique-IPs-map.json rename to filebeat/module/apache2/_meta/kibana/5.x/visualization/Apache2-access-unique-IPs-map.json diff --git a/filebeat/module/apache2/_meta/kibana/visualization/Apache2-browsers.json b/filebeat/module/apache2/_meta/kibana/5.x/visualization/Apache2-browsers.json similarity index 100% rename from filebeat/module/apache2/_meta/kibana/visualization/Apache2-browsers.json rename to filebeat/module/apache2/_meta/kibana/5.x/visualization/Apache2-browsers.json diff --git a/filebeat/module/apache2/_meta/kibana/visualization/Apache2-error-logs-over-time.json b/filebeat/module/apache2/_meta/kibana/5.x/visualization/Apache2-error-logs-over-time.json similarity index 100% rename from filebeat/module/apache2/_meta/kibana/visualization/Apache2-error-logs-over-time.json rename to filebeat/module/apache2/_meta/kibana/5.x/visualization/Apache2-error-logs-over-time.json diff --git a/filebeat/module/apache2/_meta/kibana/visualization/Apache2-operating-systems.json b/filebeat/module/apache2/_meta/kibana/5.x/visualization/Apache2-operating-systems.json similarity index 100% rename from filebeat/module/apache2/_meta/kibana/visualization/Apache2-operating-systems.json rename to filebeat/module/apache2/_meta/kibana/5.x/visualization/Apache2-operating-systems.json diff --git a/filebeat/module/apache2/_meta/kibana/visualization/Apache2-response-codes-of-top-URLs.json b/filebeat/module/apache2/_meta/kibana/5.x/visualization/Apache2-response-codes-of-top-URLs.json similarity index 100% rename from filebeat/module/apache2/_meta/kibana/visualization/Apache2-response-codes-of-top-URLs.json rename to filebeat/module/apache2/_meta/kibana/5.x/visualization/Apache2-response-codes-of-top-URLs.json diff --git a/filebeat/module/apache2/_meta/kibana/visualization/Apache2-response-codes-over-time.json b/filebeat/module/apache2/_meta/kibana/5.x/visualization/Apache2-response-codes-over-time.json similarity index 100% rename from filebeat/module/apache2/_meta/kibana/visualization/Apache2-response-codes-over-time.json rename to filebeat/module/apache2/_meta/kibana/5.x/visualization/Apache2-response-codes-over-time.json diff --git a/filebeat/module/apache2/_meta/kibana/default/dashboard/filebeat-apache2.json b/filebeat/module/apache2/_meta/kibana/default/dashboard/filebeat-apache2.json new file mode 100644 index 00000000000..de671b52dd4 --- /dev/null +++ b/filebeat/module/apache2/_meta/kibana/default/dashboard/filebeat-apache2.json @@ -0,0 +1,167 @@ +{ + "objects": [ + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Apache2-access-logs", + "title": "Apache2 access unique IPs map", + "uiStateJSON": "{\"mapCenter\":[14.944784875088372,5.09765625]}", + "version": 1, + "visState": "{\"title\":\"Apache2 access unique IPs map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Scaled Circle Markers\",\"isDesaturated\":true,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[15,5],\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"apache2.access.remote_ip\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"apache2.access.geoip.location\",\"autoPrecision\":true}}],\"listeners\":{}}" + }, + "id": "Apache2-access-unique-IPs-map", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Apache2-access-logs", + "title": "Apache2 response codes of top URLs", + "uiStateJSON": "{\"vis\":{\"colors\":{\"200\":\"#7EB26D\",\"404\":\"#EF843C\"}}}", + "version": 1, + "visState": "{\"title\":\"Apache2 response codes of top URLs\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"split\",\"params\":{\"field\":\"apache2.access.url\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"URL\",\"row\":false}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"apache2.access.response_code\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}" + }, + "id": "Apache2-response-codes-of-top-URLs", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Apache2-access-logs", + "title": "Apache2 browsers", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Apache2 browsers\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"bottom\",\"isDonut\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"apache2.access.remote_ip\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"apache2.access.user_agent.name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"apache2.access.user_agent.major\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}" + }, + "id": "Apache2-browsers", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Apache2-access-logs", + "title": "Apache2 operating systems", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Apache2 operating systems\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"bottom\",\"isDonut\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"apache2.access.remote_ip\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"apache2.access.user_agent.os_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"apache2.access.user_agent.os_major\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}" + }, + "id": "Apache2-operating-systems", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Apache2-errors-log", + "title": "Apache2 error logs over time", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Apache2 error logs over time\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"apache2.error.level\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}" + }, + "id": "Apache2-error-logs-over-time", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Apache2-access-logs", + "title": "Apache2 response codes over time", + "uiStateJSON": "{\"vis\":{\"colors\":{\"200\":\"#629E51\",\"404\":\"#EF843C\"}}}", + "version": 1, + "visState": "{\"title\":\"Apache2 response codes over time\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"apache2.access.response_code\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}" + }, + "id": "Apache2-response-codes-over-time", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "columns": [ + "apache2.error.client", + "apache2.error.level", + "apache2.error.module", + "apache2.error.message" + ], + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"filebeat-*\",\"query\":{\"query_string\":{\"query\":\"_exists_:apache2.error\",\"analyze_wildcard\":true}},\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}" + }, + "sort": [ + "@timestamp", + "desc" + ], + "title": "Apache2 errors log", + "version": 1 + }, + "id": "Apache2-errors-log", + "type": "search", + "version": 8 + }, + { + "attributes": { + "columns": [ + "apache2.access.remote_ip", + "apache2.access.method", + "apache2.access.url", + "apache2.access.response_code" + ], + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"filebeat-*\",\"query\":{\"query_string\":{\"query\":\"_exists_:apache2.access\",\"analyze_wildcard\":true}},\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}" + }, + "sort": [ + "@timestamp", + "desc" + ], + "title": "Apache2 access logs", + "version": 1 + }, + "id": "Apache2-access-logs", + "type": "search", + "version": 20 + }, + { + "attributes": { + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}" + }, + "optionsJSON": "{\"darkTheme\":false}", + "panelsJSON": "[{\"col\":1,\"id\":\"Apache2-access-unique-IPs-map\",\"panelIndex\":1,\"row\":1,\"size_x\":12,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Apache2-response-codes-of-top-URLs\",\"panelIndex\":2,\"row\":6,\"size_x\":8,\"size_y\":3,\"type\":\"visualization\"},{\"col\":9,\"id\":\"Apache2-browsers\",\"panelIndex\":3,\"row\":6,\"size_x\":4,\"size_y\":3,\"type\":\"visualization\"},{\"col\":11,\"id\":\"Apache2-operating-systems\",\"panelIndex\":4,\"row\":4,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Apache2-error-logs-over-time\",\"panelIndex\":5,\"row\":9,\"size_x\":12,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Apache2-response-codes-over-time\",\"panelIndex\":6,\"row\":4,\"size_x\":10,\"size_y\":2,\"type\":\"visualization\"},{\"id\":\"Apache2-errors-log\",\"type\":\"search\",\"panelIndex\":7,\"size_x\":12,\"size_y\":3,\"col\":1,\"row\":11,\"columns\":[\"apache2.error.client\",\"apache2.error.level\",\"apache2.error.module\",\"apache2.error.message\"],\"sort\":[\"@timestamp\",\"desc\"]}]", + "timeRestore": false, + "title": "Filebeat Apache2 Dashboard", + "uiStateJSON": "{\"P-1\":{\"mapCenter\":[40.713955826286046,-0.17578125]}}", + "version": 1 + }, + "id": "Filebeat-Apache2-Dashboard", + "type": "dashboard", + "version": 4 + } + ], + "version": "6.0.0-alpha3-SNAPSHOT" +} \ No newline at end of file diff --git a/filebeat/module/auditd/_meta/kibana/dashboard/dfbb49f0-0a0f-11e7-8a62-2d05eaaac5cb.json b/filebeat/module/auditd/_meta/kibana/5.x/dashboard/dfbb49f0-0a0f-11e7-8a62-2d05eaaac5cb.json similarity index 100% rename from filebeat/module/auditd/_meta/kibana/dashboard/dfbb49f0-0a0f-11e7-8a62-2d05eaaac5cb.json rename to filebeat/module/auditd/_meta/kibana/5.x/dashboard/dfbb49f0-0a0f-11e7-8a62-2d05eaaac5cb.json diff --git a/filebeat/module/auditd/_meta/kibana/search/4ac0a370-0a11-11e7-8b04-eb22a5669f27.json b/filebeat/module/auditd/_meta/kibana/5.x/search/4ac0a370-0a11-11e7-8b04-eb22a5669f27.json similarity index 100% rename from filebeat/module/auditd/_meta/kibana/search/4ac0a370-0a11-11e7-8b04-eb22a5669f27.json rename to filebeat/module/auditd/_meta/kibana/5.x/search/4ac0a370-0a11-11e7-8b04-eb22a5669f27.json diff --git a/filebeat/module/auditd/_meta/kibana/visualization/2bb0fa70-0a11-11e7-9e84-43da493ad0c7.json b/filebeat/module/auditd/_meta/kibana/5.x/visualization/2bb0fa70-0a11-11e7-9e84-43da493ad0c7.json similarity index 100% rename from filebeat/module/auditd/_meta/kibana/visualization/2bb0fa70-0a11-11e7-9e84-43da493ad0c7.json rename to filebeat/module/auditd/_meta/kibana/5.x/visualization/2bb0fa70-0a11-11e7-9e84-43da493ad0c7.json diff --git a/filebeat/module/auditd/_meta/kibana/visualization/5ebdbe50-0a0f-11e7-825f-6748cda7d858.json b/filebeat/module/auditd/_meta/kibana/5.x/visualization/5ebdbe50-0a0f-11e7-825f-6748cda7d858.json similarity index 100% rename from filebeat/module/auditd/_meta/kibana/visualization/5ebdbe50-0a0f-11e7-825f-6748cda7d858.json rename to filebeat/module/auditd/_meta/kibana/5.x/visualization/5ebdbe50-0a0f-11e7-825f-6748cda7d858.json diff --git a/filebeat/module/auditd/_meta/kibana/visualization/6295bdd0-0a0e-11e7-825f-6748cda7d858.json b/filebeat/module/auditd/_meta/kibana/5.x/visualization/6295bdd0-0a0e-11e7-825f-6748cda7d858.json similarity index 100% rename from filebeat/module/auditd/_meta/kibana/visualization/6295bdd0-0a0e-11e7-825f-6748cda7d858.json rename to filebeat/module/auditd/_meta/kibana/5.x/visualization/6295bdd0-0a0e-11e7-825f-6748cda7d858.json diff --git a/filebeat/module/auditd/_meta/kibana/visualization/c5411910-0a87-11e7-8b04-eb22a5669f27.json b/filebeat/module/auditd/_meta/kibana/5.x/visualization/c5411910-0a87-11e7-8b04-eb22a5669f27.json similarity index 100% rename from filebeat/module/auditd/_meta/kibana/visualization/c5411910-0a87-11e7-8b04-eb22a5669f27.json rename to filebeat/module/auditd/_meta/kibana/5.x/visualization/c5411910-0a87-11e7-8b04-eb22a5669f27.json diff --git a/filebeat/module/auditd/_meta/kibana/visualization/d1726930-0a7f-11e7-8b04-eb22a5669f27.json b/filebeat/module/auditd/_meta/kibana/5.x/visualization/d1726930-0a7f-11e7-8b04-eb22a5669f27.json similarity index 100% rename from filebeat/module/auditd/_meta/kibana/visualization/d1726930-0a7f-11e7-8b04-eb22a5669f27.json rename to filebeat/module/auditd/_meta/kibana/5.x/visualization/d1726930-0a7f-11e7-8b04-eb22a5669f27.json diff --git a/filebeat/module/auditd/_meta/kibana/default/dashboard/filebeat-auditd.json b/filebeat/module/auditd/_meta/kibana/default/dashboard/filebeat-auditd.json new file mode 100644 index 00000000000..2def2254c97 --- /dev/null +++ b/filebeat/module/auditd/_meta/kibana/default/dashboard/filebeat-auditd.json @@ -0,0 +1,121 @@ +{ + "objects": [ + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\n \"index\": \"filebeat-*\",\n \"query\": {\n \"query_string\": {\n \"query\": \"*\",\n \"analyze_wildcard\": true\n }\n },\n \"filter\": []\n}" + }, + "title": "Audit Event Types", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\n \"title\": \"Audit Event Types\",\n \"type\": \"pie\",\n \"params\": {\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"isDonut\": true\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {}\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"auditd.log.record_type\",\n \"size\": 50,\n \"order\": \"desc\",\n \"orderBy\": \"1\"\n }\n }\n ],\n \"listeners\": {}\n}" + }, + "id": "6295bdd0-0a0e-11e7-825f-6748cda7d858", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"filebeat-*\",\"query\":{\"query_string\":{\"query\":\"auditd.log.record_type:EXECVE\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Audit Top Exec Commands", + "uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}", + "version": 1, + "visState": "{\"title\":\"Audit Top Exec Commands\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"auditd.log.a0\",\"size\":30,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Command (arg 0)\"}}],\"listeners\":{}}" + }, + "id": "5ebdbe50-0a0f-11e7-825f-6748cda7d858", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{}" + }, + "title": "Audit Event Results", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"type\":\"timelion\",\"title\":\"Audit Event Results\",\"params\":{\"expression\":\".es(q=\\\"_exists_:auditd.log NOT auditd.log.res:failure\\\").label(\\\"Success\\\") .es(q=\\\"auditd.log.res:failed\\\").label(\\\"Failure\\\").title(\\\"Audit Event Results\\\")\",\"interval\":\"auto\"}}" + }, + "id": "2bb0fa70-0a11-11e7-9e84-43da493ad0c7", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"filebeat-*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Audit Event Address Geo Location", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Audit Event Address Geo Location\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Scaled Circle Markers\",\"isDesaturated\":true,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[15,5],\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"auditd.log.geoip.location\",\"autoPrecision\":true,\"precision\":2}}],\"listeners\":{}}" + }, + "id": "d1726930-0a7f-11e7-8b04-eb22a5669f27", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"filebeat-*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Audit Event Account Tag Cloud", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Audit Event Account Tag Cloud\",\"type\":\"tagcloud\",\"params\":{\"scale\":\"linear\",\"orientation\":\"single\",\"minFontSize\":15,\"maxFontSize\":42,\"hideLabel\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"auditd.log.acct\",\"size\":15,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}" + }, + "id": "c5411910-0a87-11e7-8b04-eb22a5669f27", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "columns": [ + "auditd.log.record_type", + "auditd.log.sequence", + "auditd.log.acct" + ], + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"filebeat-*\",\"highlightAll\":true,\"version\":true,\"query\":{\"query_string\":{\"query\":\"_exists_:auditd.log\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "sort": [ + "@timestamp", + "desc" + ], + "title": "Audit Events", + "version": 1 + }, + "id": "4ac0a370-0a11-11e7-8b04-eb22a5669f27", + "type": "search", + "version": 4 + }, + { + "attributes": { + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}" + }, + "optionsJSON": "{\"darkTheme\":false}", + "panelsJSON": "[{\"col\":1,\"id\":\"6295bdd0-0a0e-11e7-825f-6748cda7d858\",\"panelIndex\":1,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":9,\"id\":\"5ebdbe50-0a0f-11e7-825f-6748cda7d858\",\"panelIndex\":2,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"2bb0fa70-0a11-11e7-9e84-43da493ad0c7\",\"panelIndex\":3,\"row\":5,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"d1726930-0a7f-11e7-8b04-eb22a5669f27\",\"panelIndex\":5,\"row\":5,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":5,\"id\":\"c5411910-0a87-11e7-8b04-eb22a5669f27\",\"panelIndex\":6,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"size_x\":12,\"size_y\":3,\"panelIndex\":7,\"type\":\"search\",\"id\":\"4ac0a370-0a11-11e7-8b04-eb22a5669f27\",\"col\":1,\"row\":8,\"columns\":[\"auditd.log.record_type\",\"auditd.log.sequence\",\"auditd.log.acct\"],\"sort\":[\"@timestamp\",\"desc\"]}]", + "timeRestore": false, + "title": "Filebeat Auditd", + "uiStateJSON": "{\"P-2\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}", + "version": 1 + }, + "id": "dfbb49f0-0a0f-11e7-8a62-2d05eaaac5cb", + "type": "dashboard", + "version": 4 + } + ], + "version": "6.0.0-alpha3-SNAPSHOT" +} \ No newline at end of file diff --git a/filebeat/module/icinga/_meta/kibana/dashboard/26309570-2419-11e7-a83b-d5f4cebac9ff.json b/filebeat/module/icinga/_meta/kibana/5.x/dashboard/26309570-2419-11e7-a83b-d5f4cebac9ff.json similarity index 100% rename from filebeat/module/icinga/_meta/kibana/dashboard/26309570-2419-11e7-a83b-d5f4cebac9ff.json rename to filebeat/module/icinga/_meta/kibana/5.x/dashboard/26309570-2419-11e7-a83b-d5f4cebac9ff.json diff --git a/filebeat/module/icinga/_meta/kibana/dashboard/b9163ea0-2417-11e7-a83b-d5f4cebac9ff.json b/filebeat/module/icinga/_meta/kibana/5.x/dashboard/b9163ea0-2417-11e7-a83b-d5f4cebac9ff.json similarity index 100% rename from filebeat/module/icinga/_meta/kibana/dashboard/b9163ea0-2417-11e7-a83b-d5f4cebac9ff.json rename to filebeat/module/icinga/_meta/kibana/5.x/dashboard/b9163ea0-2417-11e7-a83b-d5f4cebac9ff.json diff --git a/filebeat/module/icinga/_meta/kibana/dashboard/f693d260-2417-11e7-a83b-d5f4cebac9ff.json b/filebeat/module/icinga/_meta/kibana/5.x/dashboard/f693d260-2417-11e7-a83b-d5f4cebac9ff.json similarity index 100% rename from filebeat/module/icinga/_meta/kibana/dashboard/f693d260-2417-11e7-a83b-d5f4cebac9ff.json rename to filebeat/module/icinga/_meta/kibana/5.x/dashboard/f693d260-2417-11e7-a83b-d5f4cebac9ff.json diff --git a/filebeat/module/icinga/_meta/kibana/search/710043e0-2417-11e7-a83b-d5f4cebac9ff.json b/filebeat/module/icinga/_meta/kibana/5.x/search/710043e0-2417-11e7-a83b-d5f4cebac9ff.json similarity index 100% rename from filebeat/module/icinga/_meta/kibana/search/710043e0-2417-11e7-a83b-d5f4cebac9ff.json rename to filebeat/module/icinga/_meta/kibana/5.x/search/710043e0-2417-11e7-a83b-d5f4cebac9ff.json diff --git a/filebeat/module/icinga/_meta/kibana/search/c876e6a0-2418-11e7-a83b-d5f4cebac9ff.json b/filebeat/module/icinga/_meta/kibana/5.x/search/c876e6a0-2418-11e7-a83b-d5f4cebac9ff.json similarity index 100% rename from filebeat/module/icinga/_meta/kibana/search/c876e6a0-2418-11e7-a83b-d5f4cebac9ff.json rename to filebeat/module/icinga/_meta/kibana/5.x/search/c876e6a0-2418-11e7-a83b-d5f4cebac9ff.json diff --git a/filebeat/module/icinga/_meta/kibana/search/ffaf5a30-2413-11e7-a0d9-39604d45ca7f.json b/filebeat/module/icinga/_meta/kibana/5.x/search/ffaf5a30-2413-11e7-a0d9-39604d45ca7f.json similarity index 100% rename from filebeat/module/icinga/_meta/kibana/search/ffaf5a30-2413-11e7-a0d9-39604d45ca7f.json rename to filebeat/module/icinga/_meta/kibana/5.x/search/ffaf5a30-2413-11e7-a0d9-39604d45ca7f.json diff --git a/filebeat/module/icinga/_meta/kibana/visualization/0bc34b60-2419-11e7-a83b-d5f4cebac9ff.json b/filebeat/module/icinga/_meta/kibana/5.x/visualization/0bc34b60-2419-11e7-a83b-d5f4cebac9ff.json similarity index 100% rename from filebeat/module/icinga/_meta/kibana/visualization/0bc34b60-2419-11e7-a83b-d5f4cebac9ff.json rename to filebeat/module/icinga/_meta/kibana/5.x/visualization/0bc34b60-2419-11e7-a83b-d5f4cebac9ff.json diff --git a/filebeat/module/icinga/_meta/kibana/visualization/2cf77780-2418-11e7-a83b-d5f4cebac9ff.json b/filebeat/module/icinga/_meta/kibana/5.x/visualization/2cf77780-2418-11e7-a83b-d5f4cebac9ff.json similarity index 100% rename from filebeat/module/icinga/_meta/kibana/visualization/2cf77780-2418-11e7-a83b-d5f4cebac9ff.json rename to filebeat/module/icinga/_meta/kibana/5.x/visualization/2cf77780-2418-11e7-a83b-d5f4cebac9ff.json diff --git a/filebeat/module/icinga/_meta/kibana/visualization/a59b5e00-2417-11e7-a83b-d5f4cebac9ff.json b/filebeat/module/icinga/_meta/kibana/5.x/visualization/a59b5e00-2417-11e7-a83b-d5f4cebac9ff.json similarity index 100% rename from filebeat/module/icinga/_meta/kibana/visualization/a59b5e00-2417-11e7-a83b-d5f4cebac9ff.json rename to filebeat/module/icinga/_meta/kibana/5.x/visualization/a59b5e00-2417-11e7-a83b-d5f4cebac9ff.json diff --git a/filebeat/module/icinga/_meta/kibana/visualization/d8e5dc40-2417-11e7-a83b-d5f4cebac9ff.json b/filebeat/module/icinga/_meta/kibana/5.x/visualization/d8e5dc40-2417-11e7-a83b-d5f4cebac9ff.json similarity index 100% rename from filebeat/module/icinga/_meta/kibana/visualization/d8e5dc40-2417-11e7-a83b-d5f4cebac9ff.json rename to filebeat/module/icinga/_meta/kibana/5.x/visualization/d8e5dc40-2417-11e7-a83b-d5f4cebac9ff.json diff --git a/filebeat/module/icinga/_meta/kibana/visualization/fb09d4b0-2418-11e7-a83b-d5f4cebac9ff.json b/filebeat/module/icinga/_meta/kibana/5.x/visualization/fb09d4b0-2418-11e7-a83b-d5f4cebac9ff.json similarity index 100% rename from filebeat/module/icinga/_meta/kibana/visualization/fb09d4b0-2418-11e7-a83b-d5f4cebac9ff.json rename to filebeat/module/icinga/_meta/kibana/5.x/visualization/fb09d4b0-2418-11e7-a83b-d5f4cebac9ff.json diff --git a/filebeat/module/icinga/_meta/kibana/default/dashboard/filebeat-icinga.json b/filebeat/module/icinga/_meta/kibana/default/dashboard/filebeat-icinga.json new file mode 100644 index 00000000000..b499991f699 --- /dev/null +++ b/filebeat/module/icinga/_meta/kibana/default/dashboard/filebeat-icinga.json @@ -0,0 +1,78 @@ +{ + "objects": [ + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "c876e6a0-2418-11e7-a83b-d5f4cebac9ff", + "title": "Icinga Debuglog Facility", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Icinga Debuglog Facility\",\"type\":\"histogram\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"icinga.debug.facility\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}" + }, + "id": "0bc34b60-2419-11e7-a83b-d5f4cebac9ff", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "c876e6a0-2418-11e7-a83b-d5f4cebac9ff", + "title": "Icinga Debuglog Severity", + "uiStateJSON": "{\"vis\":{\"colors\":{\"information\":\"#629E51\",\"warning\":\"#E5AC0E\",\"debug\":\"#BA43A9\",\"notice\":\"#6ED0E0\"}}}", + "version": 1, + "visState": "{\"title\":\"Icinga Debuglog Severity\",\"type\":\"histogram\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"icinga.debug.severity\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}" + }, + "id": "fb09d4b0-2418-11e7-a83b-d5f4cebac9ff", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "columns": [ + "icinga.debug.facility", + "icinga.debug.severity", + "icinga.debug.message" + ], + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"filebeat-*\",\"highlightAll\":true,\"query\":{\"query_string\":{\"query\":\"source:*icinga2\\\\/debug.log\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "sort": [ + "@timestamp", + "desc" + ], + "title": "Icinga Debug Log", + "version": 1 + }, + "id": "c876e6a0-2418-11e7-a83b-d5f4cebac9ff", + "type": "search", + "version": 12 + }, + { + "attributes": { + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}}}]}" + }, + "optionsJSON": "{\"darkTheme\":false}", + "panelsJSON": "[{\"size_x\":6,\"size_y\":3,\"panelIndex\":1,\"type\":\"visualization\",\"id\":\"0bc34b60-2419-11e7-a83b-d5f4cebac9ff\",\"col\":1,\"row\":1},{\"size_x\":6,\"size_y\":3,\"panelIndex\":2,\"type\":\"visualization\",\"id\":\"fb09d4b0-2418-11e7-a83b-d5f4cebac9ff\",\"col\":7,\"row\":1},{\"size_x\":12,\"size_y\":29,\"panelIndex\":3,\"type\":\"search\",\"id\":\"c876e6a0-2418-11e7-a83b-d5f4cebac9ff\",\"col\":1,\"row\":4,\"columns\":[\"icinga.debug.facility\",\"icinga.debug.severity\",\"icinga.debug.message\"],\"sort\":[\"@timestamp\",\"desc\"]}]", + "timeRestore": false, + "title": "Icinga Debug Log", + "uiStateJSON": "{}", + "version": 1 + }, + "id": "26309570-2419-11e7-a83b-d5f4cebac9ff", + "type": "dashboard", + "version": 4 + } + ], + "version": "6.0.0-alpha3-SNAPSHOT" +} \ No newline at end of file diff --git a/filebeat/module/mysql/_meta/kibana/dashboard/Filebeat-MySQL-Dashboard.json b/filebeat/module/mysql/_meta/kibana/5.x/dashboard/Filebeat-MySQL-Dashboard.json similarity index 100% rename from filebeat/module/mysql/_meta/kibana/dashboard/Filebeat-MySQL-Dashboard.json rename to filebeat/module/mysql/_meta/kibana/5.x/dashboard/Filebeat-MySQL-Dashboard.json diff --git a/filebeat/module/mysql/_meta/kibana/search/Filebeat-MySQL-Slow-log.json b/filebeat/module/mysql/_meta/kibana/5.x/search/Filebeat-MySQL-Slow-log.json similarity index 100% rename from filebeat/module/mysql/_meta/kibana/search/Filebeat-MySQL-Slow-log.json rename to filebeat/module/mysql/_meta/kibana/5.x/search/Filebeat-MySQL-Slow-log.json diff --git a/filebeat/module/mysql/_meta/kibana/search/Filebeat-MySQL-error-log.json b/filebeat/module/mysql/_meta/kibana/5.x/search/Filebeat-MySQL-error-log.json similarity index 100% rename from filebeat/module/mysql/_meta/kibana/search/Filebeat-MySQL-error-log.json rename to filebeat/module/mysql/_meta/kibana/5.x/search/Filebeat-MySQL-error-log.json diff --git a/filebeat/module/mysql/_meta/kibana/visualization/MySQL-Error-logs-levels.json b/filebeat/module/mysql/_meta/kibana/5.x/visualization/MySQL-Error-logs-levels.json similarity index 100% rename from filebeat/module/mysql/_meta/kibana/visualization/MySQL-Error-logs-levels.json rename to filebeat/module/mysql/_meta/kibana/5.x/visualization/MySQL-Error-logs-levels.json diff --git a/filebeat/module/mysql/_meta/kibana/visualization/MySQL-Slow-logs-by-count.json b/filebeat/module/mysql/_meta/kibana/5.x/visualization/MySQL-Slow-logs-by-count.json similarity index 100% rename from filebeat/module/mysql/_meta/kibana/visualization/MySQL-Slow-logs-by-count.json rename to filebeat/module/mysql/_meta/kibana/5.x/visualization/MySQL-Slow-logs-by-count.json diff --git a/filebeat/module/mysql/_meta/kibana/visualization/MySQL-Slow-queries-over-time.json b/filebeat/module/mysql/_meta/kibana/5.x/visualization/MySQL-Slow-queries-over-time.json similarity index 100% rename from filebeat/module/mysql/_meta/kibana/visualization/MySQL-Slow-queries-over-time.json rename to filebeat/module/mysql/_meta/kibana/5.x/visualization/MySQL-Slow-queries-over-time.json diff --git a/filebeat/module/mysql/_meta/kibana/visualization/MySQL-error-logs.json b/filebeat/module/mysql/_meta/kibana/5.x/visualization/MySQL-error-logs.json similarity index 100% rename from filebeat/module/mysql/_meta/kibana/visualization/MySQL-error-logs.json rename to filebeat/module/mysql/_meta/kibana/5.x/visualization/MySQL-error-logs.json diff --git a/filebeat/module/mysql/_meta/kibana/visualization/MySQL-slowest-queries.json b/filebeat/module/mysql/_meta/kibana/5.x/visualization/MySQL-slowest-queries.json similarity index 100% rename from filebeat/module/mysql/_meta/kibana/visualization/MySQL-slowest-queries.json rename to filebeat/module/mysql/_meta/kibana/5.x/visualization/MySQL-slowest-queries.json diff --git a/filebeat/module/mysql/_meta/kibana/default/dashboard/filebeat-mysql.json b/filebeat/module/mysql/_meta/kibana/default/dashboard/filebeat-mysql.json new file mode 100644 index 00000000000..29d19fe7a1c --- /dev/null +++ b/filebeat/module/mysql/_meta/kibana/default/dashboard/filebeat-mysql.json @@ -0,0 +1,146 @@ +{ + "objects": [ + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Filebeat-MySQL-Slow-log", + "title": "MySQL slowest queries", + "uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}", + "version": 1, + "visState": "{\"title\":\"MySQL slowest queries\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"mysql.slowlog.query_time.sec\",\"customLabel\":\"Query time\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"mysql.slowlog.query\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Query\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"mysql.slowlog.user\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"User\"}}],\"listeners\":{}}" + }, + "id": "MySQL-slowest-queries", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Filebeat-MySQL-Slow-log", + "title": "MySQL Slow queries over time", + "uiStateJSON": "{\"vis\":{\"colors\":{\"Slow queries\":\"#EF843C\"}}}", + "version": 1, + "visState": "{\"title\":\"MySQL Slow queries over time\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Slow queries\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}" + }, + "id": "MySQL-Slow-queries-over-time", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Filebeat-MySQL-error-log", + "title": "MySQL error logs", + "uiStateJSON": "{\"vis\":{\"colors\":{\"Count\":\"#447EBC\",\"Error logs\":\"#1F78C1\"}}}", + "version": 1, + "visState": "{\"title\":\"MySQL error logs\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Error logs\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}" + }, + "id": "MySQL-error-logs", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "columns": [ + "mysql.error.level", + "mysql.error.message" + ], + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"filebeat-*\",\"query\":{\"query_string\":{\"query\":\"_exists_:mysql.error\",\"analyze_wildcard\":true}},\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}" + }, + "sort": [ + "@timestamp", + "desc" + ], + "title": "Filebeat MySQL error log", + "version": 1 + }, + "id": "Filebeat-MySQL-error-log", + "type": "search", + "version": 12 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Filebeat-MySQL-error-log", + "title": "MySQL Error logs levels", + "uiStateJSON": "{\"vis\":{\"colors\":{\"Note\":\"#9AC48A\",\"Warning\":\"#F9934E\",\"ERROR\":\"#E24D42\"}}}", + "version": 1, + "visState": "{\"title\":\"MySQL Error logs levels\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"bottom\",\"isDonut\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"mysql.error.level\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}" + }, + "id": "MySQL-Error-logs-levels", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Filebeat-MySQL-Slow-log", + "title": "MySQL Slow logs by count", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"MySQL Slow logs by count\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"bottom\",\"isDonut\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"mysql.slowlog.query\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}" + }, + "id": "MySQL-Slow-logs-by-count", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "columns": [ + "_source" + ], + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"filebeat-*\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"_exists_:mysql.slowlog\"}},\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}" + }, + "sort": [ + "@timestamp", + "desc" + ], + "title": "Filebeat MySQL Slow log", + "version": 1 + }, + "id": "Filebeat-MySQL-Slow-log", + "type": "search", + "version": 12 + }, + { + "attributes": { + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}" + }, + "optionsJSON": "{\"darkTheme\":false}", + "panelsJSON": "[{\"col\":1,\"id\":\"MySQL-slowest-queries\",\"panelIndex\":1,\"row\":8,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"MySQL-Slow-queries-over-time\",\"panelIndex\":2,\"row\":1,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"MySQL-error-logs\",\"panelIndex\":3,\"row\":1,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"columns\":[\"mysql.error.level\",\"mysql.error.message\"],\"id\":\"Filebeat-MySQL-error-log\",\"panelIndex\":4,\"row\":8,\"size_x\":6,\"size_y\":5,\"sort\":[\"@timestamp\",\"desc\"],\"type\":\"search\"},{\"col\":7,\"id\":\"MySQL-Error-logs-levels\",\"panelIndex\":5,\"row\":4,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"MySQL-Slow-logs-by-count\",\"panelIndex\":6,\"row\":4,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"}]", + "timeRestore": false, + "title": "Filebeat MySQL Dashboard", + "uiStateJSON": "{\"P-1\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}", + "version": 1 + }, + "id": "Filebeat-MySQL-Dashboard", + "type": "dashboard", + "version": 4 + } + ], + "version": "6.0.0-alpha3-SNAPSHOT" +} \ No newline at end of file diff --git a/filebeat/module/nginx/_meta/kibana/dashboard/Filebeat-Nginx-Dashboard.json b/filebeat/module/nginx/_meta/kibana/5.x/dashboard/Filebeat-Nginx-Dashboard.json similarity index 100% rename from filebeat/module/nginx/_meta/kibana/dashboard/Filebeat-Nginx-Dashboard.json rename to filebeat/module/nginx/_meta/kibana/5.x/dashboard/Filebeat-Nginx-Dashboard.json diff --git a/filebeat/module/nginx/_meta/kibana/search/Filebeat-Nginx-module.json b/filebeat/module/nginx/_meta/kibana/5.x/search/Filebeat-Nginx-module.json similarity index 100% rename from filebeat/module/nginx/_meta/kibana/search/Filebeat-Nginx-module.json rename to filebeat/module/nginx/_meta/kibana/5.x/search/Filebeat-Nginx-module.json diff --git a/filebeat/module/nginx/_meta/kibana/visualization/Errors-over-time.json b/filebeat/module/nginx/_meta/kibana/5.x/visualization/Errors-over-time.json similarity index 100% rename from filebeat/module/nginx/_meta/kibana/visualization/Errors-over-time.json rename to filebeat/module/nginx/_meta/kibana/5.x/visualization/Errors-over-time.json diff --git a/filebeat/module/nginx/_meta/kibana/visualization/New-Visualization.json b/filebeat/module/nginx/_meta/kibana/5.x/visualization/New-Visualization.json similarity index 100% rename from filebeat/module/nginx/_meta/kibana/visualization/New-Visualization.json rename to filebeat/module/nginx/_meta/kibana/5.x/visualization/New-Visualization.json diff --git a/filebeat/module/nginx/_meta/kibana/visualization/Nginx-Access-Browsers.json b/filebeat/module/nginx/_meta/kibana/5.x/visualization/Nginx-Access-Browsers.json similarity index 100% rename from filebeat/module/nginx/_meta/kibana/visualization/Nginx-Access-Browsers.json rename to filebeat/module/nginx/_meta/kibana/5.x/visualization/Nginx-Access-Browsers.json diff --git a/filebeat/module/nginx/_meta/kibana/visualization/Nginx-Access-Map.json b/filebeat/module/nginx/_meta/kibana/5.x/visualization/Nginx-Access-Map.json similarity index 100% rename from filebeat/module/nginx/_meta/kibana/visualization/Nginx-Access-Map.json rename to filebeat/module/nginx/_meta/kibana/5.x/visualization/Nginx-Access-Map.json diff --git a/filebeat/module/nginx/_meta/kibana/visualization/Nginx-Access-OSes.json b/filebeat/module/nginx/_meta/kibana/5.x/visualization/Nginx-Access-OSes.json similarity index 100% rename from filebeat/module/nginx/_meta/kibana/visualization/Nginx-Access-OSes.json rename to filebeat/module/nginx/_meta/kibana/5.x/visualization/Nginx-Access-OSes.json diff --git a/filebeat/module/nginx/_meta/kibana/visualization/Nginx-Access-Response-codes-by-top-URLs.json b/filebeat/module/nginx/_meta/kibana/5.x/visualization/Nginx-Access-Response-codes-by-top-URLs.json similarity index 100% rename from filebeat/module/nginx/_meta/kibana/visualization/Nginx-Access-Response-codes-by-top-URLs.json rename to filebeat/module/nginx/_meta/kibana/5.x/visualization/Nginx-Access-Response-codes-by-top-URLs.json diff --git a/filebeat/module/nginx/_meta/kibana/visualization/Sent-sizes.json b/filebeat/module/nginx/_meta/kibana/5.x/visualization/Sent-sizes.json similarity index 100% rename from filebeat/module/nginx/_meta/kibana/visualization/Sent-sizes.json rename to filebeat/module/nginx/_meta/kibana/5.x/visualization/Sent-sizes.json diff --git a/filebeat/module/nginx/_meta/kibana/default/dashboard/filebeat-nginx.json b/filebeat/module/nginx/_meta/kibana/default/dashboard/filebeat-nginx.json new file mode 100644 index 00000000000..aebff0e0239 --- /dev/null +++ b/filebeat/module/nginx/_meta/kibana/default/dashboard/filebeat-nginx.json @@ -0,0 +1,151 @@ +{ + "objects": [ + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\n \"index\": \"filebeat-*\",\n \"query\": {\n \"query_string\": {\n \"query\": \"*\",\n \"analyze_wildcard\": true\n }\n },\n \"filter\": []\n}" + }, + "title": "Nginx Errors over time", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\n \"title\": \"Errors over time\",\n \"type\": \"area\",\n \"params\": {\n \"shareYAxis\": true,\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"smoothLines\": false,\n \"scale\": \"linear\",\n \"interpolate\": \"linear\",\n \"mode\": \"stacked\",\n \"times\": [],\n \"addTimeMarker\": false,\n \"defaultYExtents\": false,\n \"setYExtents\": false,\n \"yAxis\": {}\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {}\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"date_histogram\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"@timestamp\",\n \"interval\": \"auto\",\n \"customInterval\": \"2h\",\n \"min_doc_count\": 1,\n \"extended_bounds\": {}\n }\n },\n {\n \"id\": \"3\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"group\",\n \"params\": {\n \"field\": \"nginx.error.level\",\n \"size\": 5,\n \"order\": \"desc\",\n \"orderBy\": \"1\"\n }\n }\n ],\n \"listeners\": {}\n}" + }, + "id": "Errors-over-time", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"filebeat-*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Nginx Access Browsers", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Nginx Access Browsers\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"bottom\",\"isDonut\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"nginx.access.user_agent.name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"nginx.access.user_agent.major\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}" + }, + "id": "Nginx-Access-Browsers", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"filebeat-*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Nginx Access OSes", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Nginx Access OSes\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"bottom\",\"isDonut\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"nginx.access.user_agent.os_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"nginx.access.user_agent.os_major\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}" + }, + "id": "Nginx-Access-OSes", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\n \"filter\": []\n}" + }, + "savedSearchId": "Filebeat-Nginx-module", + "title": "Nginx Access over time", + "uiStateJSON": "{\n \"vis\": {\n \"colors\": {\n \"200\": \"#7EB26D\",\n \"404\": \"#614D93\"\n }\n }\n}", + "version": 1, + "visState": "{\n \"title\": \"New Visualization\",\n \"type\": \"histogram\",\n \"params\": {\n \"shareYAxis\": true,\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"scale\": \"linear\",\n \"mode\": \"stacked\",\n \"times\": [],\n \"addTimeMarker\": false,\n \"defaultYExtents\": false,\n \"setYExtents\": false,\n \"yAxis\": {}\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {}\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"date_histogram\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"@timestamp\",\n \"interval\": \"auto\",\n \"customInterval\": \"2h\",\n \"min_doc_count\": 1,\n \"extended_bounds\": {}\n }\n },\n {\n \"id\": \"3\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"group\",\n \"params\": {\n \"field\": \"nginx.access.response_code\",\n \"size\": 5,\n \"order\": \"desc\",\n \"orderBy\": \"1\"\n }\n }\n ],\n \"listeners\": {}\n}" + }, + "id": "New-Visualization", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"filebeat-*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Nginx Access Response codes by top URLs", + "uiStateJSON": "{\"vis\":{\"colors\":{\"200\":\"#629E51\",\"404\":\"#0A50A1\"}}}", + "version": 1, + "visState": "{\"title\":\"Nginx Access Response codes by top URLs\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"split\",\"params\":{\"field\":\"nginx.access.url\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"row\":false}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"nginx.access.response_code\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}" + }, + "id": "Nginx-Access-Response-codes-by-top-URLs", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\n \"filter\": [],\n \"index\": \"filebeat-*\",\n \"query\": {\n \"query_string\": {\n \"query\": \"_exists_:nginx.access\",\n \"analyze_wildcard\": true\n }\n },\n \"highlight\": {\n \"pre_tags\": [\n \"@kibana-highlighted-field@\"\n ],\n \"post_tags\": [\n \"@/kibana-highlighted-field@\"\n ],\n \"fields\": {\n \"*\": {}\n },\n \"require_field_match\": false,\n \"fragment_size\": 2147483647\n }\n}" + }, + "title": "Nginx Sent Byte Size", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\n \"title\": \"Sent sizes\",\n \"type\": \"line\",\n \"params\": {\n \"shareYAxis\": true,\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"showCircles\": true,\n \"smoothLines\": true,\n \"interpolate\": \"linear\",\n \"scale\": \"linear\",\n \"drawLinesBetweenPoints\": true,\n \"radiusRatio\": \"17\",\n \"times\": [],\n \"addTimeMarker\": false,\n \"defaultYExtents\": false,\n \"setYExtents\": false,\n \"yAxis\": {}\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"sum\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"nginx.access.body_sent.bytes\",\n \"customLabel\": \"Data sent\"\n }\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"date_histogram\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"@timestamp\",\n \"interval\": \"auto\",\n \"customInterval\": \"2h\",\n \"min_doc_count\": 1,\n \"extended_bounds\": {}\n }\n },\n {\n \"id\": \"3\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"radius\",\n \"params\": {}\n }\n ],\n \"listeners\": {}\n}" + }, + "id": "Sent-sizes", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Filebeat-Nginx-module", + "title": "Nginx Access Map", + "uiStateJSON": "{\"mapCenter\":[12.039320557540572,-0.17578125]}", + "version": 1, + "visState": "{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"autoPrecision\":true,\"field\":\"nginx.access.geoip.location\"},\"schema\":\"segment\",\"type\":\"geohash_grid\"}],\"listeners\":{},\"params\":{\"addTooltip\":true,\"heatBlur\":15,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatNormalizeData\":true,\"heatRadius\":25,\"isDesaturated\":true,\"legendPosition\":\"bottomright\",\"mapCenter\":[15,5],\"mapType\":\"Scaled Circle Markers\",\"mapZoom\":2,\"wms\":{\"enabled\":false,\"options\":{\"attribution\":\"Maps provided by USGS\",\"format\":\"image/png\",\"layers\":\"0\",\"styles\":\"\",\"transparent\":true,\"version\":\"1.3.0\"},\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\"}},\"title\":\"Nginx Access Map\",\"type\":\"tile_map\"}" + }, + "id": "Nginx-Access-Map", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "columns": [ + "_source" + ], + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"filebeat-*\",\"query\":{\"query_string\":{\"query\":\"_exists_:nginx\",\"analyze_wildcard\":true}},\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}" + }, + "sort": [ + "@timestamp", + "desc" + ], + "title": "Filebeat Nginx module", + "version": 1 + }, + "id": "Filebeat-Nginx-module", + "type": "search", + "version": 8 + }, + { + "attributes": { + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}" + }, + "optionsJSON": "{\"darkTheme\":false}", + "panelsJSON": "[{\"col\":9,\"id\":\"Errors-over-time\",\"panelIndex\":2,\"row\":4,\"size_x\":4,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Nginx-Access-Browsers\",\"panelIndex\":3,\"row\":10,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":5,\"id\":\"Nginx-Access-OSes\",\"panelIndex\":4,\"row\":10,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"New-Visualization\",\"panelIndex\":5,\"row\":4,\"size_x\":8,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Nginx-Access-Response-codes-by-top-URLs\",\"panelIndex\":6,\"row\":7,\"size_x\":12,\"size_y\":3,\"type\":\"visualization\"},{\"col\":9,\"id\":\"Sent-sizes\",\"panelIndex\":7,\"row\":10,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"id\":\"Nginx-Access-Map\",\"type\":\"visualization\",\"panelIndex\":8,\"size_x\":12,\"size_y\":3,\"col\":1,\"row\":1}]", + "timeRestore": false, + "title": "Filebeat Nginx Dashboard", + "uiStateJSON": "{\"P-4\":{\"vis\":{\"legendOpen\":true}},\"P-8\":{\"mapCenter\":[50.51342652633956,-0.17578125]}}", + "version": 1 + }, + "id": "Filebeat-Nginx-Dashboard", + "type": "dashboard", + "version": 4 + } + ], + "version": "6.0.0-alpha3-SNAPSHOT" +} \ No newline at end of file diff --git a/filebeat/module/redis/_meta/kibana/dashboard/7fea2930-478e-11e7-b1f0-cb29bac6bf8b.json b/filebeat/module/redis/_meta/kibana/5.x/dashboard/7fea2930-478e-11e7-b1f0-cb29bac6bf8b.json similarity index 100% rename from filebeat/module/redis/_meta/kibana/dashboard/7fea2930-478e-11e7-b1f0-cb29bac6bf8b.json rename to filebeat/module/redis/_meta/kibana/5.x/dashboard/7fea2930-478e-11e7-b1f0-cb29bac6bf8b.json diff --git a/filebeat/module/redis/_meta/kibana/search/0ab87b80-478e-11e7-b1f0-cb29bac6bf8b.json b/filebeat/module/redis/_meta/kibana/5.x/search/0ab87b80-478e-11e7-b1f0-cb29bac6bf8b.json similarity index 100% rename from filebeat/module/redis/_meta/kibana/search/0ab87b80-478e-11e7-b1f0-cb29bac6bf8b.json rename to filebeat/module/redis/_meta/kibana/5.x/search/0ab87b80-478e-11e7-b1f0-cb29bac6bf8b.json diff --git a/filebeat/module/redis/_meta/kibana/search/73613570-4791-11e7-be88-2ddb32f3df97.json b/filebeat/module/redis/_meta/kibana/5.x/search/73613570-4791-11e7-be88-2ddb32f3df97.json similarity index 100% rename from filebeat/module/redis/_meta/kibana/search/73613570-4791-11e7-be88-2ddb32f3df97.json rename to filebeat/module/redis/_meta/kibana/5.x/search/73613570-4791-11e7-be88-2ddb32f3df97.json diff --git a/filebeat/module/redis/_meta/kibana/visualization/78b9afe0-478f-11e7-b1f0-cb29bac6bf8b.json b/filebeat/module/redis/_meta/kibana/5.x/visualization/78b9afe0-478f-11e7-b1f0-cb29bac6bf8b.json similarity index 100% rename from filebeat/module/redis/_meta/kibana/visualization/78b9afe0-478f-11e7-b1f0-cb29bac6bf8b.json rename to filebeat/module/redis/_meta/kibana/5.x/visualization/78b9afe0-478f-11e7-b1f0-cb29bac6bf8b.json diff --git a/filebeat/module/redis/_meta/kibana/visualization/d2864600-478f-11e7-be88-2ddb32f3df97.json b/filebeat/module/redis/_meta/kibana/5.x/visualization/d2864600-478f-11e7-be88-2ddb32f3df97.json similarity index 100% rename from filebeat/module/redis/_meta/kibana/visualization/d2864600-478f-11e7-be88-2ddb32f3df97.json rename to filebeat/module/redis/_meta/kibana/5.x/visualization/d2864600-478f-11e7-be88-2ddb32f3df97.json diff --git a/filebeat/module/redis/_meta/kibana/visualization/dcccaa80-4791-11e7-be88-2ddb32f3df97.json b/filebeat/module/redis/_meta/kibana/5.x/visualization/dcccaa80-4791-11e7-be88-2ddb32f3df97.json similarity index 100% rename from filebeat/module/redis/_meta/kibana/visualization/dcccaa80-4791-11e7-be88-2ddb32f3df97.json rename to filebeat/module/redis/_meta/kibana/5.x/visualization/dcccaa80-4791-11e7-be88-2ddb32f3df97.json diff --git a/filebeat/module/redis/_meta/kibana/default/dashboard/filebeat-redis.json b/filebeat/module/redis/_meta/kibana/default/dashboard/filebeat-redis.json new file mode 100644 index 00000000000..a73f2897fb6 --- /dev/null +++ b/filebeat/module/redis/_meta/kibana/default/dashboard/filebeat-redis.json @@ -0,0 +1,117 @@ +{ + "objects": [ + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[],\"index\":\"filebeat-*\",\"highlightAll\":true,\"version\":true,\"query\":{\"query_string\":{\"query\":\"_exists_:redis.log\",\"analyze_wildcard\":true}}}" + }, + "title": "Redis log levels and roles", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Redis log levels and roles\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":false,\"legendPosition\":\"bottom\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"redis.log.role\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"redis.log.level\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Log level\"}}],\"listeners\":{}}" + }, + "id": "78b9afe0-478f-11e7-b1f0-cb29bac6bf8b", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[],\"index\":\"filebeat-*\",\"highlightAll\":true,\"version\":true,\"query\":{\"query_string\":{\"query\":\"_exists_:redis.log\",\"analyze_wildcard\":true}}}" + }, + "title": "Redis logs over time", + "uiStateJSON": "{\"vis\":{\"colors\":{\"notice\":\"#629E51\",\"warning\":\"#EF843C\"}}}", + "version": 1, + "visState": "{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"customInterval\":\"2h\",\"extended_bounds\":{},\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1},\"schema\":\"segment\",\"type\":\"date_histogram\"},{\"enabled\":true,\"id\":\"3\",\"params\":{\"field\":\"redis.log.level\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":5},\"schema\":\"group\",\"type\":\"terms\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"@timestamp per week\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"linear\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"mode\":\"stacked\",\"show\":\"true\",\"showCircles\":true,\"type\":\"histogram\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"showCircles\":true,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{},\"type\":\"value\"}]},\"title\":\"Redis logs over time\",\"type\":\"histogram\"}" + }, + "id": "d2864600-478f-11e7-be88-2ddb32f3df97", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "columns": [ + "beat.name", + "redis.log.level", + "redis.log.role", + "redis.log.message" + ], + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"filebeat-*\",\"highlightAll\":true,\"version\":true,\"query\":{\"query_string\":{\"query\":\"_exists_:redis.log\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "sort": [ + "@timestamp", + "desc" + ], + "title": "Filebeat Redis logs", + "version": 1 + }, + "id": "73613570-4791-11e7-be88-2ddb32f3df97", + "type": "search", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "0ab87b80-478e-11e7-b1f0-cb29bac6bf8b", + "title": "Redis slowest commands", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Redis slowest commands\",\"type\":\"histogram\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":200},\"position\":\"left\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Duration (microseconds)\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"linear\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Command\"},\"drawLinesBetweenPoints\":true,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"histogram\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"showCircles\":true,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":true,\"rotate\":75,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"bottom\",\"scale\":{\"mode\":\"normal\",\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Command\"},\"type\":\"value\"}]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"redis.slowlog.duration.us\",\"customLabel\":\"Command\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"redis.slowlog.cmd\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Duration (microseconds)\"}}],\"listeners\":{}}" + }, + "id": "dcccaa80-4791-11e7-be88-2ddb32f3df97", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "columns": [ + "beat.name", + "message", + "redis.slowlog.duration.us", + "redis.slowlog.key" + ], + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"filebeat-*\",\"highlightAll\":true,\"version\":true,\"query\":{\"query_string\":{\"query\":\"_exists_:redis.slowlog\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "sort": [ + "@timestamp", + "desc" + ], + "title": "Filebeat Redis slowlog", + "version": 1 + }, + "id": "0ab87b80-478e-11e7-b1f0-cb29bac6bf8b", + "type": "search", + "version": 2 + }, + { + "attributes": { + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}" + }, + "optionsJSON": "{\"darkTheme\":false}", + "panelsJSON": "[{\"col\":1,\"id\":\"78b9afe0-478f-11e7-b1f0-cb29bac6bf8b\",\"panelIndex\":2,\"row\":5,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":4,\"id\":\"d2864600-478f-11e7-be88-2ddb32f3df97\",\"panelIndex\":3,\"row\":5,\"size_x\":9,\"size_y\":3,\"type\":\"visualization\"},{\"size_x\":12,\"size_y\":4,\"panelIndex\":4,\"type\":\"search\",\"id\":\"73613570-4791-11e7-be88-2ddb32f3df97\",\"col\":1,\"row\":8,\"columns\":[\"beat.name\",\"redis.log.level\",\"redis.log.role\",\"redis.log.message\"],\"sort\":[\"@timestamp\",\"desc\"]},{\"size_x\":6,\"size_y\":4,\"panelIndex\":5,\"type\":\"visualization\",\"id\":\"dcccaa80-4791-11e7-be88-2ddb32f3df97\",\"col\":7,\"row\":1},{\"size_x\":6,\"size_y\":4,\"panelIndex\":6,\"type\":\"search\",\"id\":\"0ab87b80-478e-11e7-b1f0-cb29bac6bf8b\",\"col\":1,\"row\":1,\"columns\":[\"beat.name\",\"message\",\"redis.slowlog.duration.us\",\"redis.slowlog.key\"],\"sort\":[\"@timestamp\",\"desc\"]}]", + "timeRestore": false, + "title": "Filebeat Redis", + "uiStateJSON": "{\"P-5\":{\"vis\":{\"legendOpen\":false}}}", + "version": 1 + }, + "id": "7fea2930-478e-11e7-b1f0-cb29bac6bf8b", + "type": "dashboard", + "version": 1 + } + ], + "version": "6.0.0-alpha3-SNAPSHOT" +} \ No newline at end of file diff --git a/filebeat/module/system/_meta/kibana/dashboard/0d3f2380-fa78-11e6-ae9b-81e5311e8cab.json b/filebeat/module/system/_meta/kibana/5.x/dashboard/0d3f2380-fa78-11e6-ae9b-81e5311e8cab.json similarity index 100% rename from filebeat/module/system/_meta/kibana/dashboard/0d3f2380-fa78-11e6-ae9b-81e5311e8cab.json rename to filebeat/module/system/_meta/kibana/5.x/dashboard/0d3f2380-fa78-11e6-ae9b-81e5311e8cab.json diff --git a/filebeat/module/system/_meta/kibana/dashboard/277876d0-fa2c-11e6-bbd3-29c986c96e5a.json b/filebeat/module/system/_meta/kibana/5.x/dashboard/277876d0-fa2c-11e6-bbd3-29c986c96e5a.json similarity index 100% rename from filebeat/module/system/_meta/kibana/dashboard/277876d0-fa2c-11e6-bbd3-29c986c96e5a.json rename to filebeat/module/system/_meta/kibana/5.x/dashboard/277876d0-fa2c-11e6-bbd3-29c986c96e5a.json diff --git a/filebeat/module/system/_meta/kibana/dashboard/5517a150-f9ce-11e6-8115-a7c18106d86a.json b/filebeat/module/system/_meta/kibana/5.x/dashboard/5517a150-f9ce-11e6-8115-a7c18106d86a.json similarity index 100% rename from filebeat/module/system/_meta/kibana/dashboard/5517a150-f9ce-11e6-8115-a7c18106d86a.json rename to filebeat/module/system/_meta/kibana/5.x/dashboard/5517a150-f9ce-11e6-8115-a7c18106d86a.json diff --git a/filebeat/module/system/_meta/kibana/dashboard/Filebeat-syslog-dashboard.json b/filebeat/module/system/_meta/kibana/5.x/dashboard/Filebeat-syslog-dashboard.json similarity index 100% rename from filebeat/module/system/_meta/kibana/dashboard/Filebeat-syslog-dashboard.json rename to filebeat/module/system/_meta/kibana/5.x/dashboard/Filebeat-syslog-dashboard.json diff --git a/filebeat/module/system/_meta/kibana/search/62439dc0-f9c9-11e6-a747-6121780e0414.json b/filebeat/module/system/_meta/kibana/5.x/search/62439dc0-f9c9-11e6-a747-6121780e0414.json similarity index 100% rename from filebeat/module/system/_meta/kibana/search/62439dc0-f9c9-11e6-a747-6121780e0414.json rename to filebeat/module/system/_meta/kibana/5.x/search/62439dc0-f9c9-11e6-a747-6121780e0414.json diff --git a/filebeat/module/system/_meta/kibana/search/8030c1b0-fa77-11e6-ae9b-81e5311e8cab.json b/filebeat/module/system/_meta/kibana/5.x/search/8030c1b0-fa77-11e6-ae9b-81e5311e8cab.json similarity index 100% rename from filebeat/module/system/_meta/kibana/search/8030c1b0-fa77-11e6-ae9b-81e5311e8cab.json rename to filebeat/module/system/_meta/kibana/5.x/search/8030c1b0-fa77-11e6-ae9b-81e5311e8cab.json diff --git a/filebeat/module/system/_meta/kibana/search/Syslog-system-logs.json b/filebeat/module/system/_meta/kibana/5.x/search/Syslog-system-logs.json similarity index 100% rename from filebeat/module/system/_meta/kibana/search/Syslog-system-logs.json rename to filebeat/module/system/_meta/kibana/5.x/search/Syslog-system-logs.json diff --git a/filebeat/module/system/_meta/kibana/search/b6f321e0-fa25-11e6-bbd3-29c986c96e5a.json b/filebeat/module/system/_meta/kibana/5.x/search/b6f321e0-fa25-11e6-bbd3-29c986c96e5a.json similarity index 100% rename from filebeat/module/system/_meta/kibana/search/b6f321e0-fa25-11e6-bbd3-29c986c96e5a.json rename to filebeat/module/system/_meta/kibana/5.x/search/b6f321e0-fa25-11e6-bbd3-29c986c96e5a.json diff --git a/filebeat/module/system/_meta/kibana/search/eb0039f0-fa7f-11e6-a1df-a78bd7504d38.json b/filebeat/module/system/_meta/kibana/5.x/search/eb0039f0-fa7f-11e6-a1df-a78bd7504d38.json similarity index 100% rename from filebeat/module/system/_meta/kibana/search/eb0039f0-fa7f-11e6-a1df-a78bd7504d38.json rename to filebeat/module/system/_meta/kibana/5.x/search/eb0039f0-fa7f-11e6-a1df-a78bd7504d38.json diff --git a/filebeat/module/system/_meta/kibana/visualization/12667040-fa80-11e6-a1df-a78bd7504d38.json b/filebeat/module/system/_meta/kibana/5.x/visualization/12667040-fa80-11e6-a1df-a78bd7504d38.json similarity index 100% rename from filebeat/module/system/_meta/kibana/visualization/12667040-fa80-11e6-a1df-a78bd7504d38.json rename to filebeat/module/system/_meta/kibana/5.x/visualization/12667040-fa80-11e6-a1df-a78bd7504d38.json diff --git a/filebeat/module/system/_meta/kibana/visualization/341ffe70-f9ce-11e6-8115-a7c18106d86a.json b/filebeat/module/system/_meta/kibana/5.x/visualization/341ffe70-f9ce-11e6-8115-a7c18106d86a.json similarity index 100% rename from filebeat/module/system/_meta/kibana/visualization/341ffe70-f9ce-11e6-8115-a7c18106d86a.json rename to filebeat/module/system/_meta/kibana/5.x/visualization/341ffe70-f9ce-11e6-8115-a7c18106d86a.json diff --git a/filebeat/module/system/_meta/kibana/visualization/346bb290-fa80-11e6-a1df-a78bd7504d38.json b/filebeat/module/system/_meta/kibana/5.x/visualization/346bb290-fa80-11e6-a1df-a78bd7504d38.json similarity index 100% rename from filebeat/module/system/_meta/kibana/visualization/346bb290-fa80-11e6-a1df-a78bd7504d38.json rename to filebeat/module/system/_meta/kibana/5.x/visualization/346bb290-fa80-11e6-a1df-a78bd7504d38.json diff --git a/filebeat/module/system/_meta/kibana/visualization/3cec3eb0-f9d3-11e6-8a3e-2b904044ea1d.json b/filebeat/module/system/_meta/kibana/5.x/visualization/3cec3eb0-f9d3-11e6-8a3e-2b904044ea1d.json similarity index 100% rename from filebeat/module/system/_meta/kibana/visualization/3cec3eb0-f9d3-11e6-8a3e-2b904044ea1d.json rename to filebeat/module/system/_meta/kibana/5.x/visualization/3cec3eb0-f9d3-11e6-8a3e-2b904044ea1d.json diff --git a/filebeat/module/system/_meta/kibana/visualization/51164310-fa2b-11e6-bbd3-29c986c96e5a.json b/filebeat/module/system/_meta/kibana/5.x/visualization/51164310-fa2b-11e6-bbd3-29c986c96e5a.json similarity index 100% rename from filebeat/module/system/_meta/kibana/visualization/51164310-fa2b-11e6-bbd3-29c986c96e5a.json rename to filebeat/module/system/_meta/kibana/5.x/visualization/51164310-fa2b-11e6-bbd3-29c986c96e5a.json diff --git a/filebeat/module/system/_meta/kibana/visualization/5c7af030-fa2a-11e6-bbd3-29c986c96e5a.json b/filebeat/module/system/_meta/kibana/5.x/visualization/5c7af030-fa2a-11e6-bbd3-29c986c96e5a.json similarity index 100% rename from filebeat/module/system/_meta/kibana/visualization/5c7af030-fa2a-11e6-bbd3-29c986c96e5a.json rename to filebeat/module/system/_meta/kibana/5.x/visualization/5c7af030-fa2a-11e6-bbd3-29c986c96e5a.json diff --git a/filebeat/module/system/_meta/kibana/visualization/5dd15c00-fa78-11e6-ae9b-81e5311e8cab.json b/filebeat/module/system/_meta/kibana/5.x/visualization/5dd15c00-fa78-11e6-ae9b-81e5311e8cab.json similarity index 100% rename from filebeat/module/system/_meta/kibana/visualization/5dd15c00-fa78-11e6-ae9b-81e5311e8cab.json rename to filebeat/module/system/_meta/kibana/5.x/visualization/5dd15c00-fa78-11e6-ae9b-81e5311e8cab.json diff --git a/filebeat/module/system/_meta/kibana/visualization/78b74f30-f9cd-11e6-8115-a7c18106d86a.json b/filebeat/module/system/_meta/kibana/5.x/visualization/78b74f30-f9cd-11e6-8115-a7c18106d86a.json similarity index 100% rename from filebeat/module/system/_meta/kibana/visualization/78b74f30-f9cd-11e6-8115-a7c18106d86a.json rename to filebeat/module/system/_meta/kibana/5.x/visualization/78b74f30-f9cd-11e6-8115-a7c18106d86a.json diff --git a/filebeat/module/system/_meta/kibana/visualization/Syslog-events-by-hostname.json b/filebeat/module/system/_meta/kibana/5.x/visualization/Syslog-events-by-hostname.json similarity index 100% rename from filebeat/module/system/_meta/kibana/visualization/Syslog-events-by-hostname.json rename to filebeat/module/system/_meta/kibana/5.x/visualization/Syslog-events-by-hostname.json diff --git a/filebeat/module/system/_meta/kibana/visualization/Syslog-hostnames-and-processes.json b/filebeat/module/system/_meta/kibana/5.x/visualization/Syslog-hostnames-and-processes.json similarity index 100% rename from filebeat/module/system/_meta/kibana/visualization/Syslog-hostnames-and-processes.json rename to filebeat/module/system/_meta/kibana/5.x/visualization/Syslog-hostnames-and-processes.json diff --git a/filebeat/module/system/_meta/kibana/visualization/d16bb400-f9cc-11e6-8115-a7c18106d86a.json b/filebeat/module/system/_meta/kibana/5.x/visualization/d16bb400-f9cc-11e6-8115-a7c18106d86a.json similarity index 100% rename from filebeat/module/system/_meta/kibana/visualization/d16bb400-f9cc-11e6-8115-a7c18106d86a.json rename to filebeat/module/system/_meta/kibana/5.x/visualization/d16bb400-f9cc-11e6-8115-a7c18106d86a.json diff --git a/filebeat/module/system/_meta/kibana/visualization/d56ee420-fa79-11e6-a1df-a78bd7504d38.json b/filebeat/module/system/_meta/kibana/5.x/visualization/d56ee420-fa79-11e6-a1df-a78bd7504d38.json similarity index 100% rename from filebeat/module/system/_meta/kibana/visualization/d56ee420-fa79-11e6-a1df-a78bd7504d38.json rename to filebeat/module/system/_meta/kibana/5.x/visualization/d56ee420-fa79-11e6-a1df-a78bd7504d38.json diff --git a/filebeat/module/system/_meta/kibana/visualization/dc589770-fa2b-11e6-bbd3-29c986c96e5a.json b/filebeat/module/system/_meta/kibana/5.x/visualization/dc589770-fa2b-11e6-bbd3-29c986c96e5a.json similarity index 100% rename from filebeat/module/system/_meta/kibana/visualization/dc589770-fa2b-11e6-bbd3-29c986c96e5a.json rename to filebeat/module/system/_meta/kibana/5.x/visualization/dc589770-fa2b-11e6-bbd3-29c986c96e5a.json diff --git a/filebeat/module/system/_meta/kibana/visualization/e121b140-fa78-11e6-a1df-a78bd7504d38.json b/filebeat/module/system/_meta/kibana/5.x/visualization/e121b140-fa78-11e6-a1df-a78bd7504d38.json similarity index 100% rename from filebeat/module/system/_meta/kibana/visualization/e121b140-fa78-11e6-a1df-a78bd7504d38.json rename to filebeat/module/system/_meta/kibana/5.x/visualization/e121b140-fa78-11e6-a1df-a78bd7504d38.json diff --git a/filebeat/module/system/_meta/kibana/visualization/f398d2f0-fa77-11e6-ae9b-81e5311e8cab.json b/filebeat/module/system/_meta/kibana/5.x/visualization/f398d2f0-fa77-11e6-ae9b-81e5311e8cab.json similarity index 100% rename from filebeat/module/system/_meta/kibana/visualization/f398d2f0-fa77-11e6-ae9b-81e5311e8cab.json rename to filebeat/module/system/_meta/kibana/5.x/visualization/f398d2f0-fa77-11e6-ae9b-81e5311e8cab.json diff --git a/filebeat/module/system/_meta/kibana/default/dashboard/filebeat-system.json b/filebeat/module/system/_meta/kibana/default/dashboard/filebeat-system.json new file mode 100644 index 00000000000..edaf74c3114 --- /dev/null +++ b/filebeat/module/system/_meta/kibana/default/dashboard/filebeat-system.json @@ -0,0 +1,94 @@ +{ + "objects": [ + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "b6f321e0-fa25-11e6-bbd3-29c986c96e5a", + "title": "Sudo commands by user", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Sudo commands by user\",\"type\":\"histogram\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"system.auth.user\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}" + }, + "id": "5c7af030-fa2a-11e6-bbd3-29c986c96e5a", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[],\"index\":\"filebeat-*\",\"highlightAll\":true,\"query\":{\"query_string\":{\"query\":\"_exists_:system.auth.sudo.error\",\"analyze_wildcard\":true}}}" + }, + "title": "Sudo errors", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Sudo errors\",\"type\":\"histogram\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"system.auth.sudo.error\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}" + }, + "id": "51164310-fa2b-11e6-bbd3-29c986c96e5a", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "b6f321e0-fa25-11e6-bbd3-29c986c96e5a", + "title": "Top sudo commands", + "uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}", + "version": 1, + "visState": "{\"title\":\"Top sudo commands\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"system.auth.sudo.command\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"system.auth.user\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}" + }, + "id": "dc589770-fa2b-11e6-bbd3-29c986c96e5a", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "columns": [ + "system.auth.user", + "system.auth.sudo.user", + "system.auth.sudo.pwd", + "system.auth.sudo.command" + ], + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"filebeat-*\",\"highlightAll\":true,\"query\":{\"query_string\":{\"query\":\"_exists_:system.auth.sudo\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "sort": [ + "@timestamp", + "desc" + ], + "title": "Sudo commands", + "version": 1 + }, + "id": "b6f321e0-fa25-11e6-bbd3-29c986c96e5a", + "type": "search", + "version": 8 + }, + { + "attributes": { + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}" + }, + "optionsJSON": "{\"darkTheme\":false}", + "panelsJSON": "[{\"col\":1,\"id\":\"5c7af030-fa2a-11e6-bbd3-29c986c96e5a\",\"panelIndex\":1,\"row\":5,\"size_x\":12,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"51164310-fa2b-11e6-bbd3-29c986c96e5a\",\"panelIndex\":2,\"row\":9,\"size_x\":12,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"dc589770-fa2b-11e6-bbd3-29c986c96e5a\",\"panelIndex\":3,\"row\":1,\"size_x\":12,\"size_y\":4,\"type\":\"visualization\"}]", + "timeRestore": false, + "title": "Filebeat Auth - Sudo commands", + "uiStateJSON": "{\"P-3\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}", + "version": 1 + }, + "id": "277876d0-fa2c-11e6-bbd3-29c986c96e5a", + "type": "dashboard", + "version": 4 + } + ], + "version": "6.0.0-alpha3-SNAPSHOT" +} \ No newline at end of file diff --git a/heartbeat/_meta/kibana/dashboard/f3e771c0-eb19-11e6-be20-559646f8b9ba.json b/heartbeat/_meta/kibana/5.x/dashboard/f3e771c0-eb19-11e6-be20-559646f8b9ba.json similarity index 100% rename from heartbeat/_meta/kibana/dashboard/f3e771c0-eb19-11e6-be20-559646f8b9ba.json rename to heartbeat/_meta/kibana/5.x/dashboard/f3e771c0-eb19-11e6-be20-559646f8b9ba.json diff --git a/heartbeat/_meta/kibana/5.x/index-pattern/heartbeat.json b/heartbeat/_meta/kibana/5.x/index-pattern/heartbeat.json new file mode 100644 index 00000000000..7660b6f2db3 --- /dev/null +++ b/heartbeat/_meta/kibana/5.x/index-pattern/heartbeat.json @@ -0,0 +1,6 @@ +{ + "fields": "[{\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.hostname\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.timezone\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"@timestamp\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"tags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"fields\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"error.message\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"error.code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"error.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.provider\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.instance_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.instance_name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.machine_type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.availability_zone\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.project_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.region\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.image\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.labels\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.pod.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.namespace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.labels\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.annotations\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.container.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.container.image\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"monitor.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"monitor.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"monitor.id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"monitor.duration.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"monitor.scheme\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"monitor.host\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"monitor.ip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"monitor.status\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"resolve.host\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"resolve.ip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"resolve.rtt.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"socks5.rtt.connect.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"tls.rtt.handshake.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"http.url\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.response.status\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.rtt.validate.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.rtt.validate_body.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.rtt.write_request.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.rtt.response_header.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.rtt.total.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp.requests\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp.rtt.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"tcp.port\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"tcp.rtt.connect.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"tcp.rtt.validate.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_id\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"_type\", \"searchable\": true, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_index\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_score\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"number\", \"scripted\": false}]", + "fieldFormatMap": "{\"@timestamp\": {\"id\": \"date\"}}", + "timeFieldName": "@timestamp", + "title": "heartbeat-*" +} \ No newline at end of file diff --git a/heartbeat/_meta/kibana/search/02014c80-29d2-11e7-a68f-bfaa2341cc52.json b/heartbeat/_meta/kibana/5.x/search/02014c80-29d2-11e7-a68f-bfaa2341cc52.json similarity index 100% rename from heartbeat/_meta/kibana/search/02014c80-29d2-11e7-a68f-bfaa2341cc52.json rename to heartbeat/_meta/kibana/5.x/search/02014c80-29d2-11e7-a68f-bfaa2341cc52.json diff --git a/heartbeat/_meta/kibana/visualization/091c3a90-eb1e-11e6-be20-559646f8b9ba.json b/heartbeat/_meta/kibana/5.x/visualization/091c3a90-eb1e-11e6-be20-559646f8b9ba.json similarity index 100% rename from heartbeat/_meta/kibana/visualization/091c3a90-eb1e-11e6-be20-559646f8b9ba.json rename to heartbeat/_meta/kibana/5.x/visualization/091c3a90-eb1e-11e6-be20-559646f8b9ba.json diff --git a/heartbeat/_meta/kibana/visualization/0f4c0560-eb20-11e6-9f11-159ff202874a.json b/heartbeat/_meta/kibana/5.x/visualization/0f4c0560-eb20-11e6-9f11-159ff202874a.json similarity index 100% rename from heartbeat/_meta/kibana/visualization/0f4c0560-eb20-11e6-9f11-159ff202874a.json rename to heartbeat/_meta/kibana/5.x/visualization/0f4c0560-eb20-11e6-9f11-159ff202874a.json diff --git a/heartbeat/_meta/kibana/visualization/1738dbc0-eb1d-11e6-be20-559646f8b9ba.json b/heartbeat/_meta/kibana/5.x/visualization/1738dbc0-eb1d-11e6-be20-559646f8b9ba.json similarity index 100% rename from heartbeat/_meta/kibana/visualization/1738dbc0-eb1d-11e6-be20-559646f8b9ba.json rename to heartbeat/_meta/kibana/5.x/visualization/1738dbc0-eb1d-11e6-be20-559646f8b9ba.json diff --git a/heartbeat/_meta/kibana/visualization/920e8140-eb1a-11e6-be20-559646f8b9ba.json b/heartbeat/_meta/kibana/5.x/visualization/920e8140-eb1a-11e6-be20-559646f8b9ba.json similarity index 100% rename from heartbeat/_meta/kibana/visualization/920e8140-eb1a-11e6-be20-559646f8b9ba.json rename to heartbeat/_meta/kibana/5.x/visualization/920e8140-eb1a-11e6-be20-559646f8b9ba.json diff --git a/heartbeat/_meta/kibana/visualization/c65ef340-eb19-11e6-be20-559646f8b9ba.json b/heartbeat/_meta/kibana/5.x/visualization/c65ef340-eb19-11e6-be20-559646f8b9ba.json similarity index 100% rename from heartbeat/_meta/kibana/visualization/c65ef340-eb19-11e6-be20-559646f8b9ba.json rename to heartbeat/_meta/kibana/5.x/visualization/c65ef340-eb19-11e6-be20-559646f8b9ba.json diff --git a/heartbeat/_meta/kibana/default/index-pattern/heartbeat.json b/heartbeat/_meta/kibana/default/index-pattern/heartbeat.json new file mode 100644 index 00000000000..6eba26dc4fb --- /dev/null +++ b/heartbeat/_meta/kibana/default/index-pattern/heartbeat.json @@ -0,0 +1,16 @@ +{ + "version": "6.0.0-alpha2", + "objects": [ + { + "attributes": { + "fields": "[{\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.hostname\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.timezone\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"@timestamp\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"tags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"fields\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"error.message\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"error.code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"error.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.provider\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.instance_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.instance_name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.machine_type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.availability_zone\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.project_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.region\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.image\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.labels\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.pod.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.namespace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.labels\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.annotations\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.container.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.container.image\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"monitor.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"monitor.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"monitor.id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"monitor.duration.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"monitor.scheme\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"monitor.host\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"monitor.ip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"monitor.status\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"resolve.host\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"resolve.ip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"resolve.rtt.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"socks5.rtt.connect.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"tls.rtt.handshake.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"http.url\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.response.status\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.rtt.validate.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.rtt.validate_body.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.rtt.write_request.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.rtt.response_header.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.rtt.total.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp.requests\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp.rtt.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"tcp.port\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"tcp.rtt.connect.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"tcp.rtt.validate.us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_id\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"_type\", \"searchable\": true, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_index\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_score\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"number\", \"scripted\": false}]", + "fieldFormatMap": "{\"@timestamp\": {\"id\": \"date\"}}", + "timeFieldName": "@timestamp", + "title": "heartbeat-*" + }, + "version": 1, + "type": "index-pattern", + "id": "heartbeat-*" + } + ] +} \ No newline at end of file diff --git a/heartbeat/heartbeat.reference.yml b/heartbeat/heartbeat.reference.yml index c36a8b96fce..78fe912bb50 100644 --- a/heartbeat/heartbeat.reference.yml +++ b/heartbeat/heartbeat.reference.yml @@ -774,7 +774,7 @@ output.elasticsearch: #============================== Dashboards ===================================== # These settings control loading the sample dashboards to the Kibana index. Loading # the dashboards is disabled by default and can be enabled either by setting the -# options here, or by using the `-setup` CLI flag. +# options here, or by using the `-setup` CLI flag or the `setup` command. #setup.dashboards.enabled: false # The URL from where to download the dashboards archive. By default this URL @@ -830,6 +830,25 @@ output.elasticsearch: # Overwrite existing template #setup.template.overwrite: false +#============================== Kibana ===================================== + +# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API. +# This requires a Kibana endpoint configuration. +setup.kibana: + + # Kibana Host + # Scheme and port can be left out and will be set to the default (http and 5601) + # In case you specify and additional path, the scheme is required: http://localhost:5601/path + # IPv6 addresses should always be defined as: https://[2001:db8::1]:5601 + #host: "localhost:5601" + + # Optional protocol and basic auth crendentials. + #protocol: "https" + #username: "elastic" + #password: "changeme" + + # Optional HTTP Path + #path: "" #================================ HTTP Endpoint ====================================== # Each beat can expose internal data points through a http endpoint. For security diff --git a/heartbeat/heartbeat.yml b/heartbeat/heartbeat.yml index 19ac4afa336..308b8105159 100644 --- a/heartbeat/heartbeat.yml +++ b/heartbeat/heartbeat.yml @@ -37,6 +37,31 @@ heartbeat.monitors: #fields: # env: staging + +#============================== Dashboards ===================================== +# These settings control loading the sample dashboards to the Kibana index. Loading +# the dashboards is disabled by default and can be enabled either by setting the +# options here, or by using the `-setup` CLI flag or the `setup` command. +#setup.dashboards.enabled: false + +# The URL from where to download the dashboards archive. By default this URL +# has a value which is computed based on the Beat name and version. For released +# versions, this URL points to the dashboard archive on the artifacts.elastic.co +# website. +#setup.dashboards.url: + +#============================== Kibana ===================================== + +# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API. +# This requires a Kibana endpoint configuration. +setup.kibana: + + # Kibana Host + # Scheme and port can be left out and will be set to the default (http and 5601) + # In case you specify and additional path, the scheme is required: http://localhost:5601/path + # IPv6 addresses should always be defined as: https://[2001:db8::1]:5601 + #host: "localhost:5601" + #================================ Outputs ===================================== # Configure what outputs to use when sending the data collected by the beat. diff --git a/libbeat/_meta/config.reference.yml b/libbeat/_meta/config.reference.yml index 639713e00f4..168fe4355a5 100644 --- a/libbeat/_meta/config.reference.yml +++ b/libbeat/_meta/config.reference.yml @@ -560,7 +560,7 @@ output.elasticsearch: #============================== Dashboards ===================================== # These settings control loading the sample dashboards to the Kibana index. Loading # the dashboards is disabled by default and can be enabled either by setting the -# options here, or by using the `-setup` CLI flag. +# options here, or by using the `-setup` CLI flag or the `setup` command. #setup.dashboards.enabled: false # The URL from where to download the dashboards archive. By default this URL @@ -616,6 +616,25 @@ output.elasticsearch: # Overwrite existing template #setup.template.overwrite: false +#============================== Kibana ===================================== + +# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API. +# This requires a Kibana endpoint configuration. +setup.kibana: + + # Kibana Host + # Scheme and port can be left out and will be set to the default (http and 5601) + # In case you specify and additional path, the scheme is required: http://localhost:5601/path + # IPv6 addresses should always be defined as: https://[2001:db8::1]:5601 + #host: "localhost:5601" + + # Optional protocol and basic auth crendentials. + #protocol: "https" + #username: "elastic" + #password: "changeme" + + # Optional HTTP Path + #path: "" #================================ HTTP Endpoint ====================================== # Each beat can expose internal data points through a http endpoint. For security diff --git a/libbeat/_meta/config.yml b/libbeat/_meta/config.yml index f84be9ce0f9..5bc54c106d3 100644 --- a/libbeat/_meta/config.yml +++ b/libbeat/_meta/config.yml @@ -14,6 +14,31 @@ #fields: # env: staging + +#============================== Dashboards ===================================== +# These settings control loading the sample dashboards to the Kibana index. Loading +# the dashboards is disabled by default and can be enabled either by setting the +# options here, or by using the `-setup` CLI flag or the `setup` command. +#setup.dashboards.enabled: false + +# The URL from where to download the dashboards archive. By default this URL +# has a value which is computed based on the Beat name and version. For released +# versions, this URL points to the dashboard archive on the artifacts.elastic.co +# website. +#setup.dashboards.url: + +#============================== Kibana ===================================== + +# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API. +# This requires a Kibana endpoint configuration. +setup.kibana: + + # Kibana Host + # Scheme and port can be left out and will be set to the default (http and 5601) + # In case you specify and additional path, the scheme is required: http://localhost:5601/path + # IPv6 addresses should always be defined as: https://[2001:db8::1]:5601 + #host: "localhost:5601" + #================================ Outputs ===================================== # Configure what outputs to use when sending the data collected by the beat. diff --git a/libbeat/_meta/kibana/5.x/index-pattern/libbeat.json b/libbeat/_meta/kibana/5.x/index-pattern/libbeat.json new file mode 100644 index 00000000000..2e32925e83a --- /dev/null +++ b/libbeat/_meta/kibana/5.x/index-pattern/libbeat.json @@ -0,0 +1,6 @@ +{ + "fields": "[{\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.hostname\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.timezone\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"@timestamp\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"tags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"fields\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"error.message\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"error.code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"error.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.provider\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.instance_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.instance_name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.machine_type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.availability_zone\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.project_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.region\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.image\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.labels\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.pod.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.namespace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.labels\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.annotations\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.container.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.container.image\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_id\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"_type\", \"searchable\": true, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_index\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_score\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"number\", \"scripted\": false}]", + "fieldFormatMap": "{\"@timestamp\": {\"id\": \"date\"}}", + "timeFieldName": "@timestamp", + "title": "libbeat-*" +} \ No newline at end of file diff --git a/libbeat/_meta/kibana/default/index-pattern/libbeat.json b/libbeat/_meta/kibana/default/index-pattern/libbeat.json new file mode 100644 index 00000000000..62c33ee4a1f --- /dev/null +++ b/libbeat/_meta/kibana/default/index-pattern/libbeat.json @@ -0,0 +1,16 @@ +{ + "version": "6.0.0-alpha2", + "objects": [ + { + "attributes": { + "fields": "[{\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.hostname\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.timezone\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"@timestamp\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"tags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"fields\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"error.message\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"error.code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"error.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.provider\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.instance_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.instance_name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.machine_type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.availability_zone\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.project_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.region\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.image\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.labels\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.pod.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.namespace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.labels\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.annotations\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.container.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.container.image\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_id\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"_type\", \"searchable\": true, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_index\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_score\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"number\", \"scripted\": false}]", + "fieldFormatMap": "{\"@timestamp\": {\"id\": \"date\"}}", + "timeFieldName": "@timestamp", + "title": "libbeat-*" + }, + "version": 1, + "type": "index-pattern", + "id": "libbeat-*" + } + ] +} \ No newline at end of file diff --git a/libbeat/beat/beat.go b/libbeat/beat/beat.go index 56802e8a2b5..1e6387ba2e1 100644 --- a/libbeat/beat/beat.go +++ b/libbeat/beat/beat.go @@ -126,6 +126,7 @@ type BeatConfig struct { Path paths.Path `config:"path"` Dashboards *common.Config `config:"setup.dashboards"` Template *common.Config `config:"setup.template"` + Kibana *common.Config `config:"setup.kibana"` Http *common.Config `config:"http"` } @@ -568,18 +569,14 @@ func (b *Beat) loadDashboards(force bool) error { } } - if b.Config.Dashboards != nil && b.Config.Dashboards.Enabled() && b.Config.Output.Name() == "elasticsearch" { - esConfig := b.Config.Output.Config() - if esConfig == nil || !esConfig.Enabled() { - return fmt.Errorf("Dashboard loading requested but the Elasticsearch output is not configured/enabled") - } - esClient, err := elasticsearch.NewConnectedClient(esConfig) - if err != nil { - return fmt.Errorf("Error creating ES client: %v", err) - } - defer esClient.Close() + if b.Config.Dashboards != nil && b.Config.Dashboards.Enabled() { + var esConfig *common.Config - err = dashboards.ImportDashboards(b.Info.Beat, b.Info.Version, esClient, b.Config.Dashboards) + if b.Config.Output.Name() == "elasticsearch" { + esConfig = b.Config.Output.Config() + } + err := dashboards.ImportDashboards(b.Info.Beat, b.Info.Version, b.Config.Kibana, + esConfig, b.Config.Dashboards) if err != nil { return fmt.Errorf("Error importing Kibana dashboards: %v", err) } diff --git a/libbeat/common/config.go b/libbeat/common/config.go index 82f7ae722be..137cab5273c 100644 --- a/libbeat/common/config.go +++ b/libbeat/common/config.go @@ -12,7 +12,7 @@ import ( "github.com/elastic/beats/libbeat/common/file" "github.com/elastic/beats/libbeat/logp" - "github.com/elastic/go-ucfg" + ucfg "github.com/elastic/go-ucfg" "github.com/elastic/go-ucfg/cfgutil" cfgflag "github.com/elastic/go-ucfg/flag" "github.com/elastic/go-ucfg/yaml" diff --git a/libbeat/common/url.go b/libbeat/common/url.go new file mode 100644 index 00000000000..6cd402ad693 --- /dev/null +++ b/libbeat/common/url.go @@ -0,0 +1,70 @@ +package common + +import ( + "fmt" + "net" + "net/url" + "regexp" + "strconv" + "strings" +) + +var hasScheme = regexp.MustCompile(`^([a-z][a-z0-9+\-.]*)://`) + +// MakeURL creates the url based on the url configuration. +// Adds missing parts with defaults (scheme, host, port) +func MakeURL(defaultScheme string, defaultPath string, rawURL string, defaultPort int) (string, error) { + + if defaultScheme == "" { + defaultScheme = "http" + } + + if !hasScheme.MatchString(rawURL) { + rawURL = fmt.Sprintf("%v://%v", defaultScheme, rawURL) + } + + addr, err := url.Parse(rawURL) + if err != nil { + return "", err + } + + scheme := addr.Scheme + host := addr.Host + port := strconv.Itoa(defaultPort) + + if host == "" { + host = "localhost" + } else { + + // split host and optional port + if splitHost, splitPort, err := net.SplitHostPort(host); err == nil { + host = splitHost + port = splitPort + } + + // Check if ipv6 + if strings.Count(host, ":") > 1 && strings.Count(host, "]") == 0 { + host = "[" + host + "]" + } + } + + // Assign default path if not set + if addr.Path == "" { + addr.Path = defaultPath + } + + // reconstruct url + addr.Scheme = scheme + addr.Host = host + ":" + port + + return addr.String(), nil +} + +func EncodeURLParams(url string, params url.Values) string { + + if len(params) == 0 { + return url + } + + return strings.Join([]string{url, "?", params.Encode()}, "") +} diff --git a/libbeat/common/url_test.go b/libbeat/common/url_test.go new file mode 100644 index 00000000000..37cb8a5ed83 --- /dev/null +++ b/libbeat/common/url_test.go @@ -0,0 +1,103 @@ +// +build !integration + +package common + +import ( + "fmt" + "net/url" + "testing" + + "github.com/stretchr/testify/assert" +) + +func TestGetUrl(t *testing.T) { + + // List of inputs / outputs that must match after fetching url + // Setting a path without a scheme is not allowed. Example: 192.168.1.1:9200/hello + inputOutput := map[string]string{ + + "": "http://localhost:9200", + "http://localhost": "http://localhost:9200", + "http://localhost:80": "http://localhost:80", + "http://localhost:80/": "http://localhost:80/", + "http://localhost/": "http://localhost:9200/", + + // no schema + hostname + "33f3600fd5c1bb599af557c36a4efb08.host": "http://33f3600fd5c1bb599af557c36a4efb08.host:9200", + "33f3600fd5c1bb599af557c36a4efb08.host:12345": "http://33f3600fd5c1bb599af557c36a4efb08.host:12345", + "localhost": "http://localhost:9200", + "localhost:80": "http://localhost:80", + "localhost:80/": "http://localhost:80/", + "localhost/": "http://localhost:9200/", + "localhost/mypath": "http://localhost:9200/mypath", + + // shema + ipv4 + "http://192.168.1.1:80": "http://192.168.1.1:80", + "https://192.168.1.1:80/hello": "https://192.168.1.1:80/hello", + "http://192.168.1.1": "http://192.168.1.1:9200", + "http://192.168.1.1/hello": "http://192.168.1.1:9200/hello", + + // no schema + ipv4 + "192.168.1.1": "http://192.168.1.1:9200", + "192.168.1.1:80": "http://192.168.1.1:80", + "192.168.1.1/hello": "http://192.168.1.1:9200/hello", + "192.168.1.1:80/hello": "http://192.168.1.1:80/hello", + + // schema + ipv6 + "http://[2001:db8::1]:80": "http://[2001:db8::1]:80", + "http://[2001:db8::1]": "http://[2001:db8::1]:9200", + "https://[2001:db8::1]:9200": "https://[2001:db8::1]:9200", + "http://FE80:0000:0000:0000:0202:B3FF:FE1E:8329": "http://[FE80:0000:0000:0000:0202:B3FF:FE1E:8329]:9200", + "http://[2001:db8::1]:80/hello": "http://[2001:db8::1]:80/hello", + "http://[2001:db8::1]/hello": "http://[2001:db8::1]:9200/hello", + "https://[2001:db8::1]:9200/hello": "https://[2001:db8::1]:9200/hello", + "http://FE80:0000:0000:0000:0202:B3FF:FE1E:8329/hello": "http://[FE80:0000:0000:0000:0202:B3FF:FE1E:8329]:9200/hello", + + // no schema + ipv6 + "2001:db8::1": "http://[2001:db8::1]:9200", + "[2001:db8::1]:80": "http://[2001:db8::1]:80", + "[2001:db8::1]": "http://[2001:db8::1]:9200", + "2001:db8::1/hello": "http://[2001:db8::1]:9200/hello", + "[2001:db8::1]:80/hello": "http://[2001:db8::1]:80/hello", + "[2001:db8::1]/hello": "http://[2001:db8::1]:9200/hello", + } + + for input, output := range inputOutput { + urlNew, err := MakeURL("", "", input, 9200) + assert.Nil(t, err) + assert.Equal(t, output, urlNew, fmt.Sprintf("input: %v", input)) + } + + inputOutputWithDefaults := map[string]string{ + "http://localhost": "http://localhost:9200/hello", + "http://localhost/test": "http://localhost:9200/test", + "192.156.4.5": "https://192.156.4.5:9200/hello", + "http://username:password@es.found.io:9324": "http://username:password@es.found.io:9324/hello", + } + + for input, output := range inputOutputWithDefaults { + urlNew, err := MakeURL("https", "/hello", input, 9200) + assert.Nil(t, err) + assert.Equal(t, output, urlNew) + } + +} + +func TestURLParamsEncode(t *testing.T) { + + inputOutputWithParams := map[string]string{ + "http://localhost": "http://localhost:5601?dashboard=first&dashboard=second", + } + + params := url.Values{} + params.Add("dashboard", "first") + params.Add("dashboard", "second") + + for input, output := range inputOutputWithParams { + urlNew, err := MakeURL("", "", input, 5601) + urlWithParams := EncodeURLParams(urlNew, params) + assert.Nil(t, err) + assert.Equal(t, output, urlWithParams) + } + +} diff --git a/libbeat/dashboards/dashboards.go b/libbeat/dashboards/dashboards.go index f105e6b8699..6fa628da49b 100644 --- a/libbeat/dashboards/dashboards.go +++ b/libbeat/dashboards/dashboards.go @@ -2,22 +2,16 @@ package dashboards import ( "fmt" + "strconv" + "strings" "github.com/elastic/beats/libbeat/common" - "github.com/elastic/beats/libbeat/outputs/elasticsearch" + "github.com/elastic/beats/libbeat/logp" ) -// DashboardLoader is a subset of the Elasticsearch client API capable of -// loading the dashboards. -type DashboardLoader interface { - LoadJSON(path string, json map[string]interface{}) ([]byte, error) - CreateIndex(index string, body interface{}) (int, *elasticsearch.QueryResult, error) - IndexExists(index string) (int, error) - GetVersion() string -} - -func ImportDashboards(beatName, beatVersion string, esClient DashboardLoader, cfg *common.Config) error { - if cfg == nil || !cfg.Enabled() { +func ImportDashboards(beatName, beatVersion string, kibanaConfig *common.Config, esConfig *common.Config, + dashboardsConfig *common.Config) error { + if dashboardsConfig == nil || !dashboardsConfig.Enabled() { return nil } @@ -26,19 +20,111 @@ func ImportDashboards(beatName, beatVersion string, esClient DashboardLoader, cf dashConfig.URL = fmt.Sprintf(defaultURLPattern, beatVersion) dashConfig.SnapshotURL = fmt.Sprintf(snapshotURLPattern, beatVersion) - err := cfg.Unpack(&dashConfig) + err := dashboardsConfig.Unpack(&dashConfig) if err != nil { return err } - importer, err := NewImporter(&dashConfig, esClient, nil) + if esConfig != nil { + status, err := ImportDashboardsViaElasticsearch(esConfig, &dashConfig) + if err != nil { + return err + } + if status == true { + // the dashboards were imported via Elasticsearch + return nil + } + } + + err = ImportDashboardsViaKibana(kibanaConfig, &dashConfig) if err != nil { + return err + } + + return nil +} + +func ImportDashboardsViaKibana(config *common.Config, dashConfig *DashboardsConfig) error { + + if config == nil { + config = common.NewConfig() + } + if !config.Enabled() { return nil } + kibanaLoader, err := NewKibanaLoader(config, dashConfig, nil) + if err != nil { + return fmt.Errorf("fail to create the Kibana loader: %v", err) + } + + defer kibanaLoader.Close() + + version, err := getMajorVersion(kibanaLoader.version) + if err != nil { + return fmt.Errorf("wrong Kibana version: %v", err) + } + + if version < 6 { + return fmt.Errorf("Kibana API is not available in Kibana version %s", kibanaLoader.version) + } + + importer, err := NewImporter("default", dashConfig, *kibanaLoader) + if err != nil { + return fmt.Errorf("fail to create a Kibana importer for loading the dashboards: %v", err) + } + if err := importer.Import(); err != nil { - return err + return fmt.Errorf("fail to import the dashboards in Kibana: %v", err) } return nil } + +func ImportDashboardsViaElasticsearch(config *common.Config, dashConfig *DashboardsConfig) (bool, error) { + + esLoader, err := NewElasticsearchLoader(config, dashConfig, nil) + if err != nil { + return false, fmt.Errorf("fail to create the Elasticsearch loader: %v", err) + } + + defer esLoader.Close() + + logp.Debug("dashboards", "Elasticsearch URL %v", esLoader.client.Connection.URL) + + version, err := getMajorVersion(esLoader.version) + if err != nil { + return false, fmt.Errorf("wrong Elasticsearch version: %v", err) + } + + if version >= 6 { + logp.Warn("For Elasticsearch version >= 6.0.0, the Kibana dashboards need to be imported via the Kibana API.") + return false, nil + } + + importer, err := NewImporter("5.x", dashConfig, *esLoader) + if err != nil { + return false, fmt.Errorf("fail to create an Elasticsearch importer for loading the dashboards: %v", err) + } + + if err := importer.Import(); err != nil { + return false, fmt.Errorf("fail to import the dashboards in Elasticsearch: %v", err) + } + + return true, nil + +} +func getMajorVersion(version string) (int, error) { + + fields := strings.Split(version, ".") + if len(fields) != 3 { + return 0, fmt.Errorf("wrong version %s", version) + } + majorVersion := fields[0] + majorVersionInt, err := strconv.Atoi(majorVersion) + if err != nil { + return 0, err + } + + return majorVersionInt, nil +} diff --git a/libbeat/dashboards/es_loader.go b/libbeat/dashboards/es_loader.go new file mode 100644 index 00000000000..8264bc1b091 --- /dev/null +++ b/libbeat/dashboards/es_loader.go @@ -0,0 +1,326 @@ +package dashboards + +import ( + "encoding/json" + "fmt" + "io/ioutil" + "path" + "path/filepath" + "strings" + + "github.com/elastic/beats/libbeat/common" + "github.com/elastic/beats/libbeat/logp" + "github.com/elastic/beats/libbeat/outputs/elasticsearch" +) + +var KibanaApiStartingWith = "6.0.0-alpha2" + +type ElasticsearchLoader struct { + client *elasticsearch.Client + config *DashboardsConfig + version string + msgOutputter *MessageOutputter +} + +func NewElasticsearchLoader(cfg *common.Config, dashboardsConfig *DashboardsConfig, msgOutputter *MessageOutputter) (*ElasticsearchLoader, error) { + + if cfg == nil || !cfg.Enabled() { + return nil, fmt.Errorf("Elasticsearch output is not configured/enabled") + } + + esClient, err := elasticsearch.NewConnectedClient(cfg) + if err != nil { + return nil, fmt.Errorf("Error creating Elasticsearch client: %v", err) + } + + version := esClient.GetVersion() + + loader := ElasticsearchLoader{ + client: esClient, + config: dashboardsConfig, + version: version, + msgOutputter: msgOutputter, + } + + loader.statusMsg("Initialize the Elasticsearch %s loader", version) + + // initialize the Kibana index + if err := loader.createKibanaIndex(); err != nil { + return nil, fmt.Errorf("fail to create the kibana index: %v", err) + } + + return &loader, nil +} + +// CreateKibanaIndex creates the kibana index if it doesn't exists and sets +// some index properties which are needed as a workaround for: +// https://github.com/elastic/beats-dashboards/issues/94 +func (loader ElasticsearchLoader) createKibanaIndex() error { + status, err := loader.client.IndexExists(loader.config.KibanaIndex) + + if err != nil { + if status != 404 { + return err + } else { + var settings common.MapStr + // XXX: this can be removed when the dashboard loaded will no longer need to support 6.0, + // because the Kibana API is used instead + if strings.HasPrefix(loader.client.GetVersion(), "6.") { + settings = common.MapStr{ + "settings": common.MapStr{ + "index.mapping.single_type": false, + }, + } + } else { + settings = nil + } + _, _, err = loader.client.CreateIndex(loader.config.KibanaIndex, settings) + if err != nil { + return fmt.Errorf("Failed to create index: %v", err) + } + + _, _, err = loader.client.CreateIndex(loader.config.KibanaIndex+"/_mapping/search", + common.MapStr{ + "search": common.MapStr{ + "properties": common.MapStr{ + "hits": common.MapStr{ + "type": "integer", + }, + "version": common.MapStr{ + "type": "integer", + }, + }, + }, + }) + if err != nil { + return fmt.Errorf("Failed to set the mapping: %v", err) + } + } + } + + return nil +} + +func (loader ElasticsearchLoader) ImportIndex(file string) error { + reader, err := ioutil.ReadFile(file) + if err != nil { + return err + } + var indexContent common.MapStr + json.Unmarshal(reader, &indexContent) + + indexName, ok := indexContent["title"].(string) + if !ok { + return fmt.Errorf("Missing title in the index-pattern file at %s", file) + } + + if loader.config.Index != "" { + // change index pattern name + loader.statusMsg("Change index in index-pattern %s", indexName) + indexContent["title"] = loader.config.Index + } + + path := "/" + loader.config.KibanaIndex + "/index-pattern/" + indexName + + if _, err = loader.client.LoadJSON(path, indexContent); err != nil { + return err + } + + return nil +} + +func (loader ElasticsearchLoader) importJSONFile(fileType string, file string) error { + + path := "/" + loader.config.KibanaIndex + "/" + fileType + + reader, err := ioutil.ReadFile(file) + if err != nil { + return fmt.Errorf("Failed to read %s. Error: %s", file, err) + } + var jsonContent map[string]interface{} + json.Unmarshal(reader, &jsonContent) + fileBase := strings.TrimSuffix(filepath.Base(file), filepath.Ext(file)) + + body, err := loader.client.LoadJSON(path+"/"+fileBase, jsonContent) + if err != nil { + return fmt.Errorf("Failed to load %s under %s/%s: %s. Response body: %s", file, path, fileBase, err, body) + } + + return nil +} + +func (loader ElasticsearchLoader) importPanelsFromDashboard(file string) (err error) { + + // directory with the dashboards + dir := filepath.Dir(file) + + // main directory with dashboard, search, visualizations directories + mainDir := filepath.Dir(dir) + + reader, err := ioutil.ReadFile(file) + if err != nil { + return + } + type record struct { + Title string `json:"title"` + PanelsJSON string `json:"panelsJSON"` + } + type panel struct { + ID string `json:"id"` + Type string `json:"type"` + } + + var jsonContent record + json.Unmarshal(reader, &jsonContent) + + var widgets []panel + json.Unmarshal([]byte(jsonContent.PanelsJSON), &widgets) + + for _, widget := range widgets { + + if widget.Type == "visualization" { + err = loader.importVisualization(path.Join(mainDir, "visualization", widget.ID+".json")) + if err != nil { + return err + } + } else if widget.Type == "search" { + err = loader.importSearch(path.Join(mainDir, "search", widget.ID+".json")) + if err != nil { + return err + } + } else { + loader.statusMsg("Widgets: %v", widgets) + return fmt.Errorf("Unknown panel type %s in %s", widget.Type, file) + } + } + return +} + +func (loader ElasticsearchLoader) importVisualization(file string) error { + + loader.statusMsg("Import visualization %s", file) + if err := loader.importJSONFile("visualization", file); err != nil { + return err + } + + err := loader.importSearchFromVisualization(file) + if err != nil { + return err + } + return nil +} + +func (loader ElasticsearchLoader) importSearch(file string) error { + + reader, err := ioutil.ReadFile(file) + if err != nil { + return err + } + searchName := strings.TrimSuffix(filepath.Base(file), filepath.Ext(file)) + + var searchContent common.MapStr + err = json.Unmarshal(reader, &searchContent) + if err != nil { + return fmt.Errorf("Failed to unmarshal search content %s: %v", searchName, err) + } + + if loader.config.Index != "" { + + // change index pattern name + if savedObject, ok := searchContent["kibanaSavedObjectMeta"].(map[string]interface{}); ok { + if source, ok := savedObject["searchSourceJSON"].(string); ok { + var record common.MapStr + err = json.Unmarshal([]byte(source), &record) + if err != nil { + return fmt.Errorf("Failed to unmarshal searchSourceJSON from search %s: %v", searchName, err) + } + + if _, ok := record["index"]; ok { + record["index"] = loader.config.Index + } + searchSourceJSON, err := json.Marshal(record) + if err != nil { + return fmt.Errorf("Failed to marshal searchSourceJSON: %v", err) + } + + savedObject["searchSourceJSON"] = string(searchSourceJSON) + } + } + + } + + path := "/" + loader.config.KibanaIndex + "/search/" + searchName + loader.statusMsg("Import search %s", file) + + if _, err = loader.client.LoadJSON(path, searchContent); err != nil { + return err + } + + return nil +} + +func (loader ElasticsearchLoader) importSearchFromVisualization(file string) error { + type record struct { + Title string `json:"title"` + SavedSearchID string `json:"savedSearchId"` + } + + reader, err := ioutil.ReadFile(file) + if err != nil { + return nil + } + + var jsonContent record + json.Unmarshal(reader, &jsonContent) + id := jsonContent.SavedSearchID + if len(id) == 0 { + // no search used + return nil + } + + // directory with the visualizations + dir := filepath.Dir(file) + + // main directory + mainDir := filepath.Dir(dir) + + searchFile := path.Join(mainDir, "search", id+".json") + + if searchFile != "" { + // visualization depends on search + if err := loader.importSearch(searchFile); err != nil { + return err + } + } + return nil +} + +func (loader ElasticsearchLoader) ImportDashboard(file string) error { + + /* load dashboard */ + err := loader.importJSONFile("dashboard", file) + if err != nil { + return err + } + + /* load the visualizations and searches that depend on the dashboard */ + err = loader.importPanelsFromDashboard(file) + if err != nil { + return err + } + + return nil +} + +func (loader ElasticsearchLoader) Close() error { + return loader.client.Close() +} + +func (loader ElasticsearchLoader) statusMsg(msg string, a ...interface{}) { + if loader.msgOutputter != nil { + (*loader.msgOutputter)(msg, a...) + } else { + logp.Debug("dashboards", msg, a...) + } + +} diff --git a/libbeat/dashboards/importer_integration_test.go b/libbeat/dashboards/es_loader_test.go similarity index 64% rename from libbeat/dashboards/importer_integration_test.go rename to libbeat/dashboards/es_loader_test.go index 6f709d9c3b2..867e1fae4c3 100644 --- a/libbeat/dashboards/importer_integration_test.go +++ b/libbeat/dashboards/es_loader_test.go @@ -3,6 +3,7 @@ package dashboards import ( + "strings" "testing" "github.com/elastic/beats/libbeat/logp" @@ -15,13 +16,27 @@ func TestImporter(t *testing.T) { logp.LogInit(logp.LOG_DEBUG, "", false, true, []string{"*"}) } - client := elasticsearch.GetTestingElasticsearch(t) - - imp, err := NewImporter(&DashboardsConfig{ + dashboardsConfig := DashboardsConfig{ KibanaIndex: ".kibana-test", File: "testdata/testbeat-dashboards.zip", Beat: "testbeat", - }, client, nil) + } + + client := elasticsearch.GetTestingElasticsearch(t) + if strings.HasPrefix(client.Connection.GetVersion(), "6.") { + t.Skip("Skipping tests for Elasticsearch 6.x releases") + } + + loader := ElasticsearchLoader{ + client: client, + config: &dashboardsConfig, + } + + err := loader.createKibanaIndex() + + assert.NoError(t, err) + + imp, err := NewImporter("5.x", &dashboardsConfig, loader) assert.NoError(t, err) @@ -30,6 +45,7 @@ func TestImporter(t *testing.T) { status, _, _ := client.Request("GET", "/.kibana-test/dashboard/1e4389f0-e871-11e6-911d-3f8ed6f72700", "", nil, nil) assert.Equal(t, 200, status) + } func TestImporterEmptyBeat(t *testing.T) { @@ -37,13 +53,23 @@ func TestImporterEmptyBeat(t *testing.T) { logp.LogInit(logp.LOG_DEBUG, "", false, true, []string{"*"}) } - client := elasticsearch.GetTestingElasticsearch(t) - - imp, err := NewImporter(&DashboardsConfig{ + dashboardsConfig := DashboardsConfig{ KibanaIndex: ".kibana-test-nobeat", File: "testdata/testbeat-dashboards.zip", Beat: "", - }, client, nil) + } + + client := elasticsearch.GetTestingElasticsearch(t) + if strings.HasPrefix(client.Connection.GetVersion(), "6.") { + t.Skip("Skipping tests for Elasticsearch 6.x releases") + } + + loader := ElasticsearchLoader{ + client: client, + config: &dashboardsConfig, + } + + imp, err := NewImporter("5.x", &dashboardsConfig, loader) assert.NoError(t, err) @@ -52,4 +78,5 @@ func TestImporterEmptyBeat(t *testing.T) { status, _, _ := client.Request("GET", "/.kibana-test-nobeat/dashboard/1e4389f0-e871-11e6-911d-3f8ed6f72700", "", nil, nil) assert.Equal(t, 200, status) + } diff --git a/libbeat/dashboards/importer.go b/libbeat/dashboards/importer.go index 76f93d3cfb5..8238dccb714 100644 --- a/libbeat/dashboards/importer.go +++ b/libbeat/dashboards/importer.go @@ -2,7 +2,6 @@ package dashboards import ( "archive/zip" - "encoding/json" "errors" "fmt" "io" @@ -12,9 +11,6 @@ import ( "path" "path/filepath" "strings" - - "github.com/elastic/beats/libbeat/common" - "github.com/elastic/beats/libbeat/logp" ) // MessageOutputter is a function type for injecting status logging @@ -22,43 +18,38 @@ import ( type MessageOutputter func(msg string, a ...interface{}) type Importer struct { - cfg *DashboardsConfig - client DashboardLoader - msgOutputter *MessageOutputter + cfg *DashboardsConfig + version string + + loader Loader } -func NewImporter(cfg *DashboardsConfig, client DashboardLoader, msgOutputter *MessageOutputter) (*Importer, error) { - return &Importer{ - cfg: cfg, - client: client, - msgOutputter: msgOutputter, - }, nil +type Loader interface { + ImportIndex(file string) error + ImportDashboard(file string) error + statusMsg(msg string, a ...interface{}) + Close() error } -func (imp Importer) statusMsg(msg string, a ...interface{}) { - if imp.msgOutputter != nil { - (*imp.msgOutputter)(msg, a...) - } else { - logp.Debug("dashboards", msg, a...) - } +func NewImporter(version string, cfg *DashboardsConfig, loader Loader) (*Importer, error) { + return &Importer{ + cfg: cfg, + version: version, + loader: loader, + }, nil } // Import imports the Kibana dashboards according to the configuration options. func (imp Importer) Import() error { - err := imp.CreateKibanaIndex() - if err != nil { - return fmt.Errorf("Error creating Kibana index: %v", err) - } - if imp.cfg.Dir != "" { - err = imp.ImportKibana(imp.cfg.Dir) + err := imp.ImportKibanaDir(imp.cfg.Dir) if err != nil { return fmt.Errorf("Error importing directory %s: %v", imp.cfg.Dir, err) } } else { if imp.cfg.URL != "" || imp.cfg.Snapshot || imp.cfg.File != "" { - err = imp.ImportArchive() + err := imp.ImportArchive() if err != nil { return fmt.Errorf("Error importing URL/file: %v", err) } @@ -69,276 +60,21 @@ func (imp Importer) Import() error { return nil } -// CreateKibanaIndex creates the kibana index if it doesn't exists and sets -// some index properties which are needed as a workaround for: -// https://github.com/elastic/beats-dashboards/issues/94 -func (imp Importer) CreateKibanaIndex() error { - status, err := imp.client.IndexExists(imp.cfg.KibanaIndex) - - if err != nil { - if status != 404 { - return err - } else { - var settings common.MapStr - // XXX: this can be removed when the dashboard loaded will no longer need to support 6.0, - // because the Kibana API is used instead - if strings.HasPrefix(imp.client.GetVersion(), "6.") { - settings = common.MapStr{ - "settings": common.MapStr{ - "index.mapping.single_type": false, - }, - } - } else { - settings = nil - } - _, _, err = imp.client.CreateIndex(imp.cfg.KibanaIndex, settings) - if err != nil { - return fmt.Errorf("Failed to create index: %v", err) - } - - _, _, err = imp.client.CreateIndex(imp.cfg.KibanaIndex+"/_mapping/search", - common.MapStr{ - "search": common.MapStr{ - "properties": common.MapStr{ - "hits": common.MapStr{ - "type": "integer", - }, - "version": common.MapStr{ - "type": "integer", - }, - }, - }, - }) - if err != nil { - return fmt.Errorf("Failed to set the mapping: %v", err) - } - } - } - - return nil -} - -func (imp Importer) ImportJSONFile(fileType string, file string) error { - - path := "/" + imp.cfg.KibanaIndex + "/" + fileType - - reader, err := ioutil.ReadFile(file) - if err != nil { - return fmt.Errorf("Failed to read %s. Error: %s", file, err) - } - var jsonContent map[string]interface{} - json.Unmarshal(reader, &jsonContent) - fileBase := strings.TrimSuffix(filepath.Base(file), filepath.Ext(file)) - - body, err := imp.client.LoadJSON(path+"/"+fileBase, jsonContent) - if err != nil { - return fmt.Errorf("Failed to load %s under %s/%s: %s. Response body: %s", file, path, fileBase, err, body) - } - - return nil -} - func (imp Importer) ImportDashboard(file string) error { - imp.statusMsg("Import dashboard %s", file) - - /* load dashboard */ - err := imp.ImportJSONFile("dashboard", file) - if err != nil { - return err - } - - /* load the visualizations and searches that depend on the dashboard */ - err = imp.importPanelsFromDashboard(file) - if err != nil { - return err - } - - return nil -} - -func (imp Importer) importPanelsFromDashboard(file string) (err error) { - - // directory with the dashboards - dir := filepath.Dir(file) - - // main directory with dashboard, search, visualizations directories - mainDir := filepath.Dir(dir) - - reader, err := ioutil.ReadFile(file) - if err != nil { - return - } - type record struct { - Title string `json:"title"` - PanelsJSON string `json:"panelsJSON"` - } - type panel struct { - ID string `json:"id"` - Type string `json:"type"` - } - - var jsonContent record - json.Unmarshal(reader, &jsonContent) - - var widgets []panel - json.Unmarshal([]byte(jsonContent.PanelsJSON), &widgets) - - for _, widget := range widgets { - - if widget.Type == "visualization" { - err = imp.ImportVisualization(path.Join(mainDir, "visualization", widget.ID+".json")) - if err != nil { - return err - } - } else if widget.Type == "search" { - err = imp.ImportSearch(path.Join(mainDir, "search", widget.ID+".json")) - if err != nil { - return err - } - } else { - imp.statusMsg("Widgets: %v", widgets) - return fmt.Errorf("Unknown panel type %s in %s", widget.Type, file) - } - } - return -} - -func (imp Importer) importSearchFromVisualization(file string) error { - type record struct { - Title string `json:"title"` - SavedSearchID string `json:"savedSearchId"` - } - - reader, err := ioutil.ReadFile(file) - if err != nil { - return nil - } - - var jsonContent record - json.Unmarshal(reader, &jsonContent) - id := jsonContent.SavedSearchID - if len(id) == 0 { - // no search used - return nil - } - - // directory with the visualizations - dir := filepath.Dir(file) - - // main directory - mainDir := filepath.Dir(dir) - - searchFile := path.Join(mainDir, "search", id+".json") - - if searchFile != "" { - // visualization depends on search - if err := imp.ImportSearch(searchFile); err != nil { - return err - } - } - return nil -} - -func (imp Importer) ImportVisualization(file string) error { - - imp.statusMsg("Import visualization %s", file) - if err := imp.ImportJSONFile("visualization", file); err != nil { - return err - } - - err := imp.importSearchFromVisualization(file) - if err != nil { - return err - } - return nil -} - -func (imp Importer) ImportSearch(file string) error { - - reader, err := ioutil.ReadFile(file) - if err != nil { - return err - } - searchName := strings.TrimSuffix(filepath.Base(file), filepath.Ext(file)) - - var searchContent common.MapStr - err = json.Unmarshal(reader, &searchContent) - if err != nil { - return fmt.Errorf("Failed to unmarshal search content %s: %v", searchName, err) - } - - if imp.cfg.Index != "" { - - // change index pattern name - if savedObject, ok := searchContent["kibanaSavedObjectMeta"].(map[string]interface{}); ok { - if source, ok := savedObject["searchSourceJSON"].(string); ok { - var record common.MapStr - err = json.Unmarshal([]byte(source), &record) - if err != nil { - return fmt.Errorf("Failed to unmarshal searchSourceJSON from search %s: %v", searchName, err) - } - - if _, ok := record["index"]; ok { - record["index"] = imp.cfg.Index - } - searchSourceJSON, err := json.Marshal(record) - if err != nil { - return fmt.Errorf("Failed to marshal searchSourceJSON: %v", err) - } - - savedObject["searchSourceJSON"] = string(searchSourceJSON) - } - } - - } - - path := "/" + imp.cfg.KibanaIndex + "/search/" + searchName - imp.statusMsg("Import search %s", file) - - if _, err = imp.client.LoadJSON(path, searchContent); err != nil { - return err - } - - return nil -} - -func (imp Importer) ImportIndex(file string) error { - - reader, err := ioutil.ReadFile(file) - if err != nil { - return err - } - var indexContent common.MapStr - json.Unmarshal(reader, &indexContent) - - indexName, ok := indexContent["title"].(string) - if !ok { - return errors.New(fmt.Sprintf("Missing title in the index-pattern file at %s", file)) - } - - if imp.cfg.Index != "" { - // change index pattern name - imp.statusMsg("Change index in index-pattern %s", indexName) - indexContent["title"] = imp.cfg.Index - } - - path := "/" + imp.cfg.KibanaIndex + "/index-pattern/" + indexName - imp.statusMsg("Import index to %s from %s\n", path, file) - - if _, err = imp.client.LoadJSON(path, indexContent); err != nil { - return err - } - return nil + imp.loader.statusMsg("Import dashboard %s", file) + return imp.loader.ImportDashboard(file) } func (imp Importer) ImportFile(fileType string, file string) error { + imp.loader.statusMsg("Import %s from %s\n", fileType, file) + if fileType == "dashboard" { - return imp.ImportDashboard(file) + return imp.loader.ImportDashboard(file) } else if fileType == "index-pattern" { - return imp.ImportIndex(file) + return imp.loader.ImportIndex(file) } return fmt.Errorf("Unexpected file type %s", fileType) } @@ -347,7 +83,7 @@ func (imp Importer) ImportDir(dirType string, dir string) error { dir = path.Join(dir, dirType) - imp.statusMsg("Import directory %s", dir) + imp.loader.statusMsg("Import directory %s", dir) errors := []string{} files, err := filepath.Glob(path.Join(dir, "*.json")) @@ -373,7 +109,7 @@ func (imp Importer) ImportDir(dirType string, dir string) error { func (imp Importer) unzip(archive, target string) error { - imp.statusMsg("Unzip archive %s", target) + imp.loader.statusMsg("Unzip archive %s", target) reader, err := zip.OpenReader(archive) if err != nil { @@ -430,7 +166,7 @@ func (imp Importer) ImportArchive() error { defer os.RemoveAll(target) // clean up - imp.statusMsg("Created temporary directory %s", target) + imp.loader.statusMsg("Created temporary directory %s", target) if imp.cfg.File != "" { archive = imp.cfg.File } else if imp.cfg.Snapshot { @@ -467,9 +203,9 @@ func (imp Importer) ImportArchive() error { } for _, dir := range dirs { - imp.statusMsg("Importing Kibana from %s", dir) + imp.loader.statusMsg("Importing Kibana from %s", dir) if imp.cfg.Beat == "" || filepath.Base(dir) == imp.cfg.Beat { - err = imp.ImportKibana(dir) + err = imp.ImportKibanaDir(dir) if err != nil { return err } @@ -498,7 +234,7 @@ func (imp Importer) downloadFile(url string, target string) (string, error) { fileName := filepath.Base(url) targetPath := path.Join(target, fileName) - imp.statusMsg("Downloading %s", url) + imp.loader.statusMsg("Downloading %s", url) // Create the file out, err := os.Create(targetPath) @@ -527,10 +263,14 @@ func (imp Importer) downloadFile(url string, target string) (string, error) { } // import Kibana dashboards and index-pattern or only one of these -func (imp Importer) ImportKibana(dir string) error { +func (imp Importer) ImportKibanaDir(dir string) error { var err error + dir = path.Join(dir, imp.version) + + imp.loader.statusMsg("Importing directory %v", dir) + if _, err := os.Stat(dir); err != nil { return fmt.Errorf("No directory %s", dir) } @@ -554,7 +294,6 @@ func (imp Importer) ImportKibana(dir string) error { return fmt.Errorf("The directory %s does not contain the %s subdirectory."+ " There is nothing to import into Kibana.", dir, strings.Join(check, " or ")) } - for _, t := range types { err = imp.ImportDir(t, dir) if err != nil { diff --git a/libbeat/dashboards/kibana_loader.go b/libbeat/dashboards/kibana_loader.go new file mode 100644 index 00000000000..6037323c295 --- /dev/null +++ b/libbeat/dashboards/kibana_loader.go @@ -0,0 +1,82 @@ +package dashboards + +import ( + "bytes" + "fmt" + "io/ioutil" + "net/url" + + "github.com/elastic/beats/libbeat/common" + "github.com/elastic/beats/libbeat/logp" + "github.com/elastic/beats/libbeat/setup/kibana" +) + +var importAPI = "/api/kibana/dashboards/import" + +type KibanaLoader struct { + client *kibana.Client + config *DashboardsConfig + version string + msgOutputter *MessageOutputter +} + +func NewKibanaLoader(cfg *common.Config, dashboardsConfig *DashboardsConfig, msgOutputter *MessageOutputter) (*KibanaLoader, error) { + + client, err := kibana.NewKibanaClient(cfg) + if err != nil { + return nil, fmt.Errorf("Error creating Kibana client: %v", err) + } + + loader := KibanaLoader{ + client: client, + config: dashboardsConfig, + version: client.GetVersion(), + msgOutputter: msgOutputter, + } + + loader.statusMsg("Initialize the Kibana %s loader", client.GetVersion()) + + return &loader, nil +} + +func (loader KibanaLoader) ImportIndex(file string) error { + + params := url.Values{} + params.Set("force", "true") //overwrite the existing dashboards + + // read json file + content, err := ioutil.ReadFile(file) + if err != nil { + return fmt.Errorf("fail to read index-pattern: %v", err) + } + + return loader.client.ImportJSON(importAPI, params, bytes.NewBuffer(content)) + +} + +func (loader KibanaLoader) ImportDashboard(file string) error { + + params := url.Values{} + params.Set("force", "true") //overwrite the existing dashboards + params.Add("exclude", "index-pattern") //don't import the index pattern from the dashboards + + // read json file + content, err := ioutil.ReadFile(file) + if err != nil { + return fmt.Errorf("fail to read index-pattern: %v", err) + } + + return loader.client.ImportJSON(importAPI, params, bytes.NewBuffer(content)) +} + +func (loader KibanaLoader) Close() error { + return loader.client.Close() +} + +func (loader KibanaLoader) statusMsg(msg string, a ...interface{}) { + if loader.msgOutputter != nil { + (*loader.msgOutputter)(msg, a...) + } else { + logp.Debug("dashboards", msg, a...) + } +} diff --git a/libbeat/dashboards/testdata/testbeat-dashboards.zip b/libbeat/dashboards/testdata/testbeat-dashboards.zip index 010cb96b7fb08ce413e8664f50faa497a969b562..5c7ac9b5a385a3aafe6c2ecb4b3db6f5a4d496cb 100644 GIT binary patch delta 18467 zcmafaV~{3Iw{6?Tv~AnAt!Yl%wx70bPusR_P209@-g&>nd(Mrx6_NR4*IFwpcUDDI z?UmJqQCR{EuP6fw1_SiZaqqer4^Is>{-UaR`M1RjV1fP<(q{SZA>=8e4e5Wu|Ggth zBmyQxW}|m!P*a5l0u>Hc(KL%x`OBtCWC16_`R9bOfs?tRoq?nAzd=ri;(z`FNwfpU zOT>bP16KV<0`xC3Q4p99?ESAogFkQ@Ffipmam;@doJpwDc?YjAY z&6(^ko(Rpv)WF5s`QPOF|0`+8{}cVsbr9kIJNkd*;y-wQbAk0Q;>K{)l{_90kQWp% zkk~&&!2cr3nK(OI7#W%vIMX?KI60fx&|5m$+5Rj0|H%E*T-;%SfWaPtfq=l!{;tyn zpGEAtc*^#%hP|gNV>8iM<=$qmKDz@u>h+*25>Lm^LioI&YSs>N;V@E7o3~GZ?RLs| z6tN$R7b187aQj^PgzK(yx1RRyuQA5yxf=i#{au68zQ$9Dfj9cM8KR<+u|q30B|yEo z-c{HsYiNR49^;~Kb=Ca-L^`s>yG(#Mp?oCzCZ*bAw$pPx-oZniP zdf8zB-LU-Y?-Yy#q$dl#!gOy)y3}iv_o=Co%my|VTk1-hJ>tA9^y`}Yfa&O#6Kd1! zJ=yBcrU>v{wsqTb#2WJynLMDyB~FZON_JS@fO0(1$C$b=U*c1<)pk*=jN?Q7WW*Ki zZ?li`olc{Z8pF5O{f3@SQp(@KREdeHcI=&i=^?Lu)vo6a#+4C)LXWzy1^1NMZFL86 zr~O~T3DJ?s7FrAT4^(=ZQhA{_fhexit&2dPWlQp?TBvZW8N02NbFPSOvU9YLi%jXLDOc6A5G z*eJCY85qL3J-{O05y>SI>)BS)TD`{u^yb7CPpWox@)wI()6XzM`=RIzO{=yT5?f2P zhSlP~MpE+;BF4CjWfvGuGm}&=OMzbUL?28=YTa+TTh%{5a#l5G@rggm^0=l95q@c< z-^07?5glc@$C^3E3=RNHljx&}*?f=0yG6-gibjn}HMl;p=;$j%Vck6dtK(gY zNkvXi^9Kbf^#oDN96Evf;1tGm&}4pK!K_Lfqh_baHY;(Q^&AA&t-d+T$-$v(k=Gr zWM9=x?-OvhfT2>{Lc22+m{^w+6-v4i`t{(ZJ_1Or{yIMt zi!-L_`eop%8+$1-V>m|NfFdYkeIPQJO=+8PTvRyiA3$-1EVC!G#~5>G>Ri&Zobnfw z7yv*X_4wLQjxGQIG~GywRze7!#&$0jXO#LMaw zU2wKxKoY?&BPv?KCkcf>9r4 zSC@e>?}jS?WquxqUp3%u{3vjGWg5kFN_KA~PKmco4UkBE_%YPmgKaeMYDIPWC-*Ws z7gS=#wJ?nnfPUCNg+r+Csjo?bB=`z}#3%?31w`*P`33x|i#WFz25kZhmWw=&Fi&=lH4HP`^4KcB~}E z^OuZ)9l$PIC2hp6yAp3u9ZMm7;yb}^=oNDzR7rE$ldAS;Gu~NIdgDt%RX>u=f}>z5 z-zcSAldJ)soGXT;Bng3fJvmWJ0gVUcmK%FgezZas3h=) z3P44%&WMay<$fd)oQ}U_m4ZnEkW(J@k$?ejZ^@ygFL`Y0r(TsdGc>Ay^zQFA1n=XwS$ z#}?himOAVi2<2NWtCJEQrR?rVhHYo7cN9$)4xy&L3BY`;=N%SH4>&JhhWwF82GD8y z;UUVxro>n1>yV*;@(}kx{y7(-JhEnE&iyD8ul(AP&j~D~_(K~(Ju92vb%wTdY+nZ5 z&!%stxD=P-Obb(-uXVooH?P026tfQ_-(_A=K2p1inH9tLC9MZnZR?((WZ8LB%-ie_ zjVlU#pB8F-YQoLHH?;UKA>uikFTnP=NpZyo3CXi43 z3tdpuLvMlk!X00+lTXnYGd5~_UfkBCI|S~hnUldkbFwh6DIpp+a{O#xA8vtm_b6V$ zxisH)3tNgEVY2%KCOp@}6Kg!jAd-t2?I{*UQJ&6l1zEFA!FVnF}eP|6FMtL zK_Fn@&7+bHZs(T-@|ujG)*w&$mQovoU<6Fy5{#uY$6_eW${Ha+W4lcHL2u2_ln%!b z><gEg{*_0FQUuNTY(;9fo)Htsa(@->c4ZhR$3_i z3i-geJ@)bJK8Wi>c5->v``RMQQ=i%5FNv2Az=1T91pr6^eQ8`#y&`%$37627 zYgh_$2x)u#zR}Fh73c-5yVG?Xy-i2A|LKMl2v5d)En+3Z;3DNZIBx>Y`hfq6)1) zA_mk>3nGl%vB1)T`bfAYlJr8#{CVg5pec-7A`#RF(S--lXX3_>j?}~Ju#ndPR3k0w-)KA9zNd|F-tU}jig}X8% z2&aQ;r15vz206PV#LZZ&L7A4akqR18%lt9DybnC>?>c9?tjhM;XuIf!J7FXhwTX#%2i2 z?z)ZN?l#&hLq;*vnW`LR*B3^|v9IhdZXoOI4HL%~Vik8wOTMmBJv^g~a4cy{fA2Y& zrzg?u_dorc(QM0RhO9&BDX)!AR~*i|(Y`dxuYjr+INtYg3RN**vk}VEovY;J$RU1P zRlfN_Hxb6+!FyVY2ws>fZozo?a$|1=y=uPz`CRQ))WlySCa;OQDfMr7HH9<6pWR{H zOQk;N>&gh{Pis1g+8(&8gfO|=Mwl&2Kz5Wf=R;q?{VSxS#J+B|g-wb-Ym63ybOcG3+a~NMb=T{BsM0% zjRlM~Puvx&(ZH!+sr?usgSYxEH`0JvseS8=K_C z+Pe?!b!H(^GREiF3b*}NC+%zSHJl{Hr?xX#|S2` zqQN+)TJZz53iq08xeT6?ZbT+1S`bBGtq;Up8Li8EebOmp-u0+quvdhhUB}^LH%G@) zgeo0oUGJ#vq06=8Vhk~c=q1R)315pF7;gQ%tQ&S0p?EV_d~N}I$)55Y!xFOGy1AN) zu>&~f8UhovMWTci6jy+;pf`BaZy7kI(7~$rp;gBukwBC3As;_%Spr3E#`4xPPS**s zc)A8DXZG@~xb}3Dn{DL^1rUskP@<|Ne(JEkddKv8aFD#S%TSEMQTX?0d25jj=yNHfKX`GPH-g8E25w2(* zs&3Yyi*sn+#hC9zOw*=$DMw7~(nYlAhVDrQnqQpj#Cx6_2K%pl4M2OQww+utd87}J zZPB-Jg|>~$-y#O-JHM<8=$c+iMgr9Q4ECfljr+4v8G1btT@ws7%hNrgarq;}om847 zcCgS%yPH}0Gk!a8Csb(nWL#iQnw`fD1mPffu^Z;uKutQ{q<|1iUR7Fi>{lYd@=@Wu z!0GA{szR@Olq22(5+L7_^i;-3lbefrqEChpjC|&{pH?j>&^q4tu2jPh?jLM#>~jB( z5b+J;*7Ea&sqCR?MVeelwlpi~;({)lMl+2Y$s5reXzu zrA`8E)F13S>knQH(8Aq`E304_p_9{+8~TLgL#uWQ{t}fq+JK1$^B_FK=Vj7ART4Rn zwUWE|5n>+L=n6q{osRBe*h1n<-gpG%h-73>q_{cf2k!agark&D{W90i!(3pj&n6NZ0Ox<+^G(rc`0 zxBaDR!#-nkK3~<5uLaV~4ct;yx`eZ6r1?CbYb4yw3P`@FgHT({-T5JAoVhm1KCeFD z08_6ONGoA$-qX{8WC`U3{u8-x1^h0G(8(_o35|CK+OC$nz8~t*>ju-!Z2N5zP{J#^ z%d}3B%`;6RO@fwy5MG&O)I*>w3bKBkaOp2UDBwIk{YWdhd)oM}UEKK0Zr0LQY-YBu zRw&kz0Vp|hDPEuGC?tmDPU)l=vXH6AHZ7M(rgB8yJ(F!tMW%2jwvJR&_V@MI^`*nq8B-f~8Hx>K(8%EpLx9`gB0wsuz&9xntsT@Rqo1KgVI6u^zKK< zM*%QG?GD5!Z!Y~9kP3>&qkSOfn8-Q%kqv+;h#s44=`HG{T4Ituhp& ziGxK%rY*t|=PzJ2WX(Y$8AT55`PBacM|AGTp?z1w%=1NTXOB3vri}d*Un}S2J@RfH zfp-UU|2gU7%H+8MJI6$rvPp1G#~{g}DGso{7tF~M^O@n_fp=do>+6$;07Db>T{e(8 zMs#3SSRW|`#R;0j(P$%jir>@~$_3VB__H6ff__ZIM84lFBh?Ia<-!L;cml?mcCPey zXpES9{V>oP5r$0#6M6OrlCw8#S%N4D7^4fvq^uNX{U* z)0>h}wGtStF;k>ih{$6O)3056m}(xSbQ42y?Rkq+H+?S!jIJ`GJ&8YJGlZ_y#j-_4 zuAGI@f(Xyz$^*0IcOWLqxTPh9lX>eDI~7ZA4+n5Zx4*vWwO&`^<^R z!s`L#kKxdN@Xl;2u2H|K88XbBJ)`h0UuEy_+k z4P4u_f$?131VT+Q3+Mw}R0k~Ez=YOzz+mCdTΞasC+ag4HhP3wV!uufD;n+J%>d zlJhm(+r-qnP=uAZM4lGG-qO^$NuBbyz8!9L#WD>cZu`o%5)x({=VXcaTg_HWoVwgH zPB{v0#oyZ#u2jw>r84bzBs%)G3)+}UBPQ3u>Oqz+*eRV=hW7$k`%sIM)j0d-Ud)GL zp=&=9Cml4J_N1PCPw@Oc61SoB+kU4?yQnhign$b%a^p$&G;JBXILNrwr?td}qX#5h z5p8!RAQ2J)_d~3wUlC>g#Pmf`_}769RWYGNmuHO3RiWelDN%?r1b5ve-W9Mx7`{DY z$DLqU3d4Q^aH{wKWeXRwViT7PQ_1zq>z6T(aoIO`fEmV)7dwhW$Qi<{Gbn8#O+?QK z)l_Gk4udC2d`vQ9IuBuzu*OVBbK{L-gO8Hshru^x3x656UO&*hxFr=Y*iIO%CdVHx z(@(1|oM(L738{n6J>>xq!p3}HLl2i3xQ3W&_Ts|;3ZfxJy2wIKNaU{%hy58D{U;Yk`y1c4gR251#5u&5tY$j@{HMJ)6)hI1_%`>xA4YqdY; zec->!6A^0_ng{mGx<(R@^A7h*1eh{APzx9E)4m+E1^WR{;6Rq08yr z)o1H~d=El2J%^~!ew0$=CB6|~^HxNuKUd(nA(hnVwv^D*i3uHQo z^s(Q5!~B^?={fbJy$XWuzY;B6oyc2Y=ZsFiMCa2Xw@bRi%y>K^$P3-^2a|S69a$Z$ zZ*%c_eNYHyoU)|IkYcdN@+Po#1@| zcm^nF^le|Hl@bW2A3edwNV*$qdE+wAX65R8;Q@noCmH#P=wvt15PEMoj^^H=HH60F zkV`2WcV$0+)z}6uuV3Gf4onVtlsBx6h#hkDs{tdIqaPOU223j3AtKO|Y3rai637Im z6va|X6rOvm@&;e#{CF)U*^`{gYv%L@RKy|;(8btyH?g!rY#vdL+c26dVpb0}MacqPz|hOmmKxbpeVt4woVhrul?C~JdKIuwM6!Dl z;jHq9v#b!g>4FH;_j5-PvDc8!7DaaBy@Hb>za{oH(G$@xdiJ#?2qOe2jd~0Mu0gX7 zljF*2=~P`=U(DBs?Ob!oGRk{B@i~M1`070ZU+fxIwQITM3 zR1=U`tf(L*nS_=_a><0s2#4Z;8lvW@!a;`|7s3H$vZtXHpM2gtsphm^^796Ja!**H z15eIS#&PBOS%KvPZg8^(Eb}YbL0|jtm_)f>8lQ#U63bL0OY~L%bE|0e6buc1$*y-> zq$8=wjSY=p+S9$cLWY}fxg$KUk*SiJ*m3q}AM5w}84c{H1lG-qd-)T9fId^o4f*|< z{-i?k)uwb=>qj|_@b6`yq^vQPRL5ClV}<5b2cy`;zE(8Lml;MwYW zr|9nqS$XpQ)1cf1&jpI><6UtxhlPcZMDt<%l0ME)%}YNV;#oE9_vY$3$z6_f{RJ;9 z2ShB%u=fp0Z*c|!D++0V9}1}2crGP;oVYG!V6nxk^OEVRHqMgaX}O%skShAF%ie_u zH<9R9igFv24;@N50pM3r(mdP3mz+e)muJCk1qef>e!M4nl=V#7*Et!oHohr2Ad1Hx0q?qp6a zz;~r*VkMXpDCv1#^c1ZnTvvRM!??LyDIvD)3}i^nb>l5{I*tA+rHU{2Sjoy{ZcE-w zze;W0H#*)n8Lq#9|I2LupC&QOKVC2Kzk9tFw#FvzboK_$&L)ok?pOaWqu3VYeF2pW z2nZ?>6iE2L8^!-O+2%jZ;{UHpe2~3uyWg4+di_j=?ZZbinYGz~;nj5Q06}P8M%y44 zkDK7Qhkwz*AT`!(Ja(!l7~bIv3^5#oH0Ir+9ai#tZdZ_Sfgvda6K=G|A&D58G>W*Mk3erp$!y?lmELf zWHg(oJf>TFAj3e_tr+S%Q4A^nVq+L6I_lvomcRrj?P~(j)h01?`--WCU?V57v!z>F z8pU|RB@Y3v$)*{C(WiyvTM203+JwqKCcn}WVDnz=xRs;o^r>Man=f0RRZO0TO^7)x zKLl2i_$Y*hf@vk5Q#j{X(imaZw_=o$>FB+-A_Jt zKoGjt;cllGDdJ!Sw_+vt`a^~QgwbKU&_OS)7ZgE@=}W2Nm`*0AopV%dHS=c!K`D$y z#X0D6MFf|u?0d_P`f4h$HSU)WrATA=(^eh{Btiv15k-U$=N+*kJh0jzs5C1KT)^4T zoAZjCvk#{TaG9wS#yyu{*F;N>8X-U$(9Yo<3p+R;6yZi^T1jW0{U-t+2-FUuJ! zi3ca|qu73H43-pEttvTJKdh+RZyxvzBSAK>y093jaqBuPRKSD6MbyOYf1w83tF`V& z+}#PQ0ocj?K!rR+giBG>R^XxWN!-3&y&*fsg`Y~aX2zO}ccbQFCdrw{9NC5j=xo*6 zKUF~gGzyqm!oN*fZv~HBKZ+7BwOP;S#6qoHn#g$SS~9EC5Dx|=G>Rz=*Ggn{hyBy; zeX#JuHqy5uZlg9z)3U-T|tY1e)1_oAvp_korpI+Z`uqdzuoA*d7{ zVlrQRs#c^y9#a?8FVG1N__2Tmz=&de!y~YyDJtu4UkR0DNHK_mn(S;g>NT3(sjH5R z3X=L^whv&c(tQL;`GGIEVAW-2U}L0p2}^G<7CI- zH9>dZa+#tCXb4i?tDwAz9bMluOFBWsN#)`|nbUp#2!(@v%R5Jc(7YcpfaBTRh=!Du zG-_pv8vR%5^3$UMg@~4rkI#XwNt3>T4oQQ)R7V-uPa)XK&bTMEb5KmwoKo(yN&(P- z&qa#V&bxY%LFv6c+^x>g`WUa|c@QbFv%!~wbkt}KsKq>s@-B)a+gIwP+HxR-+Y0AW z9g}(L*ie`jp2$67!(Ep`6=S&(yBT zzR_@9nvh72<}o^_!UL!9z`aanrV@j#AGa~Z6`3+=GL|;yS=b@QTNK_o(&vn{oxt!X z(q<9CXnbjoz?%ygwC93?{gKY@S{kJ@&R1*j34nH?U9L;%dvrCKc%SvYI+KWIOkCyl z>O@m3wxtbR8}tD-KuCq#0F1@VhpsbsbYZdph`zK_t7m$hJ&p6 z7>b(DK{s!8v^5hcOTC{YdCT5VoD30g{CFBizb@@-zS!zqLVTN|c)|ul+GU${Og|Tj zKmuHFL(zbAQ>rwD1bbTpX)NbYDE{xHPz-mG{>mv9;y^r(f63^_t z%Z=J$lzB7BxkN4VuR7(a!<^)nv}#uQ{9d4-T!=W74NfWouPfhyAPOIm8nR^rQWkvj z0Z+3(lT`hMlUrK>MnvhQ-YNq+PFHE(c5vJLGl;pujnjEjFgq{maqQQy53`xx{-eWD z9zS;yaucR!0qDoVeOxi>+5LpKz=pF5<}0BbHB!Q>$)^W2Nbo7vKughiX~%=bpX3SK z_jv8yy$0E5jfEDxehpl^MAua#$gzoSs31_Wmmbd^x_$my{8&&HpT_uGuwjlyx@w4j zeCUcybx4^Zsb9;s@Bl3D;PZj2e>WIbD}(|>Kt5m51NX2 zWBX=?=)WbKFV44o6CSgCHQqIUTmrpord&opHPCMOzckQp&b%jbYkq60Unf5|(C%Q} zm}w4Z0L(8;HkMA4O4t@p{TSVG_fyBQC-1ir%T|}Fz6Ih!@y_nUJ^QBASE?47^JXe| zq<(t^TAH*%NK2&Pra=-*WoRhVijIX>!8yrgvN$wjxCw^n6_{J~anW2MP`L$fcxlSw zLd@2N_%+%B!T3NLVM644^Y#)al>7)hnJe&j0Bmi;#JG^X|30_bfKhVPv#MTPqv6b9 zmFgA~Qpv9yF<(;?VRn9n1?yle8n5D>Xs^%V^^94?Vv#_!hGDWBE;ZT>qt2@!*$ zS`qTJ(}xey#q!idj;NN+%Zics(-A6biiYTSz^)g`*ID@GLjaa+lD`c{9TwC(ekV)D z1VB~vXxYgLIyo(C2YVo+ZlT$UKmEw^*ijE3H(|3AXYM}zjumgoVV8&1XxOTTnLO;C zH=CnRpKQ1#>kWD7o%O_%9sRiBm82MnwX~5Lt9KmS5JkdpT>ioM(C;zv-&h6kiN7lyN7yXFKhv5vV_EZ;hC z<+*CU3gs)^l4FI_|)+#Q|czZVRGHL0)$p zk~jjvHuX&GFq|SGVSa-1jLQ;lUJHU?X|GnZyCinlr&JkOsl!1Hk3H^r^ANTzb9Hzu zBq7}}>G2mYc%~2Z(HDXaGu6uV3_uNvho!1L^N}JR%JLu@2n;+KLU$nu3nn8%V#!V= zG+0xHI4SKfiy&dg6!AilsOqI#AOQoXqPb;P;N54 zIKj>?SOnpWbvUT=T;NogjzSPk#Yg`$62*YtUX^tSLp*p^xofihr$ic2NI(KN{ZZ|-ZRnyYI=PTBf>?2Pb~vxvrt8)wWAr|cDG67AkH0O%RC8OjyvI7 zjhw$@wbwP0A3dFMWvKL9hQ81tK(5u*i~{u8gCTaO`j!E+mFXU@zY>u_DM44p7g8R{ zq<7aBIc;DoHS^f{%8ES#006A8xS=7s{&lhpCXA%(8>Z4ZMh>Zild+=_`M?l{cm~&V zNWg~IoRi)QCRcy{HAPyso~qY8ybip-yaT1! z0255w09X^^;8p`Udns*prpX`d_h0m&U-m(Eoyrq_4ujEa%O5- zhd<*YA%&hmsK!W@{){5Ic^1Uv<(*89SRKB{BYC`=>eWHq<@}()%MW`j#?9t=XZP8c^GZ3mr;_m^^(PpOb6N zutYF_OY^HZm$KPQ&!l{W`m@|h=lOwi4n!HJ&Oc4=~}oX3mAA$ z5Rnlt_#)drT5D_HJ;C6Iq88wYog9vAG8C^JZsLq&tLl z_tv3X(+icF6rcbTJE>CJRU;MkY-jHmbuB@_3_jD9}JQ{LBk98{b6>I|J94Gw-R-LV6-WxDMEtZR(HydaZKg}dN0i3ay~ zXJMTsOo}WlS<4cy0*#$GH${ETEORxRp4q6^MbAK_?9#edX~m z82W7K4gu!i?Jfp}6y)|8qf?uc8Xxnf4JmpO6G6acjb$?srGMEAnSu5NBE47T?q8z%nS z%<209S`{NUQ*rtfm2hx=2OED<$`}5MuX2PTz|_rTg|c*KE`X$)C7;567nj(jC5#S$ z!-cX-N~|Lqq`}od2-?1jwTc8Qdt@$1M()JeNu0<+g+~tunzMZ3bQ>lk?stNq`Rpwz2L`Qg@u@AQL++gF=z{( z>kAv8Y*wE&H}5NKnnp79L>|Fya(97lm`S{n}Q}d4oLIS zm;Dq32W8t&d4t`ca6eG2JvO0D1_`H}VYWT*Ht(rW!}(!Vaa4+P)Zt?Un)PKS{*X;s z4^?kpJ2mjA&Qyru3A}<8&Ub;LFR4&u+v{Z~+>^^k=-F#Z(7+;cZZjL$15VjI(^sCF zxfPYQz8)K6ft_~q^>y3aM_eros?*G>s#R8V+PU+A%J zxot$~%!7%0TfA41L2q=ge!^yrX8FgF_xz0#;Z78?&XWC-em7G74uHlcHF;ohr zOsK%7YXizx+6;cvZ9|2sj~mbA+KVp6r5uZjZE1J&NiT(k6pHnE^ABKST_=7dm4fLE zragcQB^jB#x{CQ-sxQU&)g1NpZ)pM)0y$I;tI)ET<2_SzOsIL6cU@EA2phr~9_ z(UPI%Q*Hdk$6wfsg-?i4m8@^TM&pp4DA4_l+Bi|i03jQ!9QO!8KiOw5=MhhkKh<>U zEZyaZss!0;1 z=#9Gl`f?0^rayWN{F6ik{esuJ0njH|TU(F{~s0 zPP&h8b*1}nCc3ync<&bD5vlF@GCkVX%T_*LIz#EF$DWM# zZP3y-@PGq~s+^Js5waV1(Zi%i!D{3FWEFPDa;hqzDFSPkbmG#-|(5H`N}s1gzY z)I-idU@3cWXv-mVV#X#KUG>~FkXdAFDs)m>qQgc8Mj{hZN+MkdeIlvwZ~Z_>NzROA zB}liODcK81v`r!`7-dg@$S0w`49StX= zP|xjjpk2)YmwcO3#rVGZKAH*V0HX;2tl>z7m9_453(gyfweP5`OwiN^EP&}^;2P4N zz%vz9xotdX4vPw_v8!tm+DIV91YAmcUOBA)Y4%acd^j9jrZw9VHj6pkX8GEG#!(zA zg!qXlH939^;DeJJ>*>6VIGbm0dLB?SANH2(ydQ2=c7v^MTLB&dN?IJlef|dks^!5- zOWNaMR!afOm7oLrijQ=v*AEo!a_njq_-rr|hBKRXDP3HAP-(k7^bQ?+ovB-7awieU zdlL<;)Ydp95@PafM&MN@2U_2%#NWV>+Mx%WkxKvamY+gm|tRbf3qPP za=AImJ^QFE1eWb;>&MxbRGrAxPIKYg<5PB%IP1tjVxzqUD(&0*W5G?azUyvG^r%zb z{E)Y>OX#mt4f=}udY06})4}!!wb?JeM9tzi|ENH&ANC>1GWn)VzHSY`nS}is>6JHk znjMIL0m=v%cLSLWG%S0q(_j{rt!i0`ORnbh8TJ$n?x%JM1?YOju=n02-R6BK_%;sd z0G<^ECL)~{NFFIv3}@&yBjwt2{xp{Ya<;Xkcb7XBEe>&!_XDpYBX+mPnrDFVh&*ZzQN6KaO4QG_htrf zKME>vgs1vmzH5Xb67Jh5ET!tk3b2{-GlQ$V#%npl#!H1_zUt&ZruYx2_F9kYgwp%3h8yBlL6g{fex=d!(Xog- zs!ip)w6N`H;RD3Pfy(b8=;ttvd3AYyzo!Tg3KAwsHUHMZYAT+G*7vQxc3d^di_44b zWXvm59QG#?!Fd!9X7me!QNwOqcBY)qBND-z(i942{{ag=zECA53Iq|K1{W6>ZU_X6 zTtg6tbejl|LY-68C)~e8(=_LBch&gaTH! z3z~5j4@Dxj@;KQcYT$Kh;uD>T(*!%IL_nu?R-W40Lh=`;%3IaO2GN%_VkR=O&0~cC z`Jqxvj5lSt5teVK!xDlDXvo028|;*^h~ag<`FSVWdF~OzZM@U_`=u@oZ~BXbhefFs zCya1>svCfwGklE?$C!LnXF)eKPdBq{P){&szp3ZIO>Ep-*m#2K#L%J5I_s9D=ZEG4 zS=53S2MXoNsllv{7dD7LZdh>QxnXtOp)`iH;oo`&%w8z@A8(yx{# z1dVeXBu@kxMiL5b<&EA9Om?Ie7!Nphdmw!K85_{V9mQvTngL?kZUWAxcV9YMyAda? z%30G^n-SOCY#$aLKO`z1R*e>+7ermnpqvebCh9C{d{AO8zY`XLf-RDjG31RlN9R$x zyDKdv1{Sl+A?@zR+m_&h=aug&Nr2+_p|lQmVIDeYJQprlW+V_=0VxbQ<`0ulISH$T z91lQi01b_SnV|o3RL20)UvaPE_c7k~{N5G@#g$u!Rs2Hor7g+Ij)dUQR&%oB;7nZm zX(~!Om2?jEZ7ln`=-rlk}wh#c+2LEwD7+cJ@mX021OR1iu_M`qUA;7QXNoziD=u$TK@Y9?ou?y|w>-qao)l(TkHo{C* zB&q~maY}7su?8okaJ6LyLD^WkL&*&WzDyB=Fe7UkC;o092%*xBes+u8Cc#U=cf?KF_AFKsp0hZ2URr}bO_>H+25jCVHpAU8MxWlawi{I2!I6z%_}gb zC#wn-GKP3a>uA=JY_c{*-g#kuoGFGUYTgV!8nIg;5NRToeb$9K)$ka-juh%U{p|rI zBsL3t0;~@&m4X2!_CLe-Y;%{l_PPfax{Y$wMgksZDT-x$weeuo%#bs3H^wNu8Ps>8 zV`!+sP8;NDJ2p}~bvUVEqky>eAoOc2uj68V$Du@A`hb~vz_@!+fsLRqY&e?FQ?wT> zu|2bTgX{?+$m%xFj%)*1`AWW>ZCwc6R>2Ur@i1~p!3rHV2>0gR4MoL~l*fmZ|3o#U z4ho3zA_p?BYWwJvfBwD*oKn04{i3{vJilO(DRnCv_lGJuGLO^AIV1k!!1 zwPG8Yu*xtma#j=QEUEDak#C$p5wC-uQ*u(WdI}rKQZ_1UWp%PQ2H89>TMB*j3*#+x zBM76~szm>E-H&ZqAP1!81e#WX$Ji1-ONK~cJ@>}VIdXgHC)<{%LN2!gX|ZsvY(-#M zL%;mZMP^{If#OQWOu#9#rdqXrM3{B@{VNr0sjGO|HeNCk_A#bgy(Nthp}DJT=&2z1!Op!PZsu#*8dk215I z08RRR7|^4D4sy}`5btMlpxbp1PLKEZW6g05Yi`zF#kQ~O6=3Roi22hAC_{GIt=$u@ z*XQaRw)^`s^ZWW;?}qqWr99yjP=`(b_O;zTGvPk;wcmujLjch;x+!@?Xm(!Wy;ir; zL~f!N9)0$Vt4y2nwiZL~I)SRD?w<7p_BBs_c0bGO3<>)I0Tnhhu^rLb%I=W2Cv)dVsVB zzZDIl{m(68%-8^LUW&(dk8V%shDEsVx`w??e@G;SZ`IFg{;;vYg02DT z;K$pF8vUW*C9u6&Wr&w$*pWSRm}$iOw|tJJ)dLabWNi95EeF`%hBA_lE2`hMgxS!) zVUbn7Q0x!u`u#-O^>+vAhe75PR%QoMPTSM-Fc)B)q};f^5*;c^l`^Lz1HtYj(J063 zov9pGM9Tv30Dfm#ummCtbagOW^>&dTBt8%2)%mpM1QEZmw$Qf@GjQX@RWB`OD zVDD)>cl<|c+ctEEDBpT{GikAZ*aU(@p0+cTv4TTC6xK(!5<=PsiYntG@1*}kUI`C7 zrUc-z|4`xqFymd86j-Fwg%ni+A*-Ff>?}our2@5UDp>O#Ab;Bx*CYDX(3jW=klx%g zLa5i*hl^rZws2`!X_M~U_1P5XnyR1A*8Z|6{XgRtpZfL5qC0xp3o4l2uWFgbXlHbB zGy7S#4|6*+ZMNU$TC^a8=W&_djE@DH<-H1)N(uEht5V(`*80&5< zm&JGDzyj+V4{9Daif{Y9BJy(sbEopvJxh50T08)b1edQ??!Kme*M}!olt)us`Coy) zgy89xu*r`$>+?V3ede+#^J?Ur#@PYi%D z$}T*#i}QHrMJFl2$-G=!-89zcpEPv3@q(dU@NvQ&PW2{}E5DTLZxy{*UUBdy*X_G& zc0Y{B(^Ya=-=tH~@Z$IJml@p$ZrwLnoxY_gJ?{E7m+7B{qaV4X|8fpFt&qCAtUa8E zG4i|mm$jT8&W|oNn~RBW&8bzNDEwrO1wZe`9ahPP+tMySTrVYaUqLm|m@m33mMu;B zK(gFrHHFkd^NzBm4->QGlIwHC;$VmK8sC`|(HadKSt5Dm(0y z$hy^wk`Fz;-gm11+1eL>tbZR)SbaEn6O#mRMU%Vad;#^Z*Hga+yqA}pbH7b$O?~n{ z2lZcNPqo@l@W*nCT(W&O(dVi2)I2W7PprrF?wr1{Wr^H}WgbU69)4aB#8`5#%DcNF ztFlhkV;V@vA?79{r3hTJSnclJ9!^faA<;E*r1-ZC=ZKm@_lM ze%XYp?kT;;a(AVuns5k-@I?0)YvkR#7FRc`es$(7%N7@WbPLADEA&9^A2FtN$GviOIQ4;xX1ca`rR@ z9cKG-asubm$>)xIU)}0?`PJbCUaMw)dY7<&UBA|ai+e+l`zA}UGsVR{^<)m_Wm625 z`8-Eb{Lb6@)4ats7d5v|y=59R$MXG#+gG07$-V!N*}nes^m9jpPxPERv_rvT$ID%s zM~{17Dk`-7CwcJS{r{?G`--%l^DMKqX3q6`v(0FZ?#z!mDY?rlG`arD~{|Frx5CGPNlx`lr)y{R?+9u>3y zx=(Z9`gQ&7;dAOgssH)E{=VIR_5g22COKv<@Tn=lV^t=H(ci*~(Ep6f zSug@c|63&49jsPB{Yr}Hi{DgH%nRZGnqPk@xM6WbVFY<9K zz;J__B08C$lMQSV%5f_w?v~;NyTTCDBwXjOAk4>fr7?;RpR0k*mWP>*x?~U8zX+G2 ptoK84X^1-5v|#L}VJrZIIuq@Pm;i59Hc+bJ1H#Qf)?*(K4*-ae#SQ=f delta 454 zcmZ3poN=!>Z-6&53l{?jxMn#{CD^wMNTf8mJ%9Fw^i1tw;wvAsNsCdjBh z@qmJ8N@8(FQhs7lihgJaCj&D=)#UfAJd->8co+kK$|fK8Gv$U#gOqH3!Z?GGQ3WU? zRGgYvl$?Q0H?P<7i?>Y~85pFP7#Ms(rkwXTLNUdGC5~~j6r-YKS!Qu*VoqjNVo7Fx z9u~7C7(+n%b=VwOz}6SAJz?Z!WRhcs`+M>y9}6ZXkf(JgNBWvfPW6+VY!JvcSIeNh2HM 1 && strings.Count(host, "]") == 0 { - host = "[" + host + "]" - } - } - - // Assign default path if not set - if addr.Path == "" { - addr.Path = defaultPath - } - - // reconstruct url - addr.Scheme = scheme - addr.Host = host + ":" + port - return addr.String(), nil -} - func makeURL(url, path, pipeline string, params map[string]string) string { if len(params) == 0 && pipeline == "" { return url + path diff --git a/libbeat/outputs/elasticsearch/url_test.go b/libbeat/outputs/elasticsearch/url_test.go index 12d5a87c5b1..d70f948f9f7 100644 --- a/libbeat/outputs/elasticsearch/url_test.go +++ b/libbeat/outputs/elasticsearch/url_test.go @@ -2,12 +2,7 @@ package elasticsearch -import ( - "fmt" - "testing" - - "github.com/stretchr/testify/assert" -) +import "testing" func TestUrlEncode(t *testing.T) { @@ -65,73 +60,3 @@ func TestMakePath(t *testing.T) { } } - -func TestGetUrl(t *testing.T) { - - // List of inputs / outputs that must match after fetching url - // Setting a path without a scheme is not allowed. Example: 192.168.1.1:9200/hello - inputOutput := map[string]string{ - // shema + hostname - "": "http://localhost:9200", - "http://localhost": "http://localhost:9200", - "http://localhost:80": "http://localhost:80", - "http://localhost:80/": "http://localhost:80/", - "http://localhost/": "http://localhost:9200/", - - // no schema + hostname - "33f3600fd5c1bb599af557c36a4efb08.host": "http://33f3600fd5c1bb599af557c36a4efb08.host:9200", - "33f3600fd5c1bb599af557c36a4efb08.host:12345": "http://33f3600fd5c1bb599af557c36a4efb08.host:12345", - "localhost": "http://localhost:9200", - "localhost:80": "http://localhost:80", - "localhost:80/": "http://localhost:80/", - "localhost/": "http://localhost:9200/", - "localhost/mypath": "http://localhost:9200/mypath", - - // shema + ipv4 - "http://192.168.1.1:80": "http://192.168.1.1:80", - "https://192.168.1.1:80/hello": "https://192.168.1.1:80/hello", - "http://192.168.1.1": "http://192.168.1.1:9200", - "http://192.168.1.1/hello": "http://192.168.1.1:9200/hello", - - // no schema + ipv4 - "192.168.1.1": "http://192.168.1.1:9200", - "192.168.1.1:80": "http://192.168.1.1:80", - "192.168.1.1/hello": "http://192.168.1.1:9200/hello", - "192.168.1.1:80/hello": "http://192.168.1.1:80/hello", - - // schema + ipv6 - "http://[2001:db8::1]:80": "http://[2001:db8::1]:80", - "http://[2001:db8::1]": "http://[2001:db8::1]:9200", - "https://[2001:db8::1]:9200": "https://[2001:db8::1]:9200", - "http://FE80:0000:0000:0000:0202:B3FF:FE1E:8329": "http://[FE80:0000:0000:0000:0202:B3FF:FE1E:8329]:9200", - "http://[2001:db8::1]:80/hello": "http://[2001:db8::1]:80/hello", - "http://[2001:db8::1]/hello": "http://[2001:db8::1]:9200/hello", - "https://[2001:db8::1]:9200/hello": "https://[2001:db8::1]:9200/hello", - "http://FE80:0000:0000:0000:0202:B3FF:FE1E:8329/hello": "http://[FE80:0000:0000:0000:0202:B3FF:FE1E:8329]:9200/hello", - - // no schema + ipv6 - "2001:db8::1": "http://[2001:db8::1]:9200", - "[2001:db8::1]:80": "http://[2001:db8::1]:80", - "[2001:db8::1]": "http://[2001:db8::1]:9200", - "2001:db8::1/hello": "http://[2001:db8::1]:9200/hello", - "[2001:db8::1]:80/hello": "http://[2001:db8::1]:80/hello", - "[2001:db8::1]/hello": "http://[2001:db8::1]:9200/hello", - } - - for input, output := range inputOutput { - urlNew, err := MakeURL("", "", input) - assert.Nil(t, err) - assert.Equal(t, output, urlNew, fmt.Sprintf("input: %v", input)) - } - - inputOutputWithDefaults := map[string]string{ - "http://localhost": "http://localhost:9200/hello", - "192.156.4.5": "https://192.156.4.5:9200/hello", - "http://username:password@es.found.io:9324": "http://username:password@es.found.io:9324/hello", - } - for input, output := range inputOutputWithDefaults { - urlNew, err := MakeURL("https", "/hello", input) - assert.Nil(t, err) - assert.Equal(t, output, urlNew) - } -} diff --git a/libbeat/outputs/transport/transptest/testing_test.go b/libbeat/outputs/transport/transptest/testing_test.go index 5ddef996c58..a8fe97e08bd 100644 --- a/libbeat/outputs/transport/transptest/testing_test.go +++ b/libbeat/outputs/transport/transptest/testing_test.go @@ -8,7 +8,7 @@ import ( "testing" "time" - "github.com/armon/go-socks5" + socks5 "github.com/armon/go-socks5" "github.com/stretchr/testify/assert" "github.com/elastic/beats/libbeat/outputs/transport" diff --git a/libbeat/scripts/Makefile b/libbeat/scripts/Makefile index d39bdb12f20..2a5984d78fd 100755 --- a/libbeat/scripts/Makefile +++ b/libbeat/scripts/Makefile @@ -160,7 +160,7 @@ integration-tests-environment: prepare-tests build-image # Runs the system tests .PHONY: system-tests system-tests: ## @testing Runs the system tests -system-tests: ${BEAT_NAME}.test prepare-tests python-env ${ES_BEATS}/dev-tools/cmd/import_dashboards/import_dashboards +system-tests: ${BEAT_NAME}.test prepare-tests python-env ${ES_BEATS}/dev-tools/cmd/dashboards/export_dashboards . ${PYTHON_ENV}/bin/activate; INTEGRATION_TESTS=${INTEGRATION_TESTS} TESTING_ENVIRONMENT=${TESTING_ENVIRONMENT} nosetests -w tests/system ${NOSETESTS_OPTIONS} python ${ES_BEATS}/dev-tools/aggregate_coverage.py -o ${COVERAGE_DIR}/system.cov ./build/system-tests/run @@ -277,8 +277,10 @@ endif @${PYTHON_ENV}/bin/python ${ES_BEATS}/libbeat/scripts/generate_fields_docs.py $(PWD) ${BEAT_NAME} ${ES_BEATS} @# Generate Kibana index pattern - @mkdir -p $(PWD)/_meta/kibana/index-pattern - @${PYTHON_ENV}/bin/python ${ES_BEATS}/libbeat/scripts/generate_index_pattern.py --index '${BEAT_NAME}-*' --libbeat ${ES_BEATS}/libbeat --beat $(PWD) + @mkdir -p $(PWD)/_meta/kibana/5.x/index-pattern + @mkdir -p $(PWD)/_meta/kibana/default/index-pattern + @${PYTHON_ENV}/bin/python ${ES_BEATS}/libbeat/scripts/generate_index_pattern.py --index '${BEAT_NAME}-*' --beat $(PWD) --version ${BEAT_VERSION} + .PHONY: docs docs: ## @build Builds the documents for the beat @@ -297,16 +299,8 @@ index-template: ## @build Generate index templates for the given $VERSION. This ### KIBANA FILES HANDLING ### ES_URL?=http://localhost:9200 -.PHONY: export-dashboards -export-dashboards: python-env update - . ${PYTHON_ENV}/bin/activate && python ${ES_BEATS}/dev-tools/export_dashboards.py --url ${ES_URL} --dir $(shell pwd)/_meta/kibana --regex ${BEAT_NAME}-* - -${ES_BEATS}/dev-tools/cmd/import_dashboards/import_dashboards: - $(MAKE) -C ${ES_BEATS}/dev-tools/cmd/import_dashboards import_dashboards - -.PHONY: import-dashboards -import-dashboards: update ${ES_BEATS}/dev-tools/cmd/import_dashboards/import_dashboards - ${ES_BEATS}/dev-tools/cmd/import_dashboards/import_dashboards -es ${ES_URL} -dir ${PWD}/_meta/kibana +${ES_BEATS}/dev-tools/cmd/dashboards/export_dashboards: + $(MAKE) -C ${ES_BEATS}/dev-tools/cmd/dashboards export_dashboards ### CONTAINER ENVIRONMENT #### diff --git a/libbeat/scripts/generate_index_pattern.py b/libbeat/scripts/generate_index_pattern.py index e31c8f9cb76..cc3bb8dd066 100644 --- a/libbeat/scripts/generate_index_pattern.py +++ b/libbeat/scripts/generate_index_pattern.py @@ -17,7 +17,7 @@ unique_fields = [] -def fields_to_json(section, path, output): +def fields_to_json(fields, section, path, output): # Need in case there are no fields if section["fields"] is None: @@ -30,23 +30,21 @@ def fields_to_json(section, path, output): newpath = path + "." + field["name"] if "type" in field and field["type"] == "group": - fields_to_json(field, newpath, output) + fields_to_json(fields, field, newpath, output) else: - field_to_json(field, newpath, output) + field_to_json(fields, field, newpath, output) -def field_to_json(desc, path, output, +def field_to_json(fields, desc, path, output, indexed=True, analyzed=False, doc_values=True, searchable=True, aggregatable=True): - global unique_fields - if path in unique_fields: print("ERROR: Field {} is duplicated. Please delete it and try again. Fields already are {}".format( - path, ", ".join(unique_fields))) + path, ", ".join(fields))) sys.exit(1) else: - unique_fields.append(path) + fields.append(path) field = { "name": path, @@ -81,15 +79,16 @@ def field_to_json(desc, path, output, } -def fields_to_index_pattern(args, input): +def fields_to_index_pattern(version, args, input): docs = yaml.load(input) + fields = [] if docs is None: print("fields.yml is empty. Cannot generate index-pattern") return - output = { + attributes = { "fields": [], "fieldFormatMap": {}, "timeFieldName": "@timestamp", @@ -98,59 +97,59 @@ def fields_to_index_pattern(args, input): } for k, section in enumerate(docs): - fields_to_json(section, "", output) + fields_to_json(fields, section, "", attributes) # add meta fields - field_to_json({"name": "_id", "type": "keyword"}, "_id", output, + field_to_json(fields, {"name": "_id", "type": "keyword"}, "_id", + attributes, indexed=False, analyzed=False, doc_values=False, searchable=False, aggregatable=False) - field_to_json({"name": "_type", "type": "keyword"}, "_type", output, + field_to_json(fields, {"name": "_type", "type": "keyword"}, "_type", + attributes, indexed=False, analyzed=False, doc_values=False, searchable=True, aggregatable=True) - field_to_json({"name": "_index", "type": "keyword"}, "_index", output, + field_to_json(fields, {"name": "_index", "type": "keyword"}, "_index", + attributes, indexed=False, analyzed=False, doc_values=False, searchable=False, aggregatable=False) - field_to_json({"name": "_score", "type": "integer"}, "_score", output, + field_to_json(fields, {"name": "_score", "type": "integer"}, "_score", + attributes, indexed=False, analyzed=False, doc_values=False, searchable=False, aggregatable=False) - output["fields"] = json.dumps(output["fields"]) - output["fieldFormatMap"] = json.dumps(output["fieldFormatMap"]) - return output - + attributes["fields"] = json.dumps(attributes["fields"]) + attributes["fieldFormatMap"] = json.dumps(attributes["fieldFormatMap"]) -def get_index_pattern_name(index): + if version == "5.x": + return attributes - allow = string.ascii_letters + string.digits + "_" - return re.sub('[^%s]' % allow, '', index) + return { + "version": args.version, + "objects": [{ + "type": "index-pattern", + "id": args.index, + "version": 1, + "attributes": attributes, + }] -if __name__ == "__main__": + } - parser = argparse.ArgumentParser( - description="Generates the index-pattern for a Beat.") - parser.add_argument("--index", help="The name of the index-pattern") - parser.add_argument("--beat", help="Local Beat directory") - parser.add_argument("--libbeat", help="Libbeat local directory") - args = parser.parse_args() +def get_index_pattern_name(index): - fields_yml = args.beat + "/fields.yml" + allow = string.ascii_letters + string.digits + "_" + return re.sub('[^%s]' % allow, '', index) - # generate the index-pattern content - with open(fields_yml, 'r') as f: - fields = f.read() - # with open(target, 'w') as output: - output = fields_to_index_pattern(args, fields) +def dump_index_pattern(args, version, output): - # dump output to a json file fileName = get_index_pattern_name(args.index) - target_dir = os.path.join(args.beat, "_meta", "kibana", "index-pattern") + target_dir = os.path.join(args.beat, "_meta", "kibana", version, "index-pattern") target_file = os.path.join(target_dir, fileName + ".json") try: @@ -165,3 +164,28 @@ def get_index_pattern_name(index): f.write(output) print("The index pattern was created under {}".format(target_file)) + return target_file + + +if __name__ == "__main__": + + parser = argparse.ArgumentParser( + description="Generates the index-pattern for a Beat.") + parser.add_argument("--version", help="Beat version") + parser.add_argument("--index", help="The name of the index-pattern") + parser.add_argument("--beat", help="Local Beat directory") + + args = parser.parse_args() + + fields_yml = args.beat + "/fields.yml" + + # generate the index-pattern content + with open(fields_yml, 'r') as f: + fields = f.read() + + # with open(target, 'w') as output: + output = fields_to_index_pattern("default", args, fields) + dump_index_pattern(args, "default", output) + + output5x = fields_to_index_pattern("5.x", args, fields) + dump_index_pattern(args, "5.x", output5x) diff --git a/libbeat/setup/kibana/client.go b/libbeat/setup/kibana/client.go new file mode 100644 index 00000000000..591f1158af0 --- /dev/null +++ b/libbeat/setup/kibana/client.go @@ -0,0 +1,163 @@ +package kibana + +import ( + "crypto/tls" + "encoding/json" + "fmt" + "io" + "io/ioutil" + "net/http" + "net/url" + "path" + + "github.com/elastic/beats/libbeat/common" + "github.com/elastic/beats/libbeat/logp" +) + +type Connection struct { + URL string + Headers map[string]string + + http *http.Client + version string +} + +type Client struct { + Connection +} + +func addPath(_url, _path string) (string, error) { + + u, err := url.Parse(_url) + if err != nil { + return "", fmt.Errorf("fail to parse URL %s: %v", _url, err) + } + u.Path = path.Join(u.Path, _path) + return u.String(), nil +} + +func NewKibanaClient(cfg *common.Config) (*Client, error) { + + config := defaultKibanaConfig + if err := cfg.Unpack(&config); err != nil { + return nil, err + } + + kibanaURL, err := common.MakeURL(config.Protocol, config.Path, config.Host, 5601) + if err != nil { + return nil, fmt.Errorf("invalid Kibana host: %v", err) + } + + logp.Debug("kibana", "Kibana url: %s", kibanaURL) + + client := &Client{ + Connection: Connection{ + URL: kibanaURL, + http: &http.Client{ + Transport: &http.Transport{ + TLSClientConfig: &tls.Config{InsecureSkipVerify: true}, // ignore expired SSL certificates + }, + }, + }, + } + + if err = client.SetVersion(); err != nil { + return nil, fmt.Errorf("fail to get the Kibana version:%v", err) + } + + return client, nil +} + +func (conn *Connection) Request(method, extraPath string, params url.Values, body io.Reader) (int, []byte, error) { + + reqURL, err := addPath(conn.URL, extraPath) + if err != nil { + return 0, nil, err + } + + logp.Debug("kibana", "HTTP request URL: %s", reqURL) + logp.Debug("kibana", "Kibana version: %s", conn.version) + + req, err := http.NewRequest(method, reqURL, body) + if err != nil { + return 0, nil, fmt.Errorf("fail to create the HTTP %s request: %v", method, err) + } + + req.Header.Set("Content-Type", "application/json") + if method != "GET" { + req.Header.Set("kbn-version", conn.version) + } + + resp, err := conn.http.Do(req) + if err != nil { + return 0, nil, fmt.Errorf("fail to execute the HTTP %s request: %v", method, err) + } + + defer resp.Body.Close() + + logp.Debug("kibana", "Response: %s", resp.Status) + + var retError error + if resp.StatusCode >= 300 { + retError = fmt.Errorf("%v", resp.Status) + } + + result, err := ioutil.ReadAll(resp.Body) + if err != nil { + return 0, nil, fmt.Errorf("fail to read response %s", err) + } + + return resp.StatusCode, result, retError +} + +func (client *Client) SetVersion() error { + + type kibanaVersionResponse struct { + Name string `json:"name"` + Version struct { + Number string `json:"number"` + Snapshot bool `json:"build_snapshot"` + } `json:"version"` + } + + _, result, err := client.Connection.Request("GET", "/api/status", nil, nil) + if err != nil { + return fmt.Errorf("HTTP GET request to /api/status fails: %v. Returns: %s.", err, result) + } + + var kibanaVersion kibanaVersionResponse + err = json.Unmarshal(result, &kibanaVersion) + if err != nil { + return fmt.Errorf("fail to unmarshal the HTTP response from Kibana %s: %v", client.Connection.URL, err) + } + + client.version = kibanaVersion.Version.Number + + if kibanaVersion.Version.Snapshot { + // needed for the tests + client.version = client.version + "-SNAPSHOT" + } + + return nil +} + +func (client *Client) GetVersion() string { + + return client.version +} + +func (client *Client) ImportJSON(url string, params url.Values, body io.Reader) error { + + statusCode, response, err := client.Connection.Request("POST", url, params, body) + if err != nil { + return fmt.Errorf("%v. Response: %s", err, response) + } + if statusCode >= 300 { + return fmt.Errorf("returned %d to import file: %v. Response: %s", statusCode, err, response) + } + return nil +} + +func (client *Client) Close() error { + return nil +} diff --git a/libbeat/setup/kibana/config.go b/libbeat/setup/kibana/config.go new file mode 100644 index 00000000000..12a46eeb629 --- /dev/null +++ b/libbeat/setup/kibana/config.go @@ -0,0 +1,15 @@ +package kibana + +type kibanaConfig struct { + Protocol string `config:"protocol"` + Host string `config:"host"` + Path string `config:"path"` +} + +var ( + defaultKibanaConfig = kibanaConfig{ + Protocol: "http", + Host: "", + Path: "", + } +) diff --git a/libbeat/tests/system/config/mockbeat.yml.j2 b/libbeat/tests/system/config/mockbeat.yml.j2 index 289edb80581..d74c52bbad6 100644 --- a/libbeat/tests/system/config/mockbeat.yml.j2 +++ b/libbeat/tests/system/config/mockbeat.yml.j2 @@ -26,8 +26,8 @@ tags: [ ############################# Output ############################################ -# Configure what outputs to use when sending the data collected by packetbeat. -# Multiple outputs may be enabled. +# Configure what outputs to use when sending the data collected by mockbeat. +# Multiple outputs may NOT be enabled. output: {% if console -%} console: diff --git a/libbeat/tests/system/test_dashboard.py b/libbeat/tests/system/test_dashboard.py index 57d3c977d7b..8bf8094c443 100644 --- a/libbeat/tests/system/test_dashboard.py +++ b/libbeat/tests/system/test_dashboard.py @@ -1,38 +1,40 @@ from base import BaseTest -from nose.plugins.attrib import attr - import os +import os.path import subprocess +from nose.plugins.attrib import attr import unittest -import re -from nose.plugins.skip import SkipTest INTEGRATION_TESTS = os.environ.get('INTEGRATION_TESTS', False) -@unittest.skip("this test will be refactored in a future commit") class Test(BaseTest): @unittest.skipUnless(INTEGRATION_TESTS, "integration test") @attr('integration') def test_load_dashboard(self): """ - Test loading dashboards for all beats + Test loading dashboards """ - for beat in self.beats: - command = "go run ../../../dev-tools/cmd/import_dashboards/import_dashboards.go -es http://" + \ - self.get_elasticsearch_host() + " -dir ../../../" + beat + "/_meta/kibana" - - if os.name == "nt": - command = "go run ..\..\..\dev_tools\import_dashboards\import_dashboards.go -es http:\\" + \ - self.get_elasticsearch_host() + " -dir ..\..\..\\" + beat + "\_meta\kibana" - - print(command) - p = subprocess.Popen(command, shell=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE) - content, err = p.communicate() - - self.assertEqual(p.returncode, 0, "stdout:\n{}\n\nstderr:\n{}\n".format(content, err)) + self.render_config_template() + beat = self.start_beat( + logging_args=["-e", "-d", "*"], + extra_args=["setup", + "--dashboards", + "-E", "setup.dashboards.file=" + + os.path.join("../../dashboards/testdata", "testbeat-dashboards.zip"), + "-E", "setup.dashboards.beat=testbeat", + "-E", "setup.kibana.protocol=http", + "-E", "setup.kibana.host=" + self.get_kibana_host(), + "-E", "setup.kibana.port=" + self.get_kibana_port(), + "-E", "output.elasticsearch.hosts=['" + self.get_host() + "']", + "-E", "output.file.enabled=false"] + ) + + beat.check_wait(exit_code=0) + + assert self.log_contains("Kibana dashboards successfully loaded") is True @unittest.skipUnless(INTEGRATION_TESTS, "integration test") @attr('integration') @@ -41,38 +43,37 @@ def test_export_dashboard(self): Test export dashboards and remove unsupported characters """ - raise SkipTest - # This test is currently skipped as it does not work. - # The test fails as soon as there are dashboards loaded which can happen if - # test_load_dashboard was run previously. Also this test should pass exactly - # when dashboards exist, means it should first load some "wrong" dashboards - # In addition, this test should not write to the beats directory but to a - # temporary directory and check the files there. + self.test_load_dashboard() + + command = "./../../../dev-tools/cmd/dashboards/export_dashboards -kibana http://" + \ + self.get_kibana_host() + ":" + self.get_kibana_port() - for beat in self.beats: - if os.name == "nt": - path = "..\..\..\\" + beat + "\etc\kibana" - else: - path = "../../../" + beat + "/etc/kibana" + if os.name == "nt": + command = "..\..\..\dev-tools\cmd\dashboards\export_dashboards -kibana http://" + \ + self.get_kibana_host() + ":" + self.get_kibana_port() - command = "python ../../../dev-tools/export_dashboards.py --url http://" + \ - self.get_elasticsearch_host() + " --dir " + path + " --regex " + beat + "-*" + command = command + " Metricbeat-system-overview" - if os.name == "nt": - command = "python ..\..\..\dev-tools/export_dashboards.py --url http://" + \ - self.get_elasticsearch_host() + " --dir " + path + " --regex " + beat + "-*" + print(command) - print(command) + p = subprocess.Popen(command, shell=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE) + content, err = p.communicate() - p = subprocess.Popen(command, shell=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE) - content, err = p.communicate() + assert p.returncode == 0 - assert p.returncode == 0 + assert os.path.isfile("output.json") is True - files = os.listdir(path) + with open('output.json') as f: + content = f.read() + assert "Metricbeat-system-overview" in content - for f in files: - self.assertIsNone(re.search('[:\>\<"/\\\|\?\*]', f)) + os.remove("output.json") - def get_elasticsearch_host(self): + def get_host(self): return os.getenv('ES_HOST', 'localhost') + ':' + os.getenv('ES_PORT', '9200') + + def get_kibana_host(self): + return os.getenv('KIBANA_HOST', 'localhost') + + def get_kibana_port(self): + return os.getenv('KIBANA_PORT', '5601') diff --git a/metricbeat/metricbeat.reference.yml b/metricbeat/metricbeat.reference.yml index 2d02d34546b..5a31c97e18d 100644 --- a/metricbeat/metricbeat.reference.yml +++ b/metricbeat/metricbeat.reference.yml @@ -998,7 +998,7 @@ output.elasticsearch: #============================== Dashboards ===================================== # These settings control loading the sample dashboards to the Kibana index. Loading # the dashboards is disabled by default and can be enabled either by setting the -# options here, or by using the `-setup` CLI flag. +# options here, or by using the `-setup` CLI flag or the `setup` command. #setup.dashboards.enabled: false # The URL from where to download the dashboards archive. By default this URL @@ -1054,6 +1054,25 @@ output.elasticsearch: # Overwrite existing template #setup.template.overwrite: false +#============================== Kibana ===================================== + +# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API. +# This requires a Kibana endpoint configuration. +setup.kibana: + + # Kibana Host + # Scheme and port can be left out and will be set to the default (http and 5601) + # In case you specify and additional path, the scheme is required: http://localhost:5601/path + # IPv6 addresses should always be defined as: https://[2001:db8::1]:5601 + #host: "localhost:5601" + + # Optional protocol and basic auth crendentials. + #protocol: "https" + #username: "elastic" + #password: "changeme" + + # Optional HTTP Path + #path: "" #================================ HTTP Endpoint ====================================== # Each beat can expose internal data points through a http endpoint. For security diff --git a/metricbeat/metricbeat.yml b/metricbeat/metricbeat.yml index 0c4470154c8..00d3aa5500e 100644 --- a/metricbeat/metricbeat.yml +++ b/metricbeat/metricbeat.yml @@ -59,6 +59,31 @@ setup.template.settings: #fields: # env: staging + +#============================== Dashboards ===================================== +# These settings control loading the sample dashboards to the Kibana index. Loading +# the dashboards is disabled by default and can be enabled either by setting the +# options here, or by using the `-setup` CLI flag or the `setup` command. +#setup.dashboards.enabled: false + +# The URL from where to download the dashboards archive. By default this URL +# has a value which is computed based on the Beat name and version. For released +# versions, this URL points to the dashboard archive on the artifacts.elastic.co +# website. +#setup.dashboards.url: + +#============================== Kibana ===================================== + +# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API. +# This requires a Kibana endpoint configuration. +setup.kibana: + + # Kibana Host + # Scheme and port can be left out and will be set to the default (http and 5601) + # In case you specify and additional path, the scheme is required: http://localhost:5601/path + # IPv6 addresses should always be defined as: https://[2001:db8::1]:5601 + #host: "localhost:5601" + #================================ Outputs ===================================== # Configure what outputs to use when sending the data collected by the beat. diff --git a/metricbeat/module/apache/_meta/kibana/dashboard/Metricbeat-Apache-HTTPD-server-status.json b/metricbeat/module/apache/_meta/kibana/5.x/dashboard/Metricbeat-Apache-HTTPD-server-status.json similarity index 100% rename from metricbeat/module/apache/_meta/kibana/dashboard/Metricbeat-Apache-HTTPD-server-status.json rename to metricbeat/module/apache/_meta/kibana/5.x/dashboard/Metricbeat-Apache-HTTPD-server-status.json diff --git a/metricbeat/module/apache/_meta/kibana/search/Apache-HTTPD.json b/metricbeat/module/apache/_meta/kibana/5.x/search/Apache-HTTPD.json similarity index 100% rename from metricbeat/module/apache/_meta/kibana/search/Apache-HTTPD.json rename to metricbeat/module/apache/_meta/kibana/5.x/search/Apache-HTTPD.json diff --git a/metricbeat/module/apache/_meta/kibana/visualization/Apache-HTTPD-CPU.json b/metricbeat/module/apache/_meta/kibana/5.x/visualization/Apache-HTTPD-CPU.json similarity index 100% rename from metricbeat/module/apache/_meta/kibana/visualization/Apache-HTTPD-CPU.json rename to metricbeat/module/apache/_meta/kibana/5.x/visualization/Apache-HTTPD-CPU.json diff --git a/metricbeat/module/apache/_meta/kibana/visualization/Apache-HTTPD-Hostname-list.json b/metricbeat/module/apache/_meta/kibana/5.x/visualization/Apache-HTTPD-Hostname-list.json similarity index 100% rename from metricbeat/module/apache/_meta/kibana/visualization/Apache-HTTPD-Hostname-list.json rename to metricbeat/module/apache/_meta/kibana/5.x/visualization/Apache-HTTPD-Hostname-list.json diff --git a/metricbeat/module/apache/_meta/kibana/visualization/Apache-HTTPD-Load1-slash-5-slash-15.json b/metricbeat/module/apache/_meta/kibana/5.x/visualization/Apache-HTTPD-Load1-slash-5-slash-15.json similarity index 100% rename from metricbeat/module/apache/_meta/kibana/visualization/Apache-HTTPD-Load1-slash-5-slash-15.json rename to metricbeat/module/apache/_meta/kibana/5.x/visualization/Apache-HTTPD-Load1-slash-5-slash-15.json diff --git a/metricbeat/module/apache/_meta/kibana/visualization/Apache-HTTPD-Scoreboard.json b/metricbeat/module/apache/_meta/kibana/5.x/visualization/Apache-HTTPD-Scoreboard.json similarity index 100% rename from metricbeat/module/apache/_meta/kibana/visualization/Apache-HTTPD-Scoreboard.json rename to metricbeat/module/apache/_meta/kibana/5.x/visualization/Apache-HTTPD-Scoreboard.json diff --git a/metricbeat/module/apache/_meta/kibana/visualization/Apache-HTTPD-Total-accesses-and-kbytes.json b/metricbeat/module/apache/_meta/kibana/5.x/visualization/Apache-HTTPD-Total-accesses-and-kbytes.json similarity index 100% rename from metricbeat/module/apache/_meta/kibana/visualization/Apache-HTTPD-Total-accesses-and-kbytes.json rename to metricbeat/module/apache/_meta/kibana/5.x/visualization/Apache-HTTPD-Total-accesses-and-kbytes.json diff --git a/metricbeat/module/apache/_meta/kibana/visualization/Apache-HTTPD-Uptime.json b/metricbeat/module/apache/_meta/kibana/5.x/visualization/Apache-HTTPD-Uptime.json similarity index 100% rename from metricbeat/module/apache/_meta/kibana/visualization/Apache-HTTPD-Uptime.json rename to metricbeat/module/apache/_meta/kibana/5.x/visualization/Apache-HTTPD-Uptime.json diff --git a/metricbeat/module/apache/_meta/kibana/visualization/Apache-HTTPD-Workers.json b/metricbeat/module/apache/_meta/kibana/5.x/visualization/Apache-HTTPD-Workers.json similarity index 100% rename from metricbeat/module/apache/_meta/kibana/visualization/Apache-HTTPD-Workers.json rename to metricbeat/module/apache/_meta/kibana/5.x/visualization/Apache-HTTPD-Workers.json diff --git a/metricbeat/module/apache/_meta/kibana/default/dashboard/Metricbeat-apache.json b/metricbeat/module/apache/_meta/kibana/default/dashboard/Metricbeat-apache.json new file mode 100644 index 00000000000..79cf14d42a4 --- /dev/null +++ b/metricbeat/module/apache/_meta/kibana/default/dashboard/Metricbeat-apache.json @@ -0,0 +1,156 @@ +{ + "objects": [ + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\n \"filter\": []\n}" + }, + "savedSearchId": "Apache-HTTPD", + "title": "Apache HTTPD - CPU", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\n \"title\": \"Apache HTTPD - CPU\",\n \"type\": \"line\",\n \"params\": {\n \"shareYAxis\": true,\n \"addTooltip\": true,\n \"addLegend\": true,\n \"showCircles\": true,\n \"smoothLines\": false,\n \"interpolate\": \"linear\",\n \"scale\": \"linear\",\n \"drawLinesBetweenPoints\": true,\n \"radiusRatio\": 9,\n \"times\": [],\n \"addTimeMarker\": false,\n \"defaultYExtents\": false,\n \"setYExtents\": false,\n \"yAxis\": {}\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"type\": \"avg\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"apache.status.cpu.load\",\n \"customLabel\": \"CPU load\"\n }\n },\n {\n \"id\": \"2\",\n \"type\": \"date_histogram\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"@timestamp\",\n \"interval\": \"auto\",\n \"customInterval\": \"2h\",\n \"min_doc_count\": 1,\n \"extended_bounds\": {}\n }\n },\n {\n \"id\": \"3\",\n \"type\": \"terms\",\n \"schema\": \"split\",\n \"params\": {\n \"field\": \"apache.status.hostname\",\n \"size\": 5,\n \"order\": \"desc\",\n \"orderBy\": \"1\",\n \"row\": true\n }\n },\n {\n \"id\": \"4\",\n \"type\": \"avg\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"apache.status.cpu.user\",\n \"customLabel\": \"CPU user\"\n }\n },\n {\n \"id\": \"5\",\n \"type\": \"avg\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"apache.status.cpu.system\",\n \"customLabel\": \"CPU system\"\n }\n },\n {\n \"id\": \"6\",\n \"type\": \"avg\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"apache.status.cpu.children_user\",\n \"customLabel\": \"CPU children user\"\n }\n },\n {\n \"id\": \"7\",\n \"type\": \"avg\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"apache.status.cpu.children_system\",\n \"customLabel\": \"CPU children system\"\n }\n }\n ],\n \"listeners\": {}\n}" + }, + "id": "Apache-HTTPD-CPU", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Apache-HTTPD", + "title": "Apache HTTPD - Hostname list", + "uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}", + "version": 1, + "visState": "{\"title\":\"Apache HTTPD - Hostname list\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null}},\"aggs\":[{\"id\":\"1\",\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events count\"}},{\"id\":\"2\",\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"apache.status.hostname\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Apache HTTD Hostname\"}}],\"listeners\":{}}" + }, + "id": "Apache-HTTPD-Hostname-list", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Apache-HTTPD", + "title": "Apache HTTPD - Load1/5/15", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Apache HTTPD - Load1/5/15\",\"type\":\"line\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"showCircles\":true,\"smoothLines\":false,\"interpolate\":\"linear\",\"scale\":\"linear\",\"drawLinesBetweenPoints\":true,\"radiusRatio\":9,\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"apache.status.load.5\",\"customLabel\":\"Load 5\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"apache.status.load.1\",\"customLabel\":\"Load 1\"}},{\"id\":\"4\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"apache.status.load.15\",\"customLabel\":\"Load 15\"}},{\"id\":\"5\",\"type\":\"terms\",\"schema\":\"split\",\"params\":{\"field\":\"apache.status.hostname\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Hostname\",\"row\":true}}],\"listeners\":{}}" + }, + "id": "Apache-HTTPD-Load1-slash-5-slash-15", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Apache-HTTPD", + "title": "Apache HTTPD - Scoreboard", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Apache HTTPD - Scoreboard\",\"type\":\"line\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"showCircles\":true,\"smoothLines\":false,\"interpolate\":\"linear\",\"scale\":\"linear\",\"drawLinesBetweenPoints\":true,\"radiusRatio\":9,\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"apache.status.scoreboard.closing_connection\",\"customLabel\":\"Closing connection\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"terms\",\"schema\":\"split\",\"params\":{\"field\":\"apache.status.hostname\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Hostname\",\"row\":true}},{\"id\":\"4\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"apache.status.scoreboard.dns_lookup\",\"customLabel\":\"DNS lookup\"}},{\"id\":\"5\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"apache.status.scoreboard.gracefully_finishing\",\"customLabel\":\"Gracefully finishing\"}},{\"id\":\"6\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"apache.status.scoreboard.idle_cleanup\",\"customLabel\":\"Idle cleanup\"}},{\"id\":\"7\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"apache.status.scoreboard.keepalive\",\"customLabel\":\"Keepalive\"}},{\"id\":\"8\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"apache.status.scoreboard.logging\",\"customLabel\":\"Logging\"}},{\"id\":\"9\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"apache.status.scoreboard.open_slot\",\"customLabel\":\"Open slot\"}},{\"id\":\"10\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"apache.status.scoreboard.reading_request\",\"customLabel\":\"Reading request\"}},{\"id\":\"11\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"apache.status.scoreboard.sending_reply\",\"customLabel\":\"Sending reply\"}},{\"id\":\"12\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"apache.status.scoreboard.starting_up\",\"customLabel\":\"Starting up\"}},{\"id\":\"13\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"apache.status.scoreboard.total\",\"customLabel\":\"Total\"}},{\"id\":\"14\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"apache.status.scoreboard.waiting_for_connection\",\"customLabel\":\"Waiting for connection\"}}],\"listeners\":{}}" + }, + "id": "Apache-HTTPD-Scoreboard", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Apache-HTTPD", + "title": "Apache HTTPD - Total accesses and kbytes", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Apache HTTPD - Total accesses and kbytes\",\"type\":\"metric\",\"params\":{\"handleNoResults\":true,\"fontSize\":60},\"aggs\":[{\"id\":\"1\",\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"apache.status.total_kbytes\",\"customLabel\":\"Total kbytes\"}},{\"id\":\"2\",\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"apache.status.total_accesses\",\"customLabel\":\"Total accesses\"}}],\"listeners\":{}}" + }, + "id": "Apache-HTTPD-Total-accesses-and-kbytes", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\n \"filter\": []\n}" + }, + "savedSearchId": "Apache-HTTPD", + "title": "Apache HTTPD - Uptime", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\n \"title\": \"Apache HTTPD - Uptime\",\n \"type\": \"metric\",\n \"params\": {\n \"handleNoResults\": true,\n \"fontSize\": 60\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"type\": \"max\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"apache.status.uptime.uptime\",\n \"customLabel\": \"Uptime\"\n }\n },\n {\n \"id\": \"2\",\n \"type\": \"max\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"apache.status.uptime.server_uptime\",\n \"customLabel\": \"Server uptime\"\n }\n }\n ],\n \"listeners\": {}\n}" + }, + "id": "Apache-HTTPD-Uptime", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\n \"filter\": []\n}" + }, + "savedSearchId": "Apache-HTTPD", + "title": "Apache HTTPD - Workers", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\n \"title\": \"Apache HTTPD - Workers\",\n \"type\": \"line\",\n \"params\": {\n \"shareYAxis\": true,\n \"addTooltip\": true,\n \"addLegend\": true,\n \"showCircles\": true,\n \"smoothLines\": false,\n \"interpolate\": \"linear\",\n \"scale\": \"linear\",\n \"drawLinesBetweenPoints\": true,\n \"radiusRatio\": 9,\n \"times\": [],\n \"addTimeMarker\": false,\n \"defaultYExtents\": false,\n \"setYExtents\": false,\n \"yAxis\": {}\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"type\": \"avg\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"apache.status.workers.busy\",\n \"customLabel\": \"Busy workers\"\n }\n },\n {\n \"id\": \"2\",\n \"type\": \"date_histogram\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"@timestamp\",\n \"interval\": \"auto\",\n \"customInterval\": \"2h\",\n \"min_doc_count\": 1,\n \"extended_bounds\": {}\n }\n },\n {\n \"id\": \"3\",\n \"type\": \"terms\",\n \"schema\": \"split\",\n \"params\": {\n \"field\": \"apache.status.hostname\",\n \"size\": 5,\n \"order\": \"desc\",\n \"orderBy\": \"1\",\n \"customLabel\": \"Hostname\",\n \"row\": true\n }\n },\n {\n \"id\": \"4\",\n \"type\": \"avg\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"apache.status.workers.idle\",\n \"customLabel\": \"Idle workers\"\n }\n }\n ],\n \"listeners\": {}\n}" + }, + "id": "Apache-HTTPD-Workers", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "columns": [ + "_source" + ], + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"metricbeat-*\",\"query\":{\"query_string\":{\"query\":\"metricset.module: apache\",\"analyze_wildcard\":true}},\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}" + }, + "sort": [ + "@timestamp", + "desc" + ], + "title": "Apache HTTPD", + "version": 1 + }, + "id": "Apache-HTTPD", + "type": "search", + "version": 7 + }, + { + "attributes": { + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}}}]}" + }, + "optionsJSON": "{\"darkTheme\":false}", + "panelsJSON": "[{\"id\":\"Apache-HTTPD-CPU\",\"type\":\"visualization\",\"panelIndex\":1,\"size_x\":6,\"size_y\":3,\"col\":7,\"row\":10},{\"id\":\"Apache-HTTPD-Hostname-list\",\"type\":\"visualization\",\"panelIndex\":2,\"size_x\":3,\"size_y\":3,\"col\":1,\"row\":1},{\"id\":\"Apache-HTTPD-Load1-slash-5-slash-15\",\"type\":\"visualization\",\"panelIndex\":3,\"size_x\":6,\"size_y\":3,\"col\":1,\"row\":10},{\"id\":\"Apache-HTTPD-Scoreboard\",\"type\":\"visualization\",\"panelIndex\":4,\"size_x\":12,\"size_y\":3,\"col\":1,\"row\":7},{\"id\":\"Apache-HTTPD-Total-accesses-and-kbytes\",\"type\":\"visualization\",\"panelIndex\":5,\"size_x\":6,\"size_y\":3,\"col\":7,\"row\":1},{\"id\":\"Apache-HTTPD-Uptime\",\"type\":\"visualization\",\"panelIndex\":6,\"size_x\":3,\"size_y\":3,\"col\":4,\"row\":1},{\"id\":\"Apache-HTTPD-Workers\",\"type\":\"visualization\",\"panelIndex\":7,\"size_x\":12,\"size_y\":3,\"col\":1,\"row\":4}]", + "timeRestore": false, + "title": "Metricbeat - Apache HTTPD server status", + "uiStateJSON": "{\"P-2\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}", + "version": 1 + }, + "id": "Metricbeat-Apache-HTTPD-server-status", + "type": "dashboard", + "version": 1 + } + ], + "version": "6.0.0-alpha3-SNAPSHOT" +} \ No newline at end of file diff --git a/metricbeat/module/docker/_meta/kibana/dashboard/Metricbeat-Docker.json b/metricbeat/module/docker/_meta/kibana/5.x/dashboard/Metricbeat-Docker.json similarity index 100% rename from metricbeat/module/docker/_meta/kibana/dashboard/Metricbeat-Docker.json rename to metricbeat/module/docker/_meta/kibana/5.x/dashboard/Metricbeat-Docker.json diff --git a/metricbeat/module/docker/_meta/kibana/search/Metricbeat-Docker.json b/metricbeat/module/docker/_meta/kibana/5.x/search/Metricbeat-Docker.json similarity index 100% rename from metricbeat/module/docker/_meta/kibana/search/Metricbeat-Docker.json rename to metricbeat/module/docker/_meta/kibana/5.x/search/Metricbeat-Docker.json diff --git a/metricbeat/module/docker/_meta/kibana/visualization/Docker-CPU-usage.json b/metricbeat/module/docker/_meta/kibana/5.x/visualization/Docker-CPU-usage.json similarity index 100% rename from metricbeat/module/docker/_meta/kibana/visualization/Docker-CPU-usage.json rename to metricbeat/module/docker/_meta/kibana/5.x/visualization/Docker-CPU-usage.json diff --git a/metricbeat/module/docker/_meta/kibana/visualization/Docker-Network-IO.json b/metricbeat/module/docker/_meta/kibana/5.x/visualization/Docker-Network-IO.json similarity index 100% rename from metricbeat/module/docker/_meta/kibana/visualization/Docker-Network-IO.json rename to metricbeat/module/docker/_meta/kibana/5.x/visualization/Docker-Network-IO.json diff --git a/metricbeat/module/docker/_meta/kibana/visualization/Docker-Number-of-Containers.json b/metricbeat/module/docker/_meta/kibana/5.x/visualization/Docker-Number-of-Containers.json similarity index 100% rename from metricbeat/module/docker/_meta/kibana/visualization/Docker-Number-of-Containers.json rename to metricbeat/module/docker/_meta/kibana/5.x/visualization/Docker-Number-of-Containers.json diff --git a/metricbeat/module/docker/_meta/kibana/visualization/Docker-containers-per-host.json b/metricbeat/module/docker/_meta/kibana/5.x/visualization/Docker-containers-per-host.json similarity index 100% rename from metricbeat/module/docker/_meta/kibana/visualization/Docker-containers-per-host.json rename to metricbeat/module/docker/_meta/kibana/5.x/visualization/Docker-containers-per-host.json diff --git a/metricbeat/module/docker/_meta/kibana/visualization/Docker-containers.json b/metricbeat/module/docker/_meta/kibana/5.x/visualization/Docker-containers.json similarity index 100% rename from metricbeat/module/docker/_meta/kibana/visualization/Docker-containers.json rename to metricbeat/module/docker/_meta/kibana/5.x/visualization/Docker-containers.json diff --git a/metricbeat/module/docker/_meta/kibana/visualization/Docker-images-and-names.json b/metricbeat/module/docker/_meta/kibana/5.x/visualization/Docker-images-and-names.json similarity index 100% rename from metricbeat/module/docker/_meta/kibana/visualization/Docker-images-and-names.json rename to metricbeat/module/docker/_meta/kibana/5.x/visualization/Docker-images-and-names.json diff --git a/metricbeat/module/docker/_meta/kibana/visualization/Docker-memory-usage.json b/metricbeat/module/docker/_meta/kibana/5.x/visualization/Docker-memory-usage.json similarity index 100% rename from metricbeat/module/docker/_meta/kibana/visualization/Docker-memory-usage.json rename to metricbeat/module/docker/_meta/kibana/5.x/visualization/Docker-memory-usage.json diff --git a/metricbeat/module/docker/_meta/kibana/default/dashboard/Metricbeat-docker.json b/metricbeat/module/docker/_meta/kibana/default/dashboard/Metricbeat-docker.json new file mode 100644 index 00000000000..ea9b108fe66 --- /dev/null +++ b/metricbeat/module/docker/_meta/kibana/default/dashboard/Metricbeat-docker.json @@ -0,0 +1,135 @@ +{ + "objects": [ + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\n \"filter\": []\n}" + }, + "savedSearchId": "Metricbeat-Docker", + "title": "Docker containers", + "uiStateJSON": "{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": 1,\n \"direction\": \"asc\"\n }\n }\n }\n}", + "version": 1, + "visState": "{\n \"title\": \"Docker containers\",\n \"type\": \"table\",\n \"params\": {\n \"perPage\": 8,\n \"showMeticsAtAllLevels\": false,\n \"showPartialRows\": false,\n \"showTotal\": true,\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n },\n \"totalFunc\": \"sum\"\n },\n \"aggs\": [\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"bucket\",\n \"params\": {\n \"field\": \"docker.container.name\",\n \"size\": 5,\n \"order\": \"desc\",\n \"orderBy\": \"1\",\n \"customLabel\": \"Name\"\n }\n },\n {\n \"id\": \"3\",\n \"enabled\": true,\n \"type\": \"max\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"docker.cpu.total.pct\",\n \"customLabel\": \"CPU usage (%)\"\n }\n },\n {\n \"id\": \"4\",\n \"enabled\": true,\n \"type\": \"max\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"docker.diskio.total\",\n \"customLabel\": \"DiskIO\"\n }\n },\n {\n \"id\": \"5\",\n \"enabled\": true,\n \"type\": \"max\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"docker.memory.usage.pct\",\n \"customLabel\": \"Mem (%)\"\n }\n },\n {\n \"id\": \"6\",\n \"enabled\": true,\n \"type\": \"max\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"docker.memory.rss.total\",\n \"customLabel\": \"Mem RSS\"\n }\n },\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"cardinality\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"docker.container.id\",\n \"customLabel\": \"Number of Containers\"\n }\n }\n ],\n \"listeners\": {}\n}" + }, + "id": "Docker-containers", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Metricbeat-Docker", + "title": "Docker Number of Containers", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Docker Number of Containers\",\"type\":\"metric\",\"params\":{\"handleNoResults\":true,\"fontSize\":\"36\"},\"aggs\":[{\"id\":\"2\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"docker.info.containers.running\",\"customLabel\":\"Running\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"docker.info.containers.paused\",\"customLabel\":\"Paused\"}},{\"id\":\"4\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"docker.info.containers.stopped\",\"customLabel\":\"Stopped\"}}],\"listeners\":{}}" + }, + "id": "Docker-Number-of-Containers", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Metricbeat-Docker", + "title": "Docker containers per host", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Docker containers per host\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"bottom\",\"isDonut\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"docker.container.id\",\"customLabel\":\"Number of containers\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"beat.hostname\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Hosts\"}}],\"listeners\":{}}" + }, + "id": "Docker-containers-per-host", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Metricbeat-Docker", + "title": "Docker images and names", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Docker images and names\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"bottom\",\"isDonut\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"docker.container.image\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"docker.container.name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}" + }, + "id": "Docker-images-and-names", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\n \"filter\": [],\n \"index\": \"metricbeat-*\",\n \"highlight\": {\n \"pre_tags\": [\n \"@kibana-highlighted-field@\"\n ],\n \"post_tags\": [\n \"@/kibana-highlighted-field@\"\n ],\n \"fields\": {\n \"*\": {}\n },\n \"require_field_match\": false,\n \"fragment_size\": 2147483647\n },\n \"query\": {\n \"query_string\": {\n \"query\": \"metricset.module:docker AND metricset.name:cpu\",\n \"analyze_wildcard\": true\n }\n }\n}" + }, + "title": "Docker CPU usage", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\n \"title\": \"Docker CPU usage\",\n \"type\": \"area\",\n \"params\": {\n \"addLegend\": true,\n \"addTimeMarker\": false,\n \"addTooltip\": true,\n \"defaultYExtents\": false,\n \"interpolate\": \"linear\",\n \"legendPosition\": \"top\",\n \"mode\": \"stacked\",\n \"scale\": \"linear\",\n \"setYExtents\": false,\n \"shareYAxis\": true,\n \"smoothLines\": true,\n \"times\": [],\n \"yAxis\": {}\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"percentiles\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"docker.cpu.total.pct\",\n \"percents\": [\n 75\n ],\n \"customLabel\": \"Total CPU time\"\n }\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"date_histogram\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"@timestamp\",\n \"interval\": \"auto\",\n \"customInterval\": \"2h\",\n \"min_doc_count\": 1,\n \"extended_bounds\": {}\n }\n },\n {\n \"id\": \"3\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"group\",\n \"params\": {\n \"field\": \"docker.container.name\",\n \"size\": 5,\n \"order\": \"desc\",\n \"orderBy\": \"1.75\",\n \"customLabel\": \"Container name\"\n }\n }\n ],\n \"listeners\": {}\n}" + }, + "id": "Docker-CPU-usage", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[],\"index\":\"metricbeat-*\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query_string\":{\"query\":\"metricset.module:docker AND metricset.name:memory\",\"analyze_wildcard\":true}}}" + }, + "title": "Docker memory usage", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Docker memory usage\",\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"top\",\"smoothLines\":false,\"scale\":\"linear\",\"interpolate\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"docker.memory.usage.total\",\"customLabel\":\"Memory\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"docker.container.name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Container name\"}}],\"listeners\":{}}" + }, + "id": "Docker-memory-usage", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[],\"index\":\"metricbeat-*\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query_string\":{\"query\":\"metricset.module:docker AND metricset.name:network\",\"analyze_wildcard\":true}}}" + }, + "title": "Docker Network IO", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Docker Network IO\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"defaultYExtents\":false,\"interpolate\":\"linear\",\"legendPosition\":\"top\",\"mode\":\"stacked\",\"scale\":\"linear\",\"setYExtents\":false,\"shareYAxis\":true,\"smoothLines\":true,\"times\":[],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"docker.network.in.bytes\",\"customLabel\":\"IN bytes\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"docker.container.name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Container name\"}},{\"id\":\"4\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"docker.network.out.bytes\",\"customLabel\":\"OUT bytes\"}}],\"listeners\":{}}" + }, + "id": "Docker-Network-IO", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "columns": [ + "_source" + ], + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"metricbeat-*\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query_string\":{\"query\":\"metricset.module:docker\",\"analyze_wildcard\":true}}}" + }, + "sort": [ + "@timestamp", + "desc" + ], + "title": "Metricbeat Docker", + "version": 1 + }, + "id": "Metricbeat-Docker", + "type": "search", + "version": 4 + } + ], + "version": "6.0.0-alpha3-SNAPSHOT" +} \ No newline at end of file diff --git a/metricbeat/module/golang/_meta/kibana/dashboard/f2dc7320-f519-11e6-a3c9-9d1f7c42b045.json b/metricbeat/module/golang/_meta/kibana/5.x/dashboard/f2dc7320-f519-11e6-a3c9-9d1f7c42b045.json similarity index 100% rename from metricbeat/module/golang/_meta/kibana/dashboard/f2dc7320-f519-11e6-a3c9-9d1f7c42b045.json rename to metricbeat/module/golang/_meta/kibana/5.x/dashboard/f2dc7320-f519-11e6-a3c9-9d1f7c42b045.json diff --git a/metricbeat/module/golang/_meta/kibana/visualization/58000780-f529-11e6-844d-b170e2f0a07e.json b/metricbeat/module/golang/_meta/kibana/5.x/visualization/58000780-f529-11e6-844d-b170e2f0a07e.json similarity index 100% rename from metricbeat/module/golang/_meta/kibana/visualization/58000780-f529-11e6-844d-b170e2f0a07e.json rename to metricbeat/module/golang/_meta/kibana/5.x/visualization/58000780-f529-11e6-844d-b170e2f0a07e.json diff --git a/metricbeat/module/golang/_meta/kibana/visualization/95388680-f52a-11e6-969c-518c48c913e4.json b/metricbeat/module/golang/_meta/kibana/5.x/visualization/95388680-f52a-11e6-969c-518c48c913e4.json similarity index 100% rename from metricbeat/module/golang/_meta/kibana/visualization/95388680-f52a-11e6-969c-518c48c913e4.json rename to metricbeat/module/golang/_meta/kibana/5.x/visualization/95388680-f52a-11e6-969c-518c48c913e4.json diff --git a/metricbeat/module/golang/_meta/kibana/visualization/9a9a8bf0-f52a-11e6-969c-518c48c913e4.json b/metricbeat/module/golang/_meta/kibana/5.x/visualization/9a9a8bf0-f52a-11e6-969c-518c48c913e4.json similarity index 100% rename from metricbeat/module/golang/_meta/kibana/visualization/9a9a8bf0-f52a-11e6-969c-518c48c913e4.json rename to metricbeat/module/golang/_meta/kibana/5.x/visualization/9a9a8bf0-f52a-11e6-969c-518c48c913e4.json diff --git a/metricbeat/module/golang/_meta/kibana/visualization/ab226b50-f52a-11e6-969c-518c48c913e4.json b/metricbeat/module/golang/_meta/kibana/5.x/visualization/ab226b50-f52a-11e6-969c-518c48c913e4.json similarity index 100% rename from metricbeat/module/golang/_meta/kibana/visualization/ab226b50-f52a-11e6-969c-518c48c913e4.json rename to metricbeat/module/golang/_meta/kibana/5.x/visualization/ab226b50-f52a-11e6-969c-518c48c913e4.json diff --git a/metricbeat/module/golang/_meta/kibana/visualization/b046cb80-f52a-11e6-969c-518c48c913e4.json b/metricbeat/module/golang/_meta/kibana/5.x/visualization/b046cb80-f52a-11e6-969c-518c48c913e4.json similarity index 100% rename from metricbeat/module/golang/_meta/kibana/visualization/b046cb80-f52a-11e6-969c-518c48c913e4.json rename to metricbeat/module/golang/_meta/kibana/5.x/visualization/b046cb80-f52a-11e6-969c-518c48c913e4.json diff --git a/metricbeat/module/golang/_meta/kibana/visualization/b59a5200-f52a-11e6-969c-518c48c913e4.json b/metricbeat/module/golang/_meta/kibana/5.x/visualization/b59a5200-f52a-11e6-969c-518c48c913e4.json similarity index 100% rename from metricbeat/module/golang/_meta/kibana/visualization/b59a5200-f52a-11e6-969c-518c48c913e4.json rename to metricbeat/module/golang/_meta/kibana/5.x/visualization/b59a5200-f52a-11e6-969c-518c48c913e4.json diff --git a/metricbeat/module/golang/_meta/kibana/default/dashboard/Metricbeat-golang.json b/metricbeat/module/golang/_meta/kibana/default/dashboard/Metricbeat-golang.json new file mode 100644 index 00000000000..e96bbad89e9 --- /dev/null +++ b/metricbeat/module/golang/_meta/kibana/default/dashboard/Metricbeat-golang.json @@ -0,0 +1,113 @@ +{ + "objects": [ + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Golang: Heap Summary", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Golang: Heap Summary\",\"type\":\"timelion\",\"params\":{\"expression\":\".es(index=\\\"metricbeat*\\\",metric=\\\"avg:golang.heap.system.total\\\").label(\\\"System Total Memory\\\").yaxis(label=\\\"Bytes\\\"),.es(index=\\\"metricbeat*\\\",metric=\\\"min:golang.heap.allocations.allocated\\\").label(\\\"Bytes Allocated(min)\\\").movingaverage(30),.es(index=\\\"metricbeat*\\\",metric=\\\"max:golang.heap.allocations.allocated\\\").label(\\\"Bytes Allocated(max)\\\").movingaverage(30),.es(index=\\\"metricbeat*\\\",metric=\\\"avg:golang.heap.gc.next_gc_limit\\\").label(\\\"GC Limit\\\"),.es(index=\\\"metricbeat*\\\",metric=\\\"avg:golang.heap.gc.pause.count\\\").condition(lt,1, null).points().label(\\\"GC Cycles(count)\\\").yaxis(2,label=\\\"Count\\\")\",\"interval\":\"10s\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "58000780-f529-11e6-844d-b170e2f0a07e", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Golang: Heap", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Golang: Heap\",\"type\":\"timelion\",\"params\":{\"expression\":\".es(index=\\\"metricbeat*\\\",metric=\\\"avg:golang.heap.allocations.total\\\").label(\\\"Heap Total\\\").derivative().movingaverage(30),.es(index=\\\"metricbeat*\\\",metric=\\\"avg:golang.heap.allocations.active\\\").label(\\\"Heap Inuse\\\").movingaverage(30),.es(index=\\\"metricbeat*\\\",metric=\\\"avg:golang.heap.allocations.allocated\\\").label(\\\"Heap Allocated\\\").movingaverage(30),.es(index=\\\"metricbeat*\\\",metric=\\\"avg:golang.heap.allocations.idle\\\").label(\\\"Heap Idle\\\").movingaverage(30)\",\"interval\":\"10s\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "95388680-f52a-11e6-969c-518c48c913e4", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Golang: Objects", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Golang: Objects\",\"type\":\"timelion\",\"params\":{\"expression\":\".es(index=\\\"metricbeat*\\\",metric=\\\"max:golang.heap.allocations.objects\\\").label(\\\"Object Count(avg)\\\").yaxis(1,label=\\\"Count\\\").movingaverage(30),.es(index=\\\"metricbeat*\\\",metric=\\\"max:golang.heap.allocations.total\\\").derivative().label(\\\"Allocation Rate\\\").yaxis(2,label=\\\"Rate\\\").movingaverage(30)\",\"interval\":\"10s\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "b59a5200-f52a-11e6-969c-518c48c913e4", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Golang: System", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Golang: System\",\"type\":\"timelion\",\"params\":{\"expression\":\".es(index=\\\"metricbeat*\\\",metric=\\\"avg:golang.heap.system.total\\\").label(\\\"System Total\\\"),.es(index=\\\"metricbeat*\\\",metric=\\\"avg:golang.heap.system.optained\\\").label(\\\"System Obtained\\\"),.es(index=\\\"metricbeat*\\\",metric=\\\"avg:golang.heap.system.stack\\\").label(\\\"System Stack\\\"),.es(index=\\\"metricbeat*\\\",metric=\\\"avg:golang.heap.system.released\\\").label(\\\"System Released\\\")\",\"interval\":\"10s\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "9a9a8bf0-f52a-11e6-969c-518c48c913e4", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Golang: GC count", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Golang: GC count\",\"type\":\"timelion\",\"params\":{\"expression\":\".es(index=\\\"metricbeat*\\\",metric=\\\"max:golang.heap.gc.pause.count\\\").label(\\\"GC Count\\\").bars().yaxis(label=\\\"Count\\\"),.es(index=\\\"metricbeat*\\\",metric=\\\"max:golang.heap.gc.total_count\\\").label(\\\"GC Rate\\\").derivative().movingaverage(30),.es(index=\\\"metricbeat*\\\",metric=\\\"max:golang.heap.gc.cpu_fraction\\\").label(\\\"CPU Fraction\\\").yaxis(2,label=\\\"Fraction\\\")\",\"interval\":\"10s\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "b046cb80-f52a-11e6-969c-518c48c913e4", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Golang: GC durations", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Golang: GC durations\",\"type\":\"timelion\",\"params\":{\"expression\":\".es(index=\\\"metricbeat*\\\",metric=\\\"max:golang.heap.gc.pause.sum.ns\\\").bars().label(\\\"sum of GC Pause durations(ns)\\\").yaxis(label=\\\"Durations(ns)\\\"),.es(index=\\\"metricbeat*\\\",metric=\\\"max:golang.heap.gc.total_pause.ns\\\").derivative().movingaverage(30).label(\\\"Total GC Pause(ns) Rate\\\"),.es(index=\\\"metricbeat*\\\",metric=\\\"max:golang.heap.gc.pause.max.ns\\\").label(\\\"Max GC Pause(ns)\\\").movingaverage(30),.es(index=\\\"metricbeat*\\\",metric=\\\"avg:golang.heap.gc.pause.avg.ns\\\").label(\\\"Avg GC Pause(ns)\\\").movingaverage(30),.es(index=\\\"metricbeat*\\\",metric=\\\"max:golang.heap.gc.pause.count\\\").condition(lt,1, null).label(\\\"GC Pause count\\\").points().yaxis(2,label=\\\"Count\\\")\",\"interval\":\"10s\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "ab226b50-f52a-11e6-969c-518c48c913e4", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}" + }, + "optionsJSON": "{\"darkTheme\":false}", + "panelsJSON": "[{\"col\":1,\"id\":\"58000780-f529-11e6-844d-b170e2f0a07e\",\"panelIndex\":8,\"row\":1,\"size_x\":12,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"95388680-f52a-11e6-969c-518c48c913e4\",\"panelIndex\":9,\"row\":4,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":9,\"id\":\"b59a5200-f52a-11e6-969c-518c48c913e4\",\"panelIndex\":10,\"row\":4,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":5,\"id\":\"9a9a8bf0-f52a-11e6-969c-518c48c913e4\",\"panelIndex\":11,\"row\":4,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":7,\"id\":\"b046cb80-f52a-11e6-969c-518c48c913e4\",\"panelIndex\":12,\"row\":8,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"ab226b50-f52a-11e6-969c-518c48c913e4\",\"panelIndex\":13,\"row\":8,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"}]", + "timeRestore": false, + "title": "Golang: Heap", + "uiStateJSON": "{}", + "version": 1 + }, + "id": "f2dc7320-f519-11e6-a3c9-9d1f7c42b045", + "type": "dashboard", + "version": 1 + } + ], + "version": "6.0.0-alpha3-SNAPSHOT" +} \ No newline at end of file diff --git a/metricbeat/module/kafka/consumergroup/consumergroup.go b/metricbeat/module/kafka/consumergroup/consumergroup.go index 3a2d66d0a34..5818ab0d3ff 100644 --- a/metricbeat/module/kafka/consumergroup/consumergroup.go +++ b/metricbeat/module/kafka/consumergroup/consumergroup.go @@ -66,7 +66,7 @@ func New(base mb.BaseMetricSet) (mb.MetricSet, error) { Password: config.Password, // consumer groups API requires at least 0.9.0.0 - Version: kafka.Version{"0.9.0.0"}, + Version: kafka.Version{String: "0.9.0.0"}, } return &MetricSet{ diff --git a/metricbeat/module/kubernetes/_meta/kibana/dashboard/022a54c0-2bf5-11e7-859b-f78b612cde28.json b/metricbeat/module/kubernetes/_meta/kibana/5.x/dashboard/022a54c0-2bf5-11e7-859b-f78b612cde28.json similarity index 100% rename from metricbeat/module/kubernetes/_meta/kibana/dashboard/022a54c0-2bf5-11e7-859b-f78b612cde28.json rename to metricbeat/module/kubernetes/_meta/kibana/5.x/dashboard/022a54c0-2bf5-11e7-859b-f78b612cde28.json diff --git a/metricbeat/module/kubernetes/_meta/kibana/visualization/022a54c0-2bf5-11e7-859b-f78b612cde28.json b/metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/022a54c0-2bf5-11e7-859b-f78b612cde28.json similarity index 100% rename from metricbeat/module/kubernetes/_meta/kibana/visualization/022a54c0-2bf5-11e7-859b-f78b612cde28.json rename to metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/022a54c0-2bf5-11e7-859b-f78b612cde28.json diff --git a/metricbeat/module/kubernetes/_meta/kibana/visualization/16fa4470-2bfd-11e7-859b-f78b612cde28.json b/metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/16fa4470-2bfd-11e7-859b-f78b612cde28.json similarity index 100% rename from metricbeat/module/kubernetes/_meta/kibana/visualization/16fa4470-2bfd-11e7-859b-f78b612cde28.json rename to metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/16fa4470-2bfd-11e7-859b-f78b612cde28.json diff --git a/metricbeat/module/kubernetes/_meta/kibana/visualization/174a6ad0-30e0-11e7-8df8-6d3604a72912.json b/metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/174a6ad0-30e0-11e7-8df8-6d3604a72912.json similarity index 100% rename from metricbeat/module/kubernetes/_meta/kibana/visualization/174a6ad0-30e0-11e7-8df8-6d3604a72912.json rename to metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/174a6ad0-30e0-11e7-8df8-6d3604a72912.json diff --git a/metricbeat/module/kubernetes/_meta/kibana/visualization/294546b0-30d6-11e7-8df8-6d3604a72912.json b/metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/294546b0-30d6-11e7-8df8-6d3604a72912.json similarity index 100% rename from metricbeat/module/kubernetes/_meta/kibana/visualization/294546b0-30d6-11e7-8df8-6d3604a72912.json rename to metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/294546b0-30d6-11e7-8df8-6d3604a72912.json diff --git a/metricbeat/module/kubernetes/_meta/kibana/visualization/408fccf0-30d6-11e7-8df8-6d3604a72912.json b/metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/408fccf0-30d6-11e7-8df8-6d3604a72912.json similarity index 100% rename from metricbeat/module/kubernetes/_meta/kibana/visualization/408fccf0-30d6-11e7-8df8-6d3604a72912.json rename to metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/408fccf0-30d6-11e7-8df8-6d3604a72912.json diff --git a/metricbeat/module/kubernetes/_meta/kibana/visualization/44f12b40-2bf4-11e7-859b-f78b612cde28.json b/metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/44f12b40-2bf4-11e7-859b-f78b612cde28.json similarity index 100% rename from metricbeat/module/kubernetes/_meta/kibana/visualization/44f12b40-2bf4-11e7-859b-f78b612cde28.json rename to metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/44f12b40-2bf4-11e7-859b-f78b612cde28.json diff --git a/metricbeat/module/kubernetes/_meta/kibana/visualization/58e644f0-30d6-11e7-8df8-6d3604a72912.json b/metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/58e644f0-30d6-11e7-8df8-6d3604a72912.json similarity index 100% rename from metricbeat/module/kubernetes/_meta/kibana/visualization/58e644f0-30d6-11e7-8df8-6d3604a72912.json rename to metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/58e644f0-30d6-11e7-8df8-6d3604a72912.json diff --git a/metricbeat/module/kubernetes/_meta/kibana/visualization/7aac4fd0-30e0-11e7-8df8-6d3604a72912.json b/metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/7aac4fd0-30e0-11e7-8df8-6d3604a72912.json similarity index 100% rename from metricbeat/module/kubernetes/_meta/kibana/visualization/7aac4fd0-30e0-11e7-8df8-6d3604a72912.json rename to metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/7aac4fd0-30e0-11e7-8df8-6d3604a72912.json diff --git a/metricbeat/module/kubernetes/_meta/kibana/visualization/a4c9d360-30df-11e7-8df8-6d3604a72912.json b/metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/a4c9d360-30df-11e7-8df8-6d3604a72912.json similarity index 100% rename from metricbeat/module/kubernetes/_meta/kibana/visualization/a4c9d360-30df-11e7-8df8-6d3604a72912.json rename to metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/a4c9d360-30df-11e7-8df8-6d3604a72912.json diff --git a/metricbeat/module/kubernetes/_meta/kibana/visualization/cd059410-2bfb-11e7-859b-f78b612cde28.json b/metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/cd059410-2bfb-11e7-859b-f78b612cde28.json similarity index 100% rename from metricbeat/module/kubernetes/_meta/kibana/visualization/cd059410-2bfb-11e7-859b-f78b612cde28.json rename to metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/cd059410-2bfb-11e7-859b-f78b612cde28.json diff --git a/metricbeat/module/kubernetes/_meta/kibana/visualization/d6564360-2bfc-11e7-859b-f78b612cde28.json b/metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/d6564360-2bfc-11e7-859b-f78b612cde28.json similarity index 100% rename from metricbeat/module/kubernetes/_meta/kibana/visualization/d6564360-2bfc-11e7-859b-f78b612cde28.json rename to metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/d6564360-2bfc-11e7-859b-f78b612cde28.json diff --git a/metricbeat/module/kubernetes/_meta/kibana/visualization/da1ff7c0-30ed-11e7-b9e5-2b5b07213ab3.json b/metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/da1ff7c0-30ed-11e7-b9e5-2b5b07213ab3.json similarity index 100% rename from metricbeat/module/kubernetes/_meta/kibana/visualization/da1ff7c0-30ed-11e7-b9e5-2b5b07213ab3.json rename to metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/da1ff7c0-30ed-11e7-b9e5-2b5b07213ab3.json diff --git a/metricbeat/module/kubernetes/_meta/kibana/visualization/e1018b90-2bfb-11e7-859b-f78b612cde28.json b/metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/e1018b90-2bfb-11e7-859b-f78b612cde28.json similarity index 100% rename from metricbeat/module/kubernetes/_meta/kibana/visualization/e1018b90-2bfb-11e7-859b-f78b612cde28.json rename to metricbeat/module/kubernetes/_meta/kibana/5.x/visualization/e1018b90-2bfb-11e7-859b-f78b612cde28.json diff --git a/metricbeat/module/kubernetes/_meta/kibana/default/dashboard/Metricbeat-kubernetes.json b/metricbeat/module/kubernetes/_meta/kibana/default/dashboard/Metricbeat-kubernetes.json new file mode 100644 index 00000000000..a4075dc2f57 --- /dev/null +++ b/metricbeat/module/kubernetes/_meta/kibana/default/dashboard/Metricbeat-kubernetes.json @@ -0,0 +1,200 @@ +{ + "objects": [ + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Kubernetes - Available pods per deployment", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Kubernetes - Available pods per deployment\",\"type\":\"metrics\",\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"filter\":\"metricset.module:kubernetes AND metricset.name:state_deployment\",\"id\":\"117fadf0-30df-11e7-8df8-6d3604a72912\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(104,188,0,1)\",\"fill\":0.5,\"formatter\":\"number\",\"id\":\"64456840-30df-11e7-8df8-6d3604a72912\",\"label\":\"Available pods\",\"line_width\":1,\"metrics\":[{\"field\":\"kubernetes.deployment.replicas.available\",\"id\":\"64456841-30df-11e7-8df8-6d3604a72912\",\"type\":\"sum\"}],\"point_size\":1,\"seperate_axis\":0,\"split_filters\":[{\"color\":\"#68BC00\",\"id\":\"53d35ad0-30df-11e7-8df8-6d3604a72912\"}],\"split_mode\":\"terms\",\"stacked\":\"stacked\",\"terms_field\":\"kubernetes.deployment.name\",\"terms_size\":\"10000\"}],\"show_legend\":1,\"time_field\":\"@timestamp\",\"type\":\"timeseries\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "022a54c0-2bf5-11e7-859b-f78b612cde28", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Kubernetes - CPU usage by node", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Kubernetes - CPU usage by node\",\"type\":\"metrics\",\"params\":{\"id\":\"0d5c6b10-2bf2-11e7-859b-f78b612cde28\",\"type\":\"timeseries\",\"series\":[{\"id\":\"0d5c9220-2bf2-11e7-859b-f78b612cde28\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"0d5c9221-2bf2-11e7-859b-f78b612cde28\",\"type\":\"sum\",\"field\":\"kubernetes.container.cpu.usage.nanocores\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"0.0a\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":\"0.5\",\"stacked\":\"none\",\"terms_field\":\"kubernetes.node.name\",\"terms_size\":\"10000\",\"terms_order_by\":\"0d5c9221-2bf2-11e7-859b-f78b612cde28\",\"value_template\":\"{{value}} nanocores\",\"override_index_pattern\":0,\"series_interval\":\"10s\",\"series_time_field\":\"@timestamp\"},{\"id\":\"22f65d40-31a7-11e7-84cc-096d2b38e6e5\",\"color\":\"rgba(211,49,21,1)\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"22f65d41-31a7-11e7-84cc-096d2b38e6e5\",\"type\":\"avg\",\"field\":\"kubernetes.node.cpu.capacity.cores\"},{\"script\":\"params.cores * 1000000000\",\"id\":\"4af4c390-34d6-11e7-be88-cb6a123dc1bb\",\"type\":\"calculation\",\"variables\":[{\"id\":\"4cd32080-34d6-11e7-be88-cb6a123dc1bb\",\"name\":\"cores\",\"field\":\"22f65d41-31a7-11e7-84cc-096d2b38e6e5\"}]}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"0.0a\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"0\",\"stacked\":\"none\",\"terms_field\":\"kubernetes.node.name\",\"terms_size\":\"10000\",\"terms_order_by\":\"22f65d41-31a7-11e7-84cc-096d2b38e6e5\",\"value_template\":\"{{value}} nanocores\",\"hide_in_legend\":1,\"label\":\"\",\"override_index_pattern\":0,\"series_interval\":\"10s\",\"series_time_field\":\"@timestamp\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"background_color_rules\":[{\"id\":\"12c1f2f0-2bf2-11e7-859b-f78b612cde28\"}],\"bar_color_rules\":[{\"id\":\"1373ddd0-2bf2-11e7-859b-f78b612cde28\"}],\"gauge_color_rules\":[{\"id\":\"140e4910-2bf2-11e7-859b-f78b612cde28\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"filter\":\"metricset.module:kubernetes AND (metricset.name:container OR metricset.name:state_node)\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "44f12b40-2bf4-11e7-859b-f78b612cde28", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Kubernetes - Deployments", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Kubernetes - Deployments\",\"type\":\"metrics\",\"params\":{\"id\":\"4c4690b0-30e0-11e7-8df8-6d3604a72912\",\"type\":\"metric\",\"series\":[{\"id\":\"4c4690b1-30e0-11e7-8df8-6d3604a72912\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"4c4690b2-30e0-11e7-8df8-6d3604a72912\",\"type\":\"cardinality\",\"field\":\"kubernetes.deployment.name\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"kubernetes.deployment.name\",\"label\":\"Deployments\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"filter\":\"metricset.module:kubernetes AND metricset.name:state_deployment\",\"background_color_rules\":[{\"id\":\"67ee7da0-30e0-11e7-8df8-6d3604a72912\"}],\"bar_color_rules\":[{\"id\":\"68cdba10-30e0-11e7-8df8-6d3604a72912\"}],\"gauge_color_rules\":[{\"id\":\"69765620-30e0-11e7-8df8-6d3604a72912\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "cd059410-2bfb-11e7-859b-f78b612cde28", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Kubernetes - Desired pods", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Kubernetes - Desired pods\",\"type\":\"metrics\",\"params\":{\"id\":\"2fe9d3b0-30d5-11e7-8df8-6d3604a72912\",\"type\":\"metric\",\"series\":[{\"id\":\"2fe9d3b1-30d5-11e7-8df8-6d3604a72912\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"54cf79a0-30d5-11e7-8df8-6d3604a72912\",\"type\":\"sum\",\"field\":\"kubernetes.deployment.replicas.desired\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Desired Pods\",\"override_index_pattern\":1,\"series_time_field\":\"@timestamp\",\"series_interval\":\"10s\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"background_color_rules\":[{\"id\":\"508ffb30-30d5-11e7-8df8-6d3604a72912\"}],\"gauge_color_rules\":[{\"id\":\"50f9b980-30d5-11e7-8df8-6d3604a72912\"}],\"gauge_width\":\"10\",\"gauge_inner_width\":\"10\",\"gauge_style\":\"half\",\"bar_color_rules\":[{\"id\":\"674d83b0-30d5-11e7-8df8-6d3604a72912\"}],\"gauge_max\":\"5\",\"filter\":\"metricset.module:kubernetes AND metricset.name:state_deployment\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "e1018b90-2bfb-11e7-859b-f78b612cde28", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Kubernetes - Memory usage by node", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Kubernetes - Memory usage by node\",\"type\":\"metrics\",\"params\":{\"id\":\"0d5c6b10-2bf2-11e7-859b-f78b612cde28\",\"type\":\"timeseries\",\"series\":[{\"id\":\"0d5c9220-2bf2-11e7-859b-f78b612cde28\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"0d5c9221-2bf2-11e7-859b-f78b612cde28\",\"type\":\"sum\",\"field\":\"kubernetes.container.memory.usage.bytes\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"kubernetes.node.name\",\"terms_size\":\"10000\",\"terms_order_by\":\"0d5c9221-2bf2-11e7-859b-f78b612cde28\"},{\"id\":\"8ba3b270-31a7-11e7-84cc-096d2b38e6e5\",\"color\":\"rgba(211,49,21,1)\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"8ba3b271-31a7-11e7-84cc-096d2b38e6e5\",\"type\":\"sum\",\"field\":\"kubernetes.node.memory.capacity.bytes\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"0\",\"stacked\":\"none\",\"terms_field\":\"kubernetes.node.name\",\"terms_size\":\"10000\",\"terms_order_by\":\"8ba3b271-31a7-11e7-84cc-096d2b38e6e5\",\"hide_in_legend\":1,\"label\":\"Node capacity\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"background_color_rules\":[{\"id\":\"12c1f2f0-2bf2-11e7-859b-f78b612cde28\"}],\"bar_color_rules\":[{\"id\":\"1373ddd0-2bf2-11e7-859b-f78b612cde28\"}],\"gauge_color_rules\":[{\"id\":\"140e4910-2bf2-11e7-859b-f78b612cde28\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"filter\":\"metricset.module:kubernetes AND (metricset.name:container OR metricset.name:state_node)\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "d6564360-2bfc-11e7-859b-f78b612cde28", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Kubernetes - Network in by node", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Kubernetes - Network in by node\",\"type\":\"metrics\",\"params\":{\"id\":\"0d5c6b10-2bf2-11e7-859b-f78b612cde28\",\"type\":\"timeseries\",\"series\":[{\"id\":\"0d5c9220-2bf2-11e7-859b-f78b612cde28\",\"color\":\"rgba(104,188,0,1)\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"0d5c9221-2bf2-11e7-859b-f78b612cde28\",\"type\":\"sum\",\"field\":\"kubernetes.pod.network.rx.bytes\"},{\"unit\":\"\",\"id\":\"494fc310-2bf7-11e7-859b-f78b612cde28\",\"type\":\"derivative\",\"field\":\"0d5c9221-2bf2-11e7-859b-f78b612cde28\"},{\"unit\":\"\",\"id\":\"37c72a70-3598-11e7-aa4a-8313a0c92a88\",\"type\":\"positive_only\",\"field\":\"494fc310-2bf7-11e7-859b-f78b612cde28\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"stacked\",\"terms_field\":\"kubernetes.node.name\",\"terms_size\":\"100000\",\"terms_order_by\":\"0d5c9221-2bf2-11e7-859b-f78b612cde28\",\"label\":\"\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"background_color_rules\":[{\"id\":\"12c1f2f0-2bf2-11e7-859b-f78b612cde28\"}],\"bar_color_rules\":[{\"id\":\"1373ddd0-2bf2-11e7-859b-f78b612cde28\"}],\"gauge_color_rules\":[{\"id\":\"140e4910-2bf2-11e7-859b-f78b612cde28\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"filter\":\"metricset.module:kubernetes AND metricset.name:pod\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "16fa4470-2bfd-11e7-859b-f78b612cde28", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Kubernetes - Network out by node", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Kubernetes - Network out by node\",\"type\":\"metrics\",\"params\":{\"id\":\"0d5c6b10-2bf2-11e7-859b-f78b612cde28\",\"type\":\"timeseries\",\"series\":[{\"id\":\"0d5c9220-2bf2-11e7-859b-f78b612cde28\",\"color\":\"rgba(104,188,0,1)\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"0d5c9221-2bf2-11e7-859b-f78b612cde28\",\"type\":\"sum\",\"field\":\"kubernetes.pod.network.tx.bytes\"},{\"unit\":\"\",\"id\":\"494fc310-2bf7-11e7-859b-f78b612cde28\",\"type\":\"derivative\",\"field\":\"0d5c9221-2bf2-11e7-859b-f78b612cde28\"},{\"unit\":\"\",\"id\":\"244c70e0-3598-11e7-aa4a-8313a0c92a88\",\"type\":\"positive_only\",\"field\":\"494fc310-2bf7-11e7-859b-f78b612cde28\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"stacked\",\"terms_field\":\"kubernetes.node.name\",\"terms_size\":\"10000\",\"terms_order_by\":\"0d5c9221-2bf2-11e7-859b-f78b612cde28\",\"label\":\"\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"background_color_rules\":[{\"id\":\"12c1f2f0-2bf2-11e7-859b-f78b612cde28\"}],\"bar_color_rules\":[{\"id\":\"1373ddd0-2bf2-11e7-859b-f78b612cde28\"}],\"gauge_color_rules\":[{\"id\":\"140e4910-2bf2-11e7-859b-f78b612cde28\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"filter\":\"metricset.module:kubernetes AND metricset.name:pod\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "294546b0-30d6-11e7-8df8-6d3604a72912", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Kubernetes - Nodes", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Kubernetes - Nodes\",\"type\":\"metrics\",\"params\":{\"id\":\"4c4690b0-30e0-11e7-8df8-6d3604a72912\",\"type\":\"metric\",\"series\":[{\"id\":\"4c4690b1-30e0-11e7-8df8-6d3604a72912\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"4c4690b2-30e0-11e7-8df8-6d3604a72912\",\"type\":\"cardinality\",\"field\":\"kubernetes.node.name\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"kubernetes.deployment.name\",\"label\":\"Nodes\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"filter\":\"metricset.module:kubernetes AND metricset.name:state_node\",\"background_color_rules\":[{\"id\":\"67ee7da0-30e0-11e7-8df8-6d3604a72912\"}],\"bar_color_rules\":[{\"id\":\"68cdba10-30e0-11e7-8df8-6d3604a72912\"}],\"gauge_color_rules\":[{\"id\":\"69765620-30e0-11e7-8df8-6d3604a72912\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "408fccf0-30d6-11e7-8df8-6d3604a72912", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Kubernetes - Top CPU intensive pods", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Kubernetes - Top CPU intensive pods\",\"type\":\"metrics\",\"params\":{\"id\":\"5d3692a0-2bfc-11e7-859b-f78b612cde28\",\"type\":\"top_n\",\"series\":[{\"id\":\"5d3692a1-2bfc-11e7-859b-f78b612cde28\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"5d3692a2-2bfc-11e7-859b-f78b612cde28\",\"type\":\"sum\",\"field\":\"kubernetes.container.cpu.usage.core.ns\"},{\"unit\":\"1s\",\"id\":\"6c905240-2bfc-11e7-859b-f78b612cde28\",\"type\":\"derivative\",\"field\":\"5d3692a2-2bfc-11e7-859b-f78b612cde28\"},{\"unit\":\"\",\"id\":\"9a51f710-359d-11e7-aa4a-8313a0c92a88\",\"type\":\"positive_only\",\"field\":\"6c905240-2bfc-11e7-859b-f78b612cde28\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"0.0 a\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"kubernetes.pod.name\",\"terms_order_by\":\"5d3692a2-2bfc-11e7-859b-f78b612cde28\",\"value_template\":\"{{value}} ns\",\"offset_time\":\"\",\"override_index_pattern\":0}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"bar_color_rules\":[{\"id\":\"802104d0-2bfc-11e7-859b-f78b612cde28\"}],\"filter\":\"metricset.module:kubernetes AND metricset.name:container\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "58e644f0-30d6-11e7-8df8-6d3604a72912", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Kubernetes - Top memory intensive pods", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Kubernetes - Top memory intensive pods\",\"type\":\"metrics\",\"params\":{\"id\":\"5d3692a0-2bfc-11e7-859b-f78b612cde28\",\"type\":\"top_n\",\"series\":[{\"id\":\"5d3692a1-2bfc-11e7-859b-f78b612cde28\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"5d3692a2-2bfc-11e7-859b-f78b612cde28\",\"type\":\"sum\",\"field\":\"kubernetes.container.memory.usage.bytes\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"kubernetes.pod.name\",\"terms_order_by\":\"5d3692a2-2bfc-11e7-859b-f78b612cde28\",\"value_template\":\"\",\"offset_time\":\"\",\"override_index_pattern\":0,\"terms_size\":\"10\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"bar_color_rules\":[{\"id\":\"802104d0-2bfc-11e7-859b-f78b612cde28\"}],\"filter\":\"metricset.module:kubernetes AND metricset.name:container\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "a4c9d360-30df-11e7-8df8-6d3604a72912", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Kubernetes - Unavailable pods", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Kubernetes - Unavailable pods\",\"type\":\"metrics\",\"params\":{\"id\":\"2fe9d3b0-30d5-11e7-8df8-6d3604a72912\",\"type\":\"metric\",\"series\":[{\"id\":\"2fe9d3b1-30d5-11e7-8df8-6d3604a72912\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"54cf79a0-30d5-11e7-8df8-6d3604a72912\",\"type\":\"sum\",\"field\":\"kubernetes.deployment.replicas.unavailable\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Unavailable Pods\",\"override_index_pattern\":1,\"series_interval\":\"10s\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"background_color_rules\":[{\"id\":\"508ffb30-30d5-11e7-8df8-6d3604a72912\"}],\"gauge_color_rules\":[{\"id\":\"50f9b980-30d5-11e7-8df8-6d3604a72912\"}],\"gauge_width\":\"10\",\"gauge_inner_width\":\"10\",\"gauge_style\":\"half\",\"bar_color_rules\":[{\"id\":\"674d83b0-30d5-11e7-8df8-6d3604a72912\"}],\"gauge_max\":\"\",\"filter\":\"metricset.module:kubernetes AND metricset.name:state_deployment\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "174a6ad0-30e0-11e7-8df8-6d3604a72912", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Kubernetes - Unavailable pods per deployment", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Kubernetes - Unavailable pods per deployment\",\"type\":\"metrics\",\"params\":{\"id\":\"117fadf0-30df-11e7-8df8-6d3604a72912\",\"type\":\"timeseries\",\"series\":[{\"id\":\"64456840-30df-11e7-8df8-6d3604a72912\",\"color\":\"rgba(254,146,0,1)\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"64456841-30df-11e7-8df8-6d3604a72912\",\"type\":\"sum\",\"field\":\"kubernetes.deployment.replicas.unavailable\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"stacked\",\"split_filters\":[{\"color\":\"#68BC00\",\"id\":\"53d35ad0-30df-11e7-8df8-6d3604a72912\"}],\"terms_field\":\"kubernetes.deployment.name\",\"label\":\"Unavailable pods\",\"terms_size\":\"10000\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"filter\":\"metricset.module:kubernetes AND metricset.name:state_deployment\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "7aac4fd0-30e0-11e7-8df8-6d3604a72912", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Kubernetes - Available pods", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Kubernetes - Available pods\",\"type\":\"metrics\",\"params\":{\"id\":\"2fe9d3b0-30d5-11e7-8df8-6d3604a72912\",\"type\":\"metric\",\"series\":[{\"id\":\"2fe9d3b1-30d5-11e7-8df8-6d3604a72912\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"54cf79a0-30d5-11e7-8df8-6d3604a72912\",\"type\":\"sum\",\"field\":\"kubernetes.deployment.replicas.available\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Available Pods\",\"override_index_pattern\":1,\"series_time_field\":\"@timestamp\",\"series_index_pattern\":\"*\",\"series_interval\":\"10s\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"background_color_rules\":[{\"id\":\"508ffb30-30d5-11e7-8df8-6d3604a72912\"}],\"gauge_color_rules\":[{\"id\":\"50f9b980-30d5-11e7-8df8-6d3604a72912\"}],\"gauge_width\":\"10\",\"gauge_inner_width\":\"10\",\"gauge_style\":\"half\",\"bar_color_rules\":[{\"id\":\"674d83b0-30d5-11e7-8df8-6d3604a72912\"}],\"gauge_max\":\"5\",\"filter\":\"metricset.module:kubernetes AND metricset.name:state_deployment\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "da1ff7c0-30ed-11e7-b9e5-2b5b07213ab3", + "type": "visualization", + "version": 1 + } + ], + "version": "6.0.0-alpha3-SNAPSHOT" +} \ No newline at end of file diff --git a/metricbeat/module/mongodb/_meta/kibana/dashboard/Metricbeat-MongoDB.json b/metricbeat/module/mongodb/_meta/kibana/5.x/dashboard/Metricbeat-MongoDB.json similarity index 100% rename from metricbeat/module/mongodb/_meta/kibana/dashboard/Metricbeat-MongoDB.json rename to metricbeat/module/mongodb/_meta/kibana/5.x/dashboard/Metricbeat-MongoDB.json diff --git a/metricbeat/module/mongodb/_meta/kibana/search/MongoDB-search.json b/metricbeat/module/mongodb/_meta/kibana/5.x/search/MongoDB-search.json similarity index 100% rename from metricbeat/module/mongodb/_meta/kibana/search/MongoDB-search.json rename to metricbeat/module/mongodb/_meta/kibana/5.x/search/MongoDB-search.json diff --git a/metricbeat/module/mongodb/_meta/kibana/visualization/MongoDB-Concurrent-transactions-Read.json b/metricbeat/module/mongodb/_meta/kibana/5.x/visualization/MongoDB-Concurrent-transactions-Read.json similarity index 100% rename from metricbeat/module/mongodb/_meta/kibana/visualization/MongoDB-Concurrent-transactions-Read.json rename to metricbeat/module/mongodb/_meta/kibana/5.x/visualization/MongoDB-Concurrent-transactions-Read.json diff --git a/metricbeat/module/mongodb/_meta/kibana/visualization/MongoDB-Concurrent-transactions-Write.json b/metricbeat/module/mongodb/_meta/kibana/5.x/visualization/MongoDB-Concurrent-transactions-Write.json similarity index 100% rename from metricbeat/module/mongodb/_meta/kibana/visualization/MongoDB-Concurrent-transactions-Write.json rename to metricbeat/module/mongodb/_meta/kibana/5.x/visualization/MongoDB-Concurrent-transactions-Write.json diff --git a/metricbeat/module/mongodb/_meta/kibana/visualization/MongoDB-Engine-ampersand-Version.json b/metricbeat/module/mongodb/_meta/kibana/5.x/visualization/MongoDB-Engine-ampersand-Version.json similarity index 100% rename from metricbeat/module/mongodb/_meta/kibana/visualization/MongoDB-Engine-ampersand-Version.json rename to metricbeat/module/mongodb/_meta/kibana/5.x/visualization/MongoDB-Engine-ampersand-Version.json diff --git a/metricbeat/module/mongodb/_meta/kibana/visualization/MongoDB-WiredTiger-Cache.json b/metricbeat/module/mongodb/_meta/kibana/5.x/visualization/MongoDB-WiredTiger-Cache.json similarity index 100% rename from metricbeat/module/mongodb/_meta/kibana/visualization/MongoDB-WiredTiger-Cache.json rename to metricbeat/module/mongodb/_meta/kibana/5.x/visualization/MongoDB-WiredTiger-Cache.json diff --git a/metricbeat/module/mongodb/_meta/kibana/visualization/MongoDB-asserts.json b/metricbeat/module/mongodb/_meta/kibana/5.x/visualization/MongoDB-asserts.json similarity index 100% rename from metricbeat/module/mongodb/_meta/kibana/visualization/MongoDB-asserts.json rename to metricbeat/module/mongodb/_meta/kibana/5.x/visualization/MongoDB-asserts.json diff --git a/metricbeat/module/mongodb/_meta/kibana/visualization/MongoDB-hosts.json b/metricbeat/module/mongodb/_meta/kibana/5.x/visualization/MongoDB-hosts.json similarity index 100% rename from metricbeat/module/mongodb/_meta/kibana/visualization/MongoDB-hosts.json rename to metricbeat/module/mongodb/_meta/kibana/5.x/visualization/MongoDB-hosts.json diff --git a/metricbeat/module/mongodb/_meta/kibana/visualization/MongoDB-memory-stats.json b/metricbeat/module/mongodb/_meta/kibana/5.x/visualization/MongoDB-memory-stats.json similarity index 100% rename from metricbeat/module/mongodb/_meta/kibana/visualization/MongoDB-memory-stats.json rename to metricbeat/module/mongodb/_meta/kibana/5.x/visualization/MongoDB-memory-stats.json diff --git a/metricbeat/module/mongodb/_meta/kibana/visualization/MongoDB-operation-counters.json b/metricbeat/module/mongodb/_meta/kibana/5.x/visualization/MongoDB-operation-counters.json similarity index 100% rename from metricbeat/module/mongodb/_meta/kibana/visualization/MongoDB-operation-counters.json rename to metricbeat/module/mongodb/_meta/kibana/5.x/visualization/MongoDB-operation-counters.json diff --git a/metricbeat/module/mongodb/_meta/kibana/default/dashboard/Metricbeat-mongodb.json b/metricbeat/module/mongodb/_meta/kibana/default/dashboard/Metricbeat-mongodb.json new file mode 100644 index 00000000000..689e2068091 --- /dev/null +++ b/metricbeat/module/mongodb/_meta/kibana/default/dashboard/Metricbeat-mongodb.json @@ -0,0 +1,172 @@ +{ + "objects": [ + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "MongoDB-search", + "title": "MongoDB hosts", + "uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}", + "version": 1, + "visState": "{\"title\":\"MongoDB hosts\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.connections.current\",\"customLabel\":\"Number of connections\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"metricset.host\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.memory.bits\",\"customLabel\":\"Arch\"}},{\"id\":\"4\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.memory.resident.mb\",\"customLabel\":\"Resident memory\"}},{\"id\":\"5\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.memory.virtual.mb\",\"customLabel\":\"Virtual memory\"}}],\"listeners\":{}}" + }, + "id": "MongoDB-hosts", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "MongoDB-search", + "title": "MongoDB Engine \u0026 Version", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"MongoDB Engine \u0026 Version\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"bottom\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"metricset.host\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"mongodb.status.storage_engine.name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Engine\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"mongodb.status.version\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Version\"}}],\"listeners\":{}}" + }, + "id": "MongoDB-Engine-ampersand-Version", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "MongoDB-search", + "title": "MongoDB operation counters", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"MongoDB operation counters\",\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"bottom\",\"smoothLines\":false,\"scale\":\"linear\",\"interpolate\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.opcounters.command\",\"customLabel\":\"command\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.opcounters.delete\",\"customLabel\":\"delete\"}},{\"id\":\"4\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.opcounters.getmore\",\"customLabel\":\"getmore\"}},{\"id\":\"5\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.opcounters.insert\",\"customLabel\":\"insert\"}},{\"id\":\"6\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.opcounters.query\",\"customLabel\":\"query\"}},{\"id\":\"7\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.opcounters_replicated.update\",\"customLabel\":\"update\"}}],\"listeners\":{}}" + }, + "id": "MongoDB-operation-counters", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "MongoDB-search", + "title": "MongoDB Concurrent transactions Read", + "uiStateJSON": "{\"vis\":{\"colors\":{\"Read Available\":\"#508642\",\"Read Used\":\"#BF1B00\"}}}", + "version": 1, + "visState": "{\"title\":\"MongoDB Concurrent transactions Read\",\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"bottom\",\"smoothLines\":false,\"scale\":\"linear\",\"interpolate\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.wired_tiger.concurrent_transactions.read.available\",\"customLabel\":\"Read Available\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.wired_tiger.concurrent_transactions.read.out\",\"customLabel\":\"Read Used\"}}],\"listeners\":{}}" + }, + "id": "MongoDB-Concurrent-transactions-Read", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "MongoDB-search", + "title": "MongoDB Concurrent transactions Write", + "uiStateJSON": "{\"vis\":{\"colors\":{\"Write Available\":\"#629E51\",\"Write Used\":\"#BF1B00\"}}}", + "version": 1, + "visState": "{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{\"customLabel\":\"Write Available\",\"field\":\"mongodb.status.wired_tiger.concurrent_transactions.write.available\"},\"schema\":\"metric\",\"type\":\"avg\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"customInterval\":\"2h\",\"extended_bounds\":{},\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1},\"schema\":\"segment\",\"type\":\"date_histogram\"},{\"enabled\":true,\"id\":\"3\",\"params\":{\"customLabel\":\"Write Used\",\"field\":\"mongodb.status.wired_tiger.concurrent_transactions.write.out\"},\"schema\":\"metric\",\"type\":\"avg\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"defaultYExtents\":false,\"interpolate\":\"linear\",\"legendPosition\":\"bottom\",\"mode\":\"stacked\",\"scale\":\"linear\",\"setYExtents\":false,\"shareYAxis\":true,\"smoothLines\":false,\"times\":[],\"yAxis\":{}},\"title\":\"MongoDB Concurrent transactions Write\",\"type\":\"area\"}" + }, + "id": "MongoDB-Concurrent-transactions-Write", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "MongoDB-search", + "title": "MongoDB memory stats", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"MongoDB memory stats\",\"type\":\"line\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"bottom\",\"showCircles\":true,\"smoothLines\":false,\"interpolate\":\"linear\",\"scale\":\"log\",\"drawLinesBetweenPoints\":true,\"radiusRatio\":9,\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.memory.mapped.mb\",\"customLabel\":\"Mapped\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.memory.mapped_with_journal.mb\",\"customLabel\":\"Mapped with journal\"}},{\"id\":\"4\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.memory.resident.mb\",\"customLabel\":\"Rezident\"}},{\"id\":\"5\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.memory.virtual.mb\",\"customLabel\":\"Virtual\"}}],\"listeners\":{}}" + }, + "id": "MongoDB-memory-stats", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "MongoDB-search", + "title": "MongoDB asserts", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"MongoDB asserts\",\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"bottom\",\"smoothLines\":false,\"scale\":\"linear\",\"interpolate\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.asserts.msg\",\"customLabel\":\"message\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.asserts.regular\",\"customLabel\":\"regular\"}},{\"id\":\"4\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.asserts.rollovers\",\"customLabel\":\"rollover\"}},{\"id\":\"5\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.asserts.user\",\"customLabel\":\"user\"}},{\"id\":\"6\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.asserts.warning\",\"customLabel\":\"warning\"}}],\"listeners\":{}}" + }, + "id": "MongoDB-asserts", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "MongoDB-search", + "title": "MongoDB WiredTiger Cache", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"MongoDB WiredTiger Cache\",\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"bottom\",\"smoothLines\":false,\"scale\":\"linear\",\"interpolate\":\"linear\",\"mode\":\"overlap\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.wired_tiger.cache.maximum.bytes\",\"customLabel\":\"max\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.wired_tiger.cache.used.bytes\",\"customLabel\":\"used\"}},{\"id\":\"4\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mongodb.status.wired_tiger.cache.dirty.bytes\",\"customLabel\":\"dirty\"}}],\"listeners\":{}}" + }, + "id": "MongoDB-WiredTiger-Cache", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "columns": [ + "_source" + ], + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"metricbeat-*\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"metricset.module:mongodb\"}},\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}" + }, + "sort": [ + "@timestamp", + "desc" + ], + "title": "MongoDB search", + "version": 1 + }, + "id": "MongoDB-search", + "type": "search", + "version": 8 + }, + { + "attributes": { + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}" + }, + "optionsJSON": "{\"darkTheme\":false}", + "panelsJSON": "[{\"col\":1,\"id\":\"MongoDB-hosts\",\"panelIndex\":1,\"row\":1,\"size_x\":8,\"size_y\":3,\"type\":\"visualization\"},{\"col\":9,\"id\":\"MongoDB-Engine-ampersand-Version\",\"panelIndex\":4,\"row\":1,\"size_x\":4,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"MongoDB-operation-counters\",\"panelIndex\":2,\"row\":4,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"MongoDB-Concurrent-transactions-Read\",\"panelIndex\":6,\"row\":4,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":10,\"id\":\"MongoDB-Concurrent-transactions-Write\",\"panelIndex\":7,\"row\":4,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"MongoDB-memory-stats\",\"panelIndex\":5,\"row\":10,\"size_x\":12,\"size_y\":4,\"type\":\"visualization\"},{\"col\":7,\"id\":\"MongoDB-asserts\",\"panelIndex\":3,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"id\":\"MongoDB-WiredTiger-Cache\",\"type\":\"visualization\",\"panelIndex\":8,\"size_x\":6,\"size_y\":3,\"col\":1,\"row\":7}]", + "timeRestore": false, + "title": "Metricbeat MongoDB", + "uiStateJSON": "{\"P-1\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}", + "version": 1 + }, + "id": "Metricbeat-MongoDB", + "type": "dashboard", + "version": 1 + } + ], + "version": "6.0.0-alpha3-SNAPSHOT" +} \ No newline at end of file diff --git a/metricbeat/module/mysql/_meta/kibana/dashboard/66881e90-0006-11e7-bf7f-c9acc3d3e306.json b/metricbeat/module/mysql/_meta/kibana/5.x/dashboard/66881e90-0006-11e7-bf7f-c9acc3d3e306.json similarity index 100% rename from metricbeat/module/mysql/_meta/kibana/dashboard/66881e90-0006-11e7-bf7f-c9acc3d3e306.json rename to metricbeat/module/mysql/_meta/kibana/5.x/dashboard/66881e90-0006-11e7-bf7f-c9acc3d3e306.json diff --git a/metricbeat/module/mysql/_meta/kibana/search/67e88e60-0005-11e7-aaf1-b342e4b94bb0.json b/metricbeat/module/mysql/_meta/kibana/5.x/search/67e88e60-0005-11e7-aaf1-b342e4b94bb0.json similarity index 100% rename from metricbeat/module/mysql/_meta/kibana/search/67e88e60-0005-11e7-aaf1-b342e4b94bb0.json rename to metricbeat/module/mysql/_meta/kibana/5.x/search/67e88e60-0005-11e7-aaf1-b342e4b94bb0.json diff --git a/metricbeat/module/mysql/_meta/kibana/visualization/0f506420-0006-11e7-bf7f-c9acc3d3e306.json b/metricbeat/module/mysql/_meta/kibana/5.x/visualization/0f506420-0006-11e7-bf7f-c9acc3d3e306.json similarity index 100% rename from metricbeat/module/mysql/_meta/kibana/visualization/0f506420-0006-11e7-bf7f-c9acc3d3e306.json rename to metricbeat/module/mysql/_meta/kibana/5.x/visualization/0f506420-0006-11e7-bf7f-c9acc3d3e306.json diff --git a/metricbeat/module/mysql/_meta/kibana/visualization/1a99f2b0-0006-11e7-bf7f-c9acc3d3e306.json b/metricbeat/module/mysql/_meta/kibana/5.x/visualization/1a99f2b0-0006-11e7-bf7f-c9acc3d3e306.json similarity index 100% rename from metricbeat/module/mysql/_meta/kibana/visualization/1a99f2b0-0006-11e7-bf7f-c9acc3d3e306.json rename to metricbeat/module/mysql/_meta/kibana/5.x/visualization/1a99f2b0-0006-11e7-bf7f-c9acc3d3e306.json diff --git a/metricbeat/module/mysql/_meta/kibana/visualization/1eda2280-0008-11e7-82f3-2f380154876c.json b/metricbeat/module/mysql/_meta/kibana/5.x/visualization/1eda2280-0008-11e7-82f3-2f380154876c.json similarity index 100% rename from metricbeat/module/mysql/_meta/kibana/visualization/1eda2280-0008-11e7-82f3-2f380154876c.json rename to metricbeat/module/mysql/_meta/kibana/5.x/visualization/1eda2280-0008-11e7-82f3-2f380154876c.json diff --git a/metricbeat/module/mysql/_meta/kibana/visualization/1ede99e0-0009-11e7-8cd4-73b67e9e3f3c.json b/metricbeat/module/mysql/_meta/kibana/5.x/visualization/1ede99e0-0009-11e7-8cd4-73b67e9e3f3c.json similarity index 100% rename from metricbeat/module/mysql/_meta/kibana/visualization/1ede99e0-0009-11e7-8cd4-73b67e9e3f3c.json rename to metricbeat/module/mysql/_meta/kibana/5.x/visualization/1ede99e0-0009-11e7-8cd4-73b67e9e3f3c.json diff --git a/metricbeat/module/mysql/_meta/kibana/visualization/45a00c10-0006-11e7-bf7f-c9acc3d3e306.json b/metricbeat/module/mysql/_meta/kibana/5.x/visualization/45a00c10-0006-11e7-bf7f-c9acc3d3e306.json similarity index 100% rename from metricbeat/module/mysql/_meta/kibana/visualization/45a00c10-0006-11e7-bf7f-c9acc3d3e306.json rename to metricbeat/module/mysql/_meta/kibana/5.x/visualization/45a00c10-0006-11e7-bf7f-c9acc3d3e306.json diff --git a/metricbeat/module/mysql/_meta/kibana/visualization/4c36c420-000a-11e7-8cd4-73b67e9e3f3c.json b/metricbeat/module/mysql/_meta/kibana/5.x/visualization/4c36c420-000a-11e7-8cd4-73b67e9e3f3c.json similarity index 100% rename from metricbeat/module/mysql/_meta/kibana/visualization/4c36c420-000a-11e7-8cd4-73b67e9e3f3c.json rename to metricbeat/module/mysql/_meta/kibana/5.x/visualization/4c36c420-000a-11e7-8cd4-73b67e9e3f3c.json diff --git a/metricbeat/module/mysql/_meta/kibana/visualization/a2175300-000a-11e7-b001-85aac4878445.json b/metricbeat/module/mysql/_meta/kibana/5.x/visualization/a2175300-000a-11e7-b001-85aac4878445.json similarity index 100% rename from metricbeat/module/mysql/_meta/kibana/visualization/a2175300-000a-11e7-b001-85aac4878445.json rename to metricbeat/module/mysql/_meta/kibana/5.x/visualization/a2175300-000a-11e7-b001-85aac4878445.json diff --git a/metricbeat/module/mysql/_meta/kibana/visualization/e784dc50-0005-11e7-bf7f-c9acc3d3e306.json b/metricbeat/module/mysql/_meta/kibana/5.x/visualization/e784dc50-0005-11e7-bf7f-c9acc3d3e306.json similarity index 100% rename from metricbeat/module/mysql/_meta/kibana/visualization/e784dc50-0005-11e7-bf7f-c9acc3d3e306.json rename to metricbeat/module/mysql/_meta/kibana/5.x/visualization/e784dc50-0005-11e7-bf7f-c9acc3d3e306.json diff --git a/metricbeat/module/mysql/_meta/kibana/default/dashboard/Metricbeat-mysql.json b/metricbeat/module/mysql/_meta/kibana/default/dashboard/Metricbeat-mysql.json new file mode 100644 index 00000000000..1e283b345b7 --- /dev/null +++ b/metricbeat/module/mysql/_meta/kibana/default/dashboard/Metricbeat-mysql.json @@ -0,0 +1,168 @@ +{ + "objects": [ + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "67e88e60-0005-11e7-aaf1-b342e4b94bb0", + "title": "MySQL active connections", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"MySQL active connections\",\"type\":\"line\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"bottom\",\"showCircles\":true,\"interpolate\":\"linear\",\"scale\":\"linear\",\"drawLinesBetweenPoints\":true,\"radiusRatio\":9,\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mysql.status.connections\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}" + }, + "id": "e784dc50-0005-11e7-bf7f-c9acc3d3e306", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "67e88e60-0005-11e7-aaf1-b342e4b94bb0", + "title": "MySQL open files", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"MySQL open files\",\"type\":\"line\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"bottom\",\"showCircles\":true,\"interpolate\":\"linear\",\"scale\":\"linear\",\"drawLinesBetweenPoints\":true,\"radiusRatio\":9,\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mysql.status.open.files\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}" + }, + "id": "0f506420-0006-11e7-bf7f-c9acc3d3e306", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "67e88e60-0005-11e7-aaf1-b342e4b94bb0", + "title": "MySQL open tables", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"MySQL open tables\",\"type\":\"line\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"bottom\",\"showCircles\":true,\"interpolate\":\"linear\",\"scale\":\"linear\",\"drawLinesBetweenPoints\":true,\"radiusRatio\":9,\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mysql.status.open.files\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}" + }, + "id": "1a99f2b0-0006-11e7-bf7f-c9acc3d3e306", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "67e88e60-0005-11e7-aaf1-b342e4b94bb0", + "title": "MySQL running threads", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"MySQL running threads\",\"type\":\"line\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"bottom\",\"showCircles\":true,\"interpolate\":\"linear\",\"scale\":\"linear\",\"drawLinesBetweenPoints\":true,\"radiusRatio\":9,\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mysql.status.threads.running\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}" + }, + "id": "45a00c10-0006-11e7-bf7f-c9acc3d3e306", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "MySQL commands", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"MySQL commands\",\"type\":\"timelion\",\"params\":{\"expression\":\".es(*, metric='avg:mysql.status.command.select').derivative().label(\\\"SELECT\\\"),.es(*, metric='avg:mysql.status.command.insert').derivative().label(\\\"INSERT\\\"),.es(*, metric='avg:mysql.status.command.insert').derivative().label(\\\"UPDATE\\\"),.es(*, metric='avg:mysql.status.command.insert').derivative().label(\\\"DELETE\\\")\",\"interval\":\"1m\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "1eda2280-0008-11e7-82f3-2f380154876c", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "MySQL threads created", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"MySQL threads created\",\"type\":\"timelion\",\"params\":{\"expression\":\".es(*, metric='avg:mysql.status.threads.created').derivative().label(\\\"Threads created\\\")\",\"interval\":\"1m\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "1ede99e0-0009-11e7-8cd4-73b67e9e3f3c", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "MySQL table opens", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"aggs\":[],\"listeners\":{},\"params\":{\"expression\":\".es(*, metric='avg:mysql.status.opened_tables').derivative().label(\\\"Opened tables\\\")\",\"interval\":\"1m\"},\"title\":\"MySQL table opens\",\"type\":\"timelion\"}" + }, + "id": "4c36c420-000a-11e7-8cd4-73b67e9e3f3c", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Mysql sent and received bytes", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Mysql sent and received bytes\",\"type\":\"timelion\",\"params\":{\"expression\":\".es(*,metric=\\\"avg:mysql.status.bytes.sent\\\").derivative().divide(1000).label(\\\"Sent bytes (KB)\\\"),.es(*,metric=\\\"avg:mysql.status.bytes.received\\\").derivative().multiply(-1).divide(1000).label(\\\"Received bytes (KB)\\\")\",\"interval\":\"1m\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "a2175300-000a-11e7-b001-85aac4878445", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "columns": [ + "_source" + ], + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"metricbeat-*\",\"highlightAll\":true,\"query\":{\"query_string\":{\"query\":\"_exists_:mysql.status\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "sort": [ + "@timestamp", + "desc" + ], + "title": "Metricbeat MySQL status", + "version": 1 + }, + "id": "67e88e60-0005-11e7-aaf1-b342e4b94bb0", + "type": "search", + "version": 4 + }, + { + "attributes": { + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}" + }, + "optionsJSON": "{\"darkTheme\":false}", + "panelsJSON": "[{\"col\":1,\"id\":\"e784dc50-0005-11e7-bf7f-c9acc3d3e306\",\"panelIndex\":1,\"row\":4,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"0f506420-0006-11e7-bf7f-c9acc3d3e306\",\"panelIndex\":2,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"1a99f2b0-0006-11e7-bf7f-c9acc3d3e306\",\"panelIndex\":3,\"row\":10,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"45a00c10-0006-11e7-bf7f-c9acc3d3e306\",\"panelIndex\":4,\"row\":4,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"1eda2280-0008-11e7-82f3-2f380154876c\",\"panelIndex\":5,\"row\":1,\"size_x\":12,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"1ede99e0-0009-11e7-8cd4-73b67e9e3f3c\",\"panelIndex\":7,\"row\":10,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"4c36c420-000a-11e7-8cd4-73b67e9e3f3c\",\"panelIndex\":8,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"size_x\":12,\"size_y\":3,\"panelIndex\":9,\"type\":\"visualization\",\"id\":\"a2175300-000a-11e7-b001-85aac4878445\",\"col\":1,\"row\":13}]", + "timeRestore": false, + "title": "Metricbeat MySQL", + "uiStateJSON": "{}", + "version": 1 + }, + "id": "66881e90-0006-11e7-bf7f-c9acc3d3e306", + "type": "dashboard", + "version": 1 + } + ], + "version": "6.0.0-alpha3-SNAPSHOT" +} \ No newline at end of file diff --git a/metricbeat/module/redis/_meta/kibana/dashboard/Metricbeat-Redis.json b/metricbeat/module/redis/_meta/kibana/5.x/dashboard/Metricbeat-Redis.json similarity index 100% rename from metricbeat/module/redis/_meta/kibana/dashboard/Metricbeat-Redis.json rename to metricbeat/module/redis/_meta/kibana/5.x/dashboard/Metricbeat-Redis.json diff --git a/metricbeat/module/redis/_meta/kibana/search/Metricbeat-Redis.json b/metricbeat/module/redis/_meta/kibana/5.x/search/Metricbeat-Redis.json similarity index 100% rename from metricbeat/module/redis/_meta/kibana/search/Metricbeat-Redis.json rename to metricbeat/module/redis/_meta/kibana/5.x/search/Metricbeat-Redis.json diff --git a/metricbeat/module/redis/_meta/kibana/visualization/Redis-Clients-Metrics.json b/metricbeat/module/redis/_meta/kibana/5.x/visualization/Redis-Clients-Metrics.json similarity index 100% rename from metricbeat/module/redis/_meta/kibana/visualization/Redis-Clients-Metrics.json rename to metricbeat/module/redis/_meta/kibana/5.x/visualization/Redis-Clients-Metrics.json diff --git a/metricbeat/module/redis/_meta/kibana/visualization/Redis-Connected-clients.json b/metricbeat/module/redis/_meta/kibana/5.x/visualization/Redis-Connected-clients.json similarity index 100% rename from metricbeat/module/redis/_meta/kibana/visualization/Redis-Connected-clients.json rename to metricbeat/module/redis/_meta/kibana/5.x/visualization/Redis-Connected-clients.json diff --git a/metricbeat/module/redis/_meta/kibana/visualization/Redis-Keyspaces.json b/metricbeat/module/redis/_meta/kibana/5.x/visualization/Redis-Keyspaces.json similarity index 100% rename from metricbeat/module/redis/_meta/kibana/visualization/Redis-Keyspaces.json rename to metricbeat/module/redis/_meta/kibana/5.x/visualization/Redis-Keyspaces.json diff --git a/metricbeat/module/redis/_meta/kibana/visualization/Redis-Server-Versions.json b/metricbeat/module/redis/_meta/kibana/5.x/visualization/Redis-Server-Versions.json similarity index 100% rename from metricbeat/module/redis/_meta/kibana/visualization/Redis-Server-Versions.json rename to metricbeat/module/redis/_meta/kibana/5.x/visualization/Redis-Server-Versions.json diff --git a/metricbeat/module/redis/_meta/kibana/visualization/Redis-hosts.json b/metricbeat/module/redis/_meta/kibana/5.x/visualization/Redis-hosts.json similarity index 100% rename from metricbeat/module/redis/_meta/kibana/visualization/Redis-hosts.json rename to metricbeat/module/redis/_meta/kibana/5.x/visualization/Redis-hosts.json diff --git a/metricbeat/module/redis/_meta/kibana/visualization/Redis-multiplexing-API.json b/metricbeat/module/redis/_meta/kibana/5.x/visualization/Redis-multiplexing-API.json similarity index 100% rename from metricbeat/module/redis/_meta/kibana/visualization/Redis-multiplexing-API.json rename to metricbeat/module/redis/_meta/kibana/5.x/visualization/Redis-multiplexing-API.json diff --git a/metricbeat/module/redis/_meta/kibana/visualization/Redis-server-mode.json b/metricbeat/module/redis/_meta/kibana/5.x/visualization/Redis-server-mode.json similarity index 100% rename from metricbeat/module/redis/_meta/kibana/visualization/Redis-server-mode.json rename to metricbeat/module/redis/_meta/kibana/5.x/visualization/Redis-server-mode.json diff --git a/metricbeat/module/redis/_meta/kibana/default/dashboard/Metricbeat-redis.json b/metricbeat/module/redis/_meta/kibana/default/dashboard/Metricbeat-redis.json new file mode 100644 index 00000000000..5511a3ecac3 --- /dev/null +++ b/metricbeat/module/redis/_meta/kibana/default/dashboard/Metricbeat-redis.json @@ -0,0 +1,138 @@ +{ + "objects": [ + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Metricbeat-Redis", + "title": "Redis Clients Metrics", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Redis Clients Metrics\",\"type\":\"metric\",\"params\":{\"handleNoResults\":true,\"fontSize\":60},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"redis.info.clients.connected\",\"customLabel\":\"Connected clients\"}}],\"listeners\":{}}" + }, + "id": "Redis-Clients-Metrics", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Metricbeat-Redis", + "title": "Redis Connected clients", + "uiStateJSON": "{\"vis\":{\"colors\":{\"Blocked\":\"#C15C17\"}}}", + "version": 1, + "visState": "{\"title\":\"Redis Connected clients\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"grouped\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"redis.info.clients.connected\",\"customLabel\":\"Connected\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"redis.info.clients.blocked\",\"customLabel\":\"Blocked\"}}],\"listeners\":{}}" + }, + "id": "Redis-Connected-clients", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Metricbeat-Redis", + "title": "Redis hosts", + "uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}", + "version": 1, + "visState": "{\"title\":\"Redis hosts\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"metricset.host\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"redis.info.server.uptime\",\"customLabel\":\"Uptime (s)\"}},{\"id\":\"6\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"redis.info.server.process_id\",\"customLabel\":\"PID\"}},{\"id\":\"1\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"redis.info.memory.used.peak\",\"customLabel\":\"Memory\"}},{\"id\":\"4\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"redis.info.cpu.used.user\",\"customLabel\":\"CPU used (user)\"}},{\"id\":\"5\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"redis.info.cpu.used.sys\",\"customLabel\":\"CPU used (system)\"}}],\"listeners\":{}}" + }, + "id": "Redis-hosts", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Metricbeat-Redis", + "title": "Redis Server Versions", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Redis Server Versions\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"metricset.host\",\"customLabel\":\"Hosts\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"redis.info.server.version\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Multiplexing API\"}}],\"listeners\":{}}" + }, + "id": "Redis-Server-Versions", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Metricbeat-Redis", + "title": "Redis server mode", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Redis server mode\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"metricset.host\",\"customLabel\":\"Hosts\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"redis.info.server.mode\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Server mode\"}}],\"listeners\":{}}" + }, + "id": "Redis-server-mode", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Metricbeat-Redis", + "title": "Redis multiplexing API", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Redis multiplexing API\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"metricset.host\",\"customLabel\":\"Hosts\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"redis.info.server.multiplexing_api\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Multiplexing API\"}}],\"listeners\":{}}" + }, + "id": "Redis-multiplexing-API", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[]}" + }, + "savedSearchId": "Metricbeat-Redis", + "title": "Redis Keyspaces", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Redis Keyspaces\",\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"smoothLines\":false,\"scale\":\"linear\",\"interpolate\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"redis.keyspace.keys\",\"customLabel\":\"Number of keys\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"redis.keyspace.id\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Keyspaces\"}}],\"listeners\":{}}" + }, + "id": "Redis-Keyspaces", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "columns": [ + "_source" + ], + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"metricbeat-*\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query_string\":{\"query\":\"metricset.module:redis\",\"analyze_wildcard\":true}}}" + }, + "sort": [ + "@timestamp", + "desc" + ], + "title": "Metricbeat Redis", + "version": 1 + }, + "id": "Metricbeat-Redis", + "type": "search", + "version": 7 + } + ], + "version": "6.0.0-alpha3-SNAPSHOT" +} \ No newline at end of file diff --git a/metricbeat/module/system/_meta/kibana/dashboard/79ffd6e0-faa0-11e6-947f-177f697178b8.json b/metricbeat/module/system/_meta/kibana/5.x/dashboard/79ffd6e0-faa0-11e6-947f-177f697178b8.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/dashboard/79ffd6e0-faa0-11e6-947f-177f697178b8.json rename to metricbeat/module/system/_meta/kibana/5.x/dashboard/79ffd6e0-faa0-11e6-947f-177f697178b8.json diff --git a/metricbeat/module/system/_meta/kibana/dashboard/CPU-slash-Memory-per-container.json b/metricbeat/module/system/_meta/kibana/5.x/dashboard/CPU-slash-Memory-per-container.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/dashboard/CPU-slash-Memory-per-container.json rename to metricbeat/module/system/_meta/kibana/5.x/dashboard/CPU-slash-Memory-per-container.json diff --git a/metricbeat/module/system/_meta/kibana/dashboard/Metricbeat-cpu.json b/metricbeat/module/system/_meta/kibana/5.x/dashboard/Metricbeat-cpu.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/dashboard/Metricbeat-cpu.json rename to metricbeat/module/system/_meta/kibana/5.x/dashboard/Metricbeat-cpu.json diff --git a/metricbeat/module/system/_meta/kibana/dashboard/Metricbeat-filesystem-per-Host.json b/metricbeat/module/system/_meta/kibana/5.x/dashboard/Metricbeat-filesystem-per-Host.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/dashboard/Metricbeat-filesystem-per-Host.json rename to metricbeat/module/system/_meta/kibana/5.x/dashboard/Metricbeat-filesystem-per-Host.json diff --git a/metricbeat/module/system/_meta/kibana/dashboard/Metricbeat-filesystem.json b/metricbeat/module/system/_meta/kibana/5.x/dashboard/Metricbeat-filesystem.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/dashboard/Metricbeat-filesystem.json rename to metricbeat/module/system/_meta/kibana/5.x/dashboard/Metricbeat-filesystem.json diff --git a/metricbeat/module/system/_meta/kibana/dashboard/Metricbeat-memory.json b/metricbeat/module/system/_meta/kibana/5.x/dashboard/Metricbeat-memory.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/dashboard/Metricbeat-memory.json rename to metricbeat/module/system/_meta/kibana/5.x/dashboard/Metricbeat-memory.json diff --git a/metricbeat/module/system/_meta/kibana/dashboard/Metricbeat-network.json b/metricbeat/module/system/_meta/kibana/5.x/dashboard/Metricbeat-network.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/dashboard/Metricbeat-network.json rename to metricbeat/module/system/_meta/kibana/5.x/dashboard/Metricbeat-network.json diff --git a/metricbeat/module/system/_meta/kibana/dashboard/Metricbeat-overview.json b/metricbeat/module/system/_meta/kibana/5.x/dashboard/Metricbeat-overview.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/dashboard/Metricbeat-overview.json rename to metricbeat/module/system/_meta/kibana/5.x/dashboard/Metricbeat-overview.json diff --git a/metricbeat/module/system/_meta/kibana/dashboard/Metricbeat-processes.json b/metricbeat/module/system/_meta/kibana/5.x/dashboard/Metricbeat-processes.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/dashboard/Metricbeat-processes.json rename to metricbeat/module/system/_meta/kibana/5.x/dashboard/Metricbeat-processes.json diff --git a/metricbeat/module/system/_meta/kibana/dashboard/Metricbeat-system-overview.json b/metricbeat/module/system/_meta/kibana/5.x/dashboard/Metricbeat-system-overview.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/dashboard/Metricbeat-system-overview.json rename to metricbeat/module/system/_meta/kibana/5.x/dashboard/Metricbeat-system-overview.json diff --git a/metricbeat/module/system/_meta/kibana/dashboard/d1f1f9e0-1b1c-11e7-b09e-037021c4f8df.json b/metricbeat/module/system/_meta/kibana/5.x/dashboard/d1f1f9e0-1b1c-11e7-b09e-037021c4f8df.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/dashboard/d1f1f9e0-1b1c-11e7-b09e-037021c4f8df.json rename to metricbeat/module/system/_meta/kibana/5.x/dashboard/d1f1f9e0-1b1c-11e7-b09e-037021c4f8df.json diff --git a/metricbeat/module/system/_meta/kibana/search/Cpu-Load-stats.json b/metricbeat/module/system/_meta/kibana/5.x/search/Cpu-Load-stats.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/search/Cpu-Load-stats.json rename to metricbeat/module/system/_meta/kibana/5.x/search/Cpu-Load-stats.json diff --git a/metricbeat/module/system/_meta/kibana/search/Cpu-stats.json b/metricbeat/module/system/_meta/kibana/5.x/search/Cpu-stats.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/search/Cpu-stats.json rename to metricbeat/module/system/_meta/kibana/5.x/search/Cpu-stats.json diff --git a/metricbeat/module/system/_meta/kibana/search/Filesystem-stats.json b/metricbeat/module/system/_meta/kibana/5.x/search/Filesystem-stats.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/search/Filesystem-stats.json rename to metricbeat/module/system/_meta/kibana/5.x/search/Filesystem-stats.json diff --git a/metricbeat/module/system/_meta/kibana/search/Fsstats.json b/metricbeat/module/system/_meta/kibana/5.x/search/Fsstats.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/search/Fsstats.json rename to metricbeat/module/system/_meta/kibana/5.x/search/Fsstats.json diff --git a/metricbeat/module/system/_meta/kibana/search/Load-stats.json b/metricbeat/module/system/_meta/kibana/5.x/search/Load-stats.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/search/Load-stats.json rename to metricbeat/module/system/_meta/kibana/5.x/search/Load-stats.json diff --git a/metricbeat/module/system/_meta/kibana/search/Memory-stats.json b/metricbeat/module/system/_meta/kibana/5.x/search/Memory-stats.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/search/Memory-stats.json rename to metricbeat/module/system/_meta/kibana/5.x/search/Memory-stats.json diff --git a/metricbeat/module/system/_meta/kibana/search/Network-data.json b/metricbeat/module/system/_meta/kibana/5.x/search/Network-data.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/search/Network-data.json rename to metricbeat/module/system/_meta/kibana/5.x/search/Network-data.json diff --git a/metricbeat/module/system/_meta/kibana/search/Process-stats.json b/metricbeat/module/system/_meta/kibana/5.x/search/Process-stats.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/search/Process-stats.json rename to metricbeat/module/system/_meta/kibana/5.x/search/Process-stats.json diff --git a/metricbeat/module/system/_meta/kibana/search/System-stats.json b/metricbeat/module/system/_meta/kibana/5.x/search/System-stats.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/search/System-stats.json rename to metricbeat/module/system/_meta/kibana/5.x/search/System-stats.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/089b85d0-1b16-11e7-b09e-037021c4f8df.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/089b85d0-1b16-11e7-b09e-037021c4f8df.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/089b85d0-1b16-11e7-b09e-037021c4f8df.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/089b85d0-1b16-11e7-b09e-037021c4f8df.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/1aae9140-1b93-11e7-8ada-3df93aab833e.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/1aae9140-1b93-11e7-8ada-3df93aab833e.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/1aae9140-1b93-11e7-8ada-3df93aab833e.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/1aae9140-1b93-11e7-8ada-3df93aab833e.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/217025e0-2a69-11e7-99f0-399f2a11b723.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/217025e0-2a69-11e7-99f0-399f2a11b723.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/217025e0-2a69-11e7-99f0-399f2a11b723.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/217025e0-2a69-11e7-99f0-399f2a11b723.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/26732e20-1b91-11e7-bec4-a5e9ec5cab8b.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/26732e20-1b91-11e7-bec4-a5e9ec5cab8b.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/26732e20-1b91-11e7-bec4-a5e9ec5cab8b.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/26732e20-1b91-11e7-bec4-a5e9ec5cab8b.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/2e224660-1b19-11e7-b09e-037021c4f8df.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/2e224660-1b19-11e7-b09e-037021c4f8df.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/2e224660-1b19-11e7-b09e-037021c4f8df.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/2e224660-1b19-11e7-b09e-037021c4f8df.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/34f97ee0-1b96-11e7-8ada-3df93aab833e.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/34f97ee0-1b96-11e7-8ada-3df93aab833e.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/34f97ee0-1b96-11e7-8ada-3df93aab833e.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/34f97ee0-1b96-11e7-8ada-3df93aab833e.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/4d546850-1b15-11e7-b09e-037021c4f8df.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/4d546850-1b15-11e7-b09e-037021c4f8df.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/4d546850-1b15-11e7-b09e-037021c4f8df.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/4d546850-1b15-11e7-b09e-037021c4f8df.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/4e4bb1e0-1b1b-11e7-b09e-037021c4f8df.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/4e4bb1e0-1b1b-11e7-b09e-037021c4f8df.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/4e4bb1e0-1b1b-11e7-b09e-037021c4f8df.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/4e4bb1e0-1b1b-11e7-b09e-037021c4f8df.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/522ee670-1b92-11e7-bec4-a5e9ec5cab8b.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/522ee670-1b92-11e7-bec4-a5e9ec5cab8b.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/522ee670-1b92-11e7-bec4-a5e9ec5cab8b.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/522ee670-1b92-11e7-bec4-a5e9ec5cab8b.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/6b7b9a40-faa1-11e6-86b1-cd7735ff7e23.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/6b7b9a40-faa1-11e6-86b1-cd7735ff7e23.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/6b7b9a40-faa1-11e6-86b1-cd7735ff7e23.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/6b7b9a40-faa1-11e6-86b1-cd7735ff7e23.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/83e12df0-1b91-11e7-bec4-a5e9ec5cab8b.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/83e12df0-1b91-11e7-bec4-a5e9ec5cab8b.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/83e12df0-1b91-11e7-bec4-a5e9ec5cab8b.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/83e12df0-1b91-11e7-bec4-a5e9ec5cab8b.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/855899e0-1b1c-11e7-b09e-037021c4f8df.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/855899e0-1b1c-11e7-b09e-037021c4f8df.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/855899e0-1b1c-11e7-b09e-037021c4f8df.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/855899e0-1b1c-11e7-b09e-037021c4f8df.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/95490a10-1e23-11e7-958f-490b8dcb96d8.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/95490a10-1e23-11e7-958f-490b8dcb96d8.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/95490a10-1e23-11e7-958f-490b8dcb96d8.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/95490a10-1e23-11e7-958f-490b8dcb96d8.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Available-Memory.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Available-Memory.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Available-Memory.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Available-Memory.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/CPU-Usage.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/CPU-Usage.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/CPU-Usage.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/CPU-Usage.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/CPU-usage-over-time.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/CPU-usage-over-time.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/CPU-usage-over-time.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/CPU-usage-over-time.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/CPU-usage-per-process.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/CPU-usage-per-process.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/CPU-usage-per-process.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/CPU-usage-per-process.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Container-Block-IO.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Container-Block-IO.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Container-Block-IO.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Container-Block-IO.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Container-CPU-usage.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Container-CPU-usage.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Container-CPU-usage.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Container-CPU-usage.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Container-Memory-stats.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Container-Memory-stats.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Container-Memory-stats.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Container-Memory-stats.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Disk-space-distribution.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Disk-space-distribution.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Disk-space-distribution.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Disk-space-distribution.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Disk-space-overview.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Disk-space-overview.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Disk-space-overview.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Disk-space-overview.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Disk-space.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Disk-space.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Disk-space.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Disk-space.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Disk-utilization-over-time.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Disk-utilization-over-time.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Disk-utilization-over-time.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Disk-utilization-over-time.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Free-disk-space-over-days.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Free-disk-space-over-days.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Free-disk-space-over-days.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Free-disk-space-over-days.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/In-vs-Out-Network-Bytes.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/In-vs-Out-Network-Bytes.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/In-vs-Out-Network-Bytes.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/In-vs-Out-Network-Bytes.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Memory-usage-over-time.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Memory-usage-over-time.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Memory-usage-over-time.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Memory-usage-over-time.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Memory-usage-per-process.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Memory-usage-per-process.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Memory-usage-per-process.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Memory-usage-per-process.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Memory-usage.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Memory-usage.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Memory-usage.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Memory-usage.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Network-Bytes.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Network-Bytes.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Network-Bytes.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Network-Bytes.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Network-Packetloss.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Network-Packetloss.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Network-Packetloss.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Network-Packetloss.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Number-of-Pids.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Number-of-Pids.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Number-of-Pids.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Number-of-Pids.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Number-of-processes-over-time.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Number-of-processes-over-time.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Number-of-processes-over-time.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Number-of-processes-over-time.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Number-of-processes.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Number-of-processes.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Number-of-processes.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Number-of-processes.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Packet-loss-on-interfaces.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Packet-loss-on-interfaces.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Packet-loss-on-interfaces.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Packet-loss-on-interfaces.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Servers-overview.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Servers-overview.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Servers-overview.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Servers-overview.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Swap-usage-over-time.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Swap-usage-over-time.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Swap-usage-over-time.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Swap-usage-over-time.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Swap-usage.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Swap-usage.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Swap-usage.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Swap-usage.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/System-Load-over-time.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/System-Load-over-time.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/System-Load-over-time.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/System-Load-over-time.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/System-Navigation.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/System-Navigation.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/System-Navigation.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/System-Navigation.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/System-load.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/System-load.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/System-load.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/System-load.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/System-overview-by-host.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/System-overview-by-host.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/System-overview-by-host.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/System-overview-by-host.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Top-10-interfaces.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Top-10-interfaces.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Top-10-interfaces.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Top-10-interfaces.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Top-disks-by-memory-usage.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Top-disks-by-memory-usage.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Top-disks-by-memory-usage.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Top-disks-by-memory-usage.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Top-hosts-by-CPU-usage.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Top-hosts-by-CPU-usage.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Top-hosts-by-CPU-usage.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Top-hosts-by-CPU-usage.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Top-hosts-by-disk-size.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Top-hosts-by-disk-size.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Top-hosts-by-disk-size.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Top-hosts-by-disk-size.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Top-hosts-by-memory-usage.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Top-hosts-by-memory-usage.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Top-hosts-by-memory-usage.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Top-hosts-by-memory-usage.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Top-processes-by-CPU-usage.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Top-processes-by-CPU-usage.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Top-processes-by-CPU-usage.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Top-processes-by-CPU-usage.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Top-processes-by-memory-usage.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Top-processes-by-memory-usage.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Top-processes-by-memory-usage.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Top-processes-by-memory-usage.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Total-Memory.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Total-Memory.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Total-Memory.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Total-Memory.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/Total-files-over-days.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/Total-files-over-days.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/Total-files-over-days.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/Total-files-over-days.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/aa984970-1e0b-11e7-852e-cdcfcfdffddd.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/aa984970-1e0b-11e7-852e-cdcfcfdffddd.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/aa984970-1e0b-11e7-852e-cdcfcfdffddd.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/aa984970-1e0b-11e7-852e-cdcfcfdffddd.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/ab2d1e90-1b1a-11e7-b09e-037021c4f8df.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/ab2d1e90-1b1a-11e7-b09e-037021c4f8df.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/ab2d1e90-1b1a-11e7-b09e-037021c4f8df.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/ab2d1e90-1b1a-11e7-b09e-037021c4f8df.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/bfa5e400-1b16-11e7-b09e-037021c4f8df.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/bfa5e400-1b16-11e7-b09e-037021c4f8df.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/bfa5e400-1b16-11e7-b09e-037021c4f8df.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/bfa5e400-1b16-11e7-b09e-037021c4f8df.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/d3166e80-1b91-11e7-bec4-a5e9ec5cab8b.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/d3166e80-1b91-11e7-bec4-a5e9ec5cab8b.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/d3166e80-1b91-11e7-bec4-a5e9ec5cab8b.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/d3166e80-1b91-11e7-bec4-a5e9ec5cab8b.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/e0f001c0-1b18-11e7-b09e-037021c4f8df.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/e0f001c0-1b18-11e7-b09e-037021c4f8df.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/e0f001c0-1b18-11e7-b09e-037021c4f8df.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/e0f001c0-1b18-11e7-b09e-037021c4f8df.json diff --git a/metricbeat/module/system/_meta/kibana/visualization/fe064790-1b1f-11e7-bec4-a5e9ec5cab8b.json b/metricbeat/module/system/_meta/kibana/5.x/visualization/fe064790-1b1f-11e7-bec4-a5e9ec5cab8b.json similarity index 100% rename from metricbeat/module/system/_meta/kibana/visualization/fe064790-1b1f-11e7-bec4-a5e9ec5cab8b.json rename to metricbeat/module/system/_meta/kibana/5.x/visualization/fe064790-1b1f-11e7-bec4-a5e9ec5cab8b.json diff --git a/metricbeat/module/system/_meta/kibana/6.x/dashboard/Metricbeat-system.json b/metricbeat/module/system/_meta/kibana/6.x/dashboard/Metricbeat-system.json new file mode 100644 index 00000000000..f6c17594ae5 --- /dev/null +++ b/metricbeat/module/system/_meta/kibana/6.x/dashboard/Metricbeat-system.json @@ -0,0 +1,531 @@ +{ + "objects": [ + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[{\"meta\":{\"index\":\"metricbeat-*\",\"key\":\"beat.name\",\"value\":\"mar.local\",\"disabled\":false,\"negate\":false,\"alias\":null,\"type\":\"phrase\"},\"query\":{\"match\":{\"beat.name\":{\"query\":\"mar.local\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}}]}" + }, + "title": "System Navigation", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"System Navigation\",\"type\":\"markdown\",\"params\":{\"markdown\":\"| [System Overview](#/dashboard/Metricbeat-system-overview) | [Host Overview (requires Kibana \u003e 5.4)](#/dashboard/79ffd6e0-faa0-11e6-947f-177f697178b8) | [ Docker container overview](#/dashboard/CPU-slash-Memory-per-container) |\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "System-Navigation", + "type": "visualization", + "version": 114 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"metricbeat-*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Number of hosts", + "uiStateJSON": "{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}}", + "version": 1, + "visState": "{\"title\":\"Number of hosts\",\"type\":\"metric\",\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"gauge\",\"gauge\":{\"verticalSplit\":false,\"autoExtend\":false,\"percentageMode\":false,\"gaugeType\":\"Metric\",\"gaugeStyle\":\"Full\",\"backStyle\":\"Full\",\"orientation\":\"vertical\",\"colorSchema\":\"Green to Red\",\"gaugeColorMode\":\"None\",\"useRange\":false,\"colorsRange\":[{\"from\":0,\"to\":100}],\"invertColors\":false,\"labels\":{\"show\":false,\"color\":\"black\"},\"scale\":{\"show\":false,\"labels\":false,\"color\":\"#333\",\"width\":2},\"type\":\"simple\",\"style\":{\"fontSize\":\"63\",\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\"}}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"beat.hostname\",\"customLabel\":\"Number of hosts\"}}],\"listeners\":{}}" + }, + "id": "c6f2ffd0-4d17-11e7-a196-69b9a7a020a9", + "type": "visualization", + "version": 5 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Top Hosts By Memory (Realtime)", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Top Hosts By Memory (Realtime)\",\"type\":\"metrics\",\"params\":{\"id\":\"31e5afa0-1b1c-11e7-b09e-037021c4f8df\",\"type\":\"top_n\",\"series\":[{\"id\":\"31e5afa1-1b1c-11e7-b09e-037021c4f8df\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"31e5afa2-1b1c-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.memory.actual.used.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"beat.hostname\",\"terms_order_by\":\"31e5afa2-1b1c-11e7-b09e-037021c4f8df\",\"terms_size\":\"10\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"bar_color_rules\":[{\"value\":0,\"id\":\"33349dd0-1b1c-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(104,188,0,1)\",\"opperator\":\"gte\"},{\"value\":0.6,\"id\":\"997dc440-1b1c-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(254,146,0,1)\",\"opperator\":\"gte\"},{\"value\":0.85,\"id\":\"a10d7f20-1b1c-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(211,49,21,1)\",\"opperator\":\"gte\"}],\"drilldown_url\":\"../app/kibana#/dashboard/79ffd6e0-faa0-11e6-947f-177f697178b8?_a=(query:(query_string:(analyze_wildcard:!t,query:'beat.hostname:\\\"{{key}}\\\"')))\",\"filter\":\"\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "fe064790-1b1f-11e7-bec4-a5e9ec5cab8b", + "type": "visualization", + "version": 17 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Top Hosts By CPU (Realtime)", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Top Hosts By CPU (Realtime)\",\"type\":\"metrics\",\"params\":{\"id\":\"31e5afa0-1b1c-11e7-b09e-037021c4f8df\",\"type\":\"top_n\",\"series\":[{\"id\":\"31e5afa1-1b1c-11e7-b09e-037021c4f8df\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"31e5afa2-1b1c-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.cpu.user.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"beat.hostname\",\"terms_order_by\":\"31e5afa2-1b1c-11e7-b09e-037021c4f8df\",\"terms_size\":\"10\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"bar_color_rules\":[{\"value\":0,\"id\":\"33349dd0-1b1c-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(104,188,0,1)\",\"opperator\":\"gte\"},{\"value\":0.6,\"id\":\"997dc440-1b1c-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(254,146,0,1)\",\"opperator\":\"gte\"},{\"value\":0.85,\"id\":\"a10d7f20-1b1c-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(211,49,21,1)\",\"opperator\":\"gte\"}],\"drilldown_url\":\"../app/kibana#/dashboard/79ffd6e0-faa0-11e6-947f-177f697178b8?_a=(query:(query_string:(analyze_wildcard:!t,query:'beat.hostname:\\\"{{key}}\\\"')))\",\"filter\":\"\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "855899e0-1b1c-11e7-b09e-037021c4f8df", + "type": "visualization", + "version": 17 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"metricbeat-*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Hosts histogram by CPU usage", + "uiStateJSON": "{\"vis\":{\"defaultColors\":{\"0% - 5%\":\"rgb(247,252,245)\",\"5% - 10%\":\"rgb(199,233,192)\",\"10% - 15%\":\"rgb(116,196,118)\",\"15% - 20%\":\"rgb(35,139,69)\"}}}", + "version": 1, + "visState": "{\"title\":\"Hosts histogram by CPU usage\",\"type\":\"heatmap\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"enableHover\":false,\"legendPosition\":\"right\",\"times\":[],\"colorsNumber\":4,\"colorSchema\":\"Greens\",\"setColorRange\":false,\"colorsRange\":[],\"invertColors\":false,\"percentageMode\":false,\"valueAxes\":[{\"show\":false,\"id\":\"ValueAxis-1\",\"type\":\"value\",\"scale\":{\"type\":\"linear\",\"defaultYExtents\":false},\"labels\":{\"show\":false,\"rotate\":0,\"color\":\"#555\"}}]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.cpu.user.pct\",\"customLabel\":\"CPU usage\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"beat.hostname\",\"size\":20,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Hosts\"}}],\"listeners\":{}}" + }, + "id": "7cdb1330-4d1a-11e7-a196-69b9a7a020a9", + "type": "visualization", + "version": 2 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Inbound Traffic Metric", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Inbound Traffic Metric\",\"type\":\"metrics\",\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"background_color_rules\":[{\"id\":\"0e346760-1b92-11e7-bec4-a5e9ec5cab8b\"}],\"filter\":\"-system.network.name:l*\",\"id\":\"0c761590-1b92-11e7-bec4-a5e9ec5cab8b\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"bytes\",\"id\":\"0c761591-1b92-11e7-bec4-a5e9ec5cab8b\",\"label\":\"Inbound Traffic\",\"line_width\":1,\"metrics\":[{\"field\":\"system.network.in.bytes\",\"id\":\"0c761592-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"max\"},{\"field\":\"0c761592-1b92-11e7-bec4-a5e9ec5cab8b\",\"id\":\"1d659060-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"derivative\",\"unit\":\"1s\"},{\"field\":\"1d659060-1b92-11e7-bec4-a5e9ec5cab8b\",\"id\":\"f2074f70-1b92-11e7-a416-41f5ccdba2e6\",\"type\":\"positive_only\",\"unit\":\"\"},{\"id\":\"c40e18f0-2c55-11e7-a0ad-277ce466684d\",\"type\":\"series_agg\",\"function\":\"sum\"}],\"point_size\":1,\"seperate_axis\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"value_template\":\"{{value}}/s\",\"terms_field\":\"system.network.name\"},{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"bytes\",\"id\":\"37f70440-1b92-11e7-bec4-a5e9ec5cab8b\",\"label\":\"Total Transfered\",\"line_width\":1,\"metrics\":[{\"field\":\"system.network.in.bytes\",\"id\":\"37f72b50-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"max\"},{\"field\":\"37f72b50-1b92-11e7-bec4-a5e9ec5cab8b\",\"id\":\"37f72b51-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"derivative\",\"unit\":\"\"},{\"unit\":\"\",\"id\":\"f9da2dd0-1b92-11e7-a416-41f5ccdba2e6\",\"type\":\"positive_only\",\"field\":\"37f72b51-1b92-11e7-bec4-a5e9ec5cab8b\"},{\"sigma\":\"\",\"field\":\"f9da2dd0-1b92-11e7-a416-41f5ccdba2e6\",\"id\":\"3e63c2f0-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"series_agg\",\"function\":\"overall_sum\"}],\"point_size\":1,\"seperate_axis\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"value_template\":\"{{value}}\",\"terms_field\":\"system.network.name\"}],\"show_legend\":1,\"time_field\":\"@timestamp\",\"type\":\"metric\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "522ee670-1b92-11e7-bec4-a5e9ec5cab8b", + "type": "visualization", + "version": 17 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Outbound Traffic Metric", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Outbound Traffic Metric\",\"type\":\"metrics\",\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"background_color_rules\":[{\"id\":\"0e346760-1b92-11e7-bec4-a5e9ec5cab8b\"}],\"filter\":\"-system.network.name:l*\",\"id\":\"0c761590-1b92-11e7-bec4-a5e9ec5cab8b\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"bytes\",\"id\":\"0c761591-1b92-11e7-bec4-a5e9ec5cab8b\",\"label\":\"Outbound Traffic\",\"line_width\":1,\"metrics\":[{\"field\":\"system.network.out.bytes\",\"id\":\"0c761592-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"max\"},{\"field\":\"0c761592-1b92-11e7-bec4-a5e9ec5cab8b\",\"id\":\"1d659060-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"derivative\",\"unit\":\"1s\"},{\"field\":\"1d659060-1b92-11e7-bec4-a5e9ec5cab8b\",\"id\":\"f2074f70-1b92-11e7-a416-41f5ccdba2e6\",\"type\":\"positive_only\",\"unit\":\"\"},{\"id\":\"a1737470-2c55-11e7-a0ad-277ce466684d\",\"type\":\"series_agg\",\"function\":\"sum\"}],\"point_size\":1,\"seperate_axis\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"value_template\":\"{{value}}/s\",\"terms_field\":\"system.network.name\"},{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"bytes\",\"id\":\"37f70440-1b92-11e7-bec4-a5e9ec5cab8b\",\"label\":\"Total Transfered\",\"line_width\":1,\"metrics\":[{\"field\":\"system.network.out.bytes\",\"id\":\"37f72b50-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"max\"},{\"field\":\"37f72b50-1b92-11e7-bec4-a5e9ec5cab8b\",\"id\":\"37f72b51-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"derivative\",\"unit\":\"\"},{\"unit\":\"\",\"id\":\"f9da2dd0-1b92-11e7-a416-41f5ccdba2e6\",\"type\":\"positive_only\",\"field\":\"37f72b51-1b92-11e7-bec4-a5e9ec5cab8b\"},{\"sigma\":\"\",\"field\":\"f9da2dd0-1b92-11e7-a416-41f5ccdba2e6\",\"id\":\"3e63c2f0-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"series_agg\",\"function\":\"overall_sum\"}],\"point_size\":1,\"seperate_axis\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"value_template\":\"{{value}}\",\"terms_field\":\"system.network.name\"}],\"show_legend\":1,\"time_field\":\"@timestamp\",\"type\":\"metric\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "1aae9140-1b93-11e7-8ada-3df93aab833e", + "type": "visualization", + "version": 17 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Disk used", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Disk used\",\"type\":\"metrics\",\"params\":{\"id\":\"4e4dc780-4d1d-11e7-b5f2-2b7c1895bf32\",\"type\":\"gauge\",\"series\":[{\"id\":\"4e4dee90-4d1d-11e7-b5f2-2b7c1895bf32\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"4e4dee91-4d1d-11e7-b5f2-2b7c1895bf32\",\"type\":\"avg\",\"field\":\"system.fsstat.total_size.used\"},{\"id\":\"57c96ee0-4d54-11e7-b5f2-2b7c1895bf32\",\"type\":\"avg\",\"field\":\"system.fsstat.total_size.total\"},{\"script\":\"params.total != null \u0026\u0026 params.total \u003e 0 ? params.used/params.total : null\",\"id\":\"6304cca0-4d54-11e7-b5f2-2b7c1895bf32\",\"type\":\"calculation\",\"variables\":[{\"id\":\"6da10430-4d54-11e7-b5f2-2b7c1895bf32\",\"field\":\"4e4dee91-4d1d-11e7-b5f2-2b7c1895bf32\",\"name\":\"used\"},{\"id\":\"73b8c510-4d54-11e7-b5f2-2b7c1895bf32\",\"name\":\"total\",\"field\":\"57c96ee0-4d54-11e7-b5f2-2b7c1895bf32\"}]}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Disk used\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"gauge_color_rules\":[{\"value\":0,\"id\":\"51921d10-4d1d-11e7-b5f2-2b7c1895bf32\",\"gauge\":\"rgba(104,188,0,1)\",\"opperator\":\"gte\"},{\"value\":0.7,\"id\":\"f26de750-4d54-11e7-b5f2-2b7c1895bf32\",\"gauge\":\"rgba(251,158,0,1)\",\"opperator\":\"gte\"},{\"value\":0.85,\"id\":\"fa31d190-4d54-11e7-b5f2-2b7c1895bf32\",\"gauge\":\"rgba(211,49,21,1)\",\"opperator\":\"gte\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"gauge_max\":\"1\",\"filter\":\"\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "825fdb80-4d1d-11e7-b5f2-2b7c1895bf32", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Memory Usage Gauge", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Memory Usage Gauge\",\"type\":\"metrics\",\"params\":{\"id\":\"9f51b730-1b91-11e7-bec4-a5e9ec5cab8b\",\"type\":\"gauge\",\"series\":[{\"id\":\"9f51b731-1b91-11e7-bec4-a5e9ec5cab8b\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"9f51b732-1b91-11e7-bec4-a5e9ec5cab8b\",\"type\":\"avg\",\"field\":\"system.memory.actual.used.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Memory Usage\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"gauge_color_rules\":[{\"value\":0,\"id\":\"a0d522e0-1b91-11e7-bec4-a5e9ec5cab8b\",\"gauge\":\"rgba(104,188,0,1)\",\"opperator\":\"gte\"},{\"value\":0.7,\"id\":\"b45ad8f0-1b91-11e7-bec4-a5e9ec5cab8b\",\"gauge\":\"rgba(254,146,0,1)\",\"opperator\":\"gte\"},{\"value\":0.85,\"id\":\"c06e9550-1b91-11e7-bec4-a5e9ec5cab8b\",\"gauge\":\"rgba(211,49,21,1)\",\"opperator\":\"gte\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"gauge_max\":\"1\",\"filter\":\"\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "d3166e80-1b91-11e7-bec4-a5e9ec5cab8b", + "type": "visualization", + "version": 17 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: CPU Usage Gauge", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: CPU Usage Gauge\",\"type\":\"metrics\",\"params\":{\"id\":\"4c9e2550-1b91-11e7-bec4-a5e9ec5cab8b\",\"type\":\"gauge\",\"series\":[{\"id\":\"4c9e2551-1b91-11e7-bec4-a5e9ec5cab8b\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"4c9e2552-1b91-11e7-bec4-a5e9ec5cab8b\",\"type\":\"avg\",\"field\":\"system.cpu.idle.pct\"},{\"script\":\"params.idle \u003e 0 ? 1 - params.idle : null\",\"id\":\"587aa510-1b91-11e7-bec4-a5e9ec5cab8b\",\"type\":\"calculation\",\"variables\":[{\"id\":\"5a19af10-1b91-11e7-bec4-a5e9ec5cab8b\",\"name\":\"idle\",\"field\":\"4c9e2552-1b91-11e7-bec4-a5e9ec5cab8b\"}]}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"CPU Usage\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"gauge_color_rules\":[{\"value\":0,\"id\":\"4ef2c3b0-1b91-11e7-bec4-a5e9ec5cab8b\",\"gauge\":\"rgba(104,188,0,1)\",\"opperator\":\"gte\"},{\"value\":0.7,\"id\":\"e6561ae0-1b91-11e7-bec4-a5e9ec5cab8b\",\"gauge\":\"rgba(254,146,0,1)\",\"opperator\":\"gte\"},{\"value\":0.85,\"id\":\"ec655040-1b91-11e7-bec4-a5e9ec5cab8b\",\"gauge\":\"rgba(211,49,21,1)\",\"opperator\":\"gte\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"gauge_max\":\"1\",\"filter\":\"\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "83e12df0-1b91-11e7-bec4-a5e9ec5cab8b", + "type": "visualization", + "version": 17 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Tip System overview", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Tip System overview\",\"type\":\"metrics\",\"params\":{\"id\":\"0a46a600-4d64-11e7-aa29-87a97a796de6\",\"type\":\"markdown\",\"series\":[{\"id\":\"0a46cd10-4d64-11e7-aa29-87a97a796de6\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"0a46cd11-4d64-11e7-aa29-87a97a796de6\",\"type\":\"count\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"markdown\":\"**Tip:** Click on any of the hosts from the Top Hosts By CPU or Top Hosts by Memory to view more details about the host.\",\"background_color\":\"rgba(252,220,0,1)\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "e9d22060-4d64-11e7-aa29-87a97a796de6", + "type": "visualization", + "version": 4 + }, + { + "attributes": { + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}" + }, + "optionsJSON": "{\"darkTheme\":false}", + "panelsJSON": "[{\"col\":1,\"id\":\"System-Navigation\",\"panelIndex\":9,\"row\":1,\"size_x\":8,\"size_y\":1,\"type\":\"visualization\"},{\"col\":1,\"id\":\"c6f2ffd0-4d17-11e7-a196-69b9a7a020a9\",\"panelIndex\":11,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"fe064790-1b1f-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":12,\"row\":4,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"855899e0-1b1c-11e7-b09e-037021c4f8df\",\"panelIndex\":13,\"row\":4,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"7cdb1330-4d1a-11e7-a196-69b9a7a020a9\",\"panelIndex\":14,\"row\":9,\"size_x\":12,\"size_y\":6,\"type\":\"visualization\"},{\"col\":9,\"id\":\"522ee670-1b92-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":16,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":11,\"id\":\"1aae9140-1b93-11e7-8ada-3df93aab833e\",\"panelIndex\":17,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"825fdb80-4d1d-11e7-b5f2-2b7c1895bf32\",\"panelIndex\":18,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":5,\"id\":\"d3166e80-1b91-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":19,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":3,\"id\":\"83e12df0-1b91-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":20,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":9,\"id\":\"e9d22060-4d64-11e7-aa29-87a97a796de6\",\"panelIndex\":21,\"row\":1,\"size_x\":4,\"size_y\":1,\"type\":\"visualization\"}]", + "timeRestore": false, + "title": "Metricbeat system overview", + "uiStateJSON": "{\"P-11\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-12\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-14\":{\"vis\":{\"defaultColors\":{\"0% - 8.75%\":\"rgb(247,252,245)\",\"8.75% - 17.5%\":\"rgb(199,233,192)\",\"17.5% - 26.25%\":\"rgb(116,196,118)\",\"26.25% - 35%\":\"rgb(35,139,69)\"}}},\"P-16\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-2\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-3\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}}}", + "version": 1 + }, + "id": "Metricbeat-system-overview", + "type": "dashboard", + "version": 30 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Mericbeat: Network Traffic (Packets)", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Mericbeat: Network Traffic (Packets)\",\"type\":\"metrics\",\"params\":{\"id\":\"da1046f0-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"timeseries\",\"series\":[{\"id\":\"da1046f1-faa0-11e6-86b1-cd7735ff7e23\",\"color\":\"rgba(0,156,224,1)\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"da1046f2-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"max\",\"field\":\"system.network.in.packets\"},{\"unit\":\"1s\",\"id\":\"f41f9280-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"derivative\",\"field\":\"da1046f2-faa0-11e6-86b1-cd7735ff7e23\"},{\"unit\":\"\",\"id\":\"c0da3d80-1b93-11e7-8ada-3df93aab833e\",\"type\":\"positive_only\",\"field\":\"f41f9280-faa0-11e6-86b1-cd7735ff7e23\"},{\"id\":\"ecaad010-2c2c-11e7-be71-3162da85303f\",\"type\":\"series_agg\",\"function\":\"sum\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"0.[00]a\",\"chart_type\":\"line\",\"line_width\":\"0\",\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"none\",\"label\":\"Inbound\",\"value_template\":\"{{value}}/s\",\"terms_field\":\"system.network.name\"},{\"id\":\"fbbd5720-faa0-11e6-86b1-cd7735ff7e23\",\"color\":\"rgba(250,40,255,1)\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"fbbd7e30-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"max\",\"field\":\"system.network.out.packets\"},{\"unit\":\"1s\",\"id\":\"fbbd7e31-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"derivative\",\"field\":\"fbbd7e30-faa0-11e6-86b1-cd7735ff7e23\"},{\"script\":\"params.rate != null \u0026\u0026 params.rate \u003e 0 ? params.rate * -1 : null\",\"id\":\"17e597a0-faa1-11e6-86b1-cd7735ff7e23\",\"type\":\"calculation\",\"variables\":[{\"id\":\"1940bad0-faa1-11e6-86b1-cd7735ff7e23\",\"name\":\"rate\",\"field\":\"fbbd7e31-faa0-11e6-86b1-cd7735ff7e23\"}]},{\"id\":\"fe5fbdc0-2c2c-11e7-be71-3162da85303f\",\"type\":\"series_agg\",\"function\":\"sum\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"0.[00]a\",\"chart_type\":\"line\",\"line_width\":\"0\",\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"none\",\"label\":\"Outbound\",\"value_template\":\"{{value}}/s\",\"terms_field\":\"system.network.name\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"filter\":\"-system.network.name:l*\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "6b7b9a40-faa1-11e6-86b1-cd7735ff7e23", + "type": "visualization", + "version": 17 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: System Load", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: System Load\",\"type\":\"metrics\",\"params\":{\"id\":\"f6264ad0-1b14-11e7-b09e-037021c4f8df\",\"type\":\"timeseries\",\"series\":[{\"id\":\"f62671e0-1b14-11e7-b09e-037021c4f8df\",\"color\":\"rgba(115,216,255,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"f62671e1-1b14-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.load.1\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":\"3\",\"point_size\":1,\"fill\":\"0\",\"stacked\":\"none\",\"label\":\"1m\"},{\"id\":\"1c324850-1b15-11e7-b09e-037021c4f8df\",\"color\":\"rgba(0,156,224,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"1c324851-1b15-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.load.5\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":\"3\",\"point_size\":\"0\",\"fill\":\"0\",\"stacked\":\"none\",\"label\":\"5m\"},{\"id\":\"3287e740-1b15-11e7-b09e-037021c4f8df\",\"color\":\"rgba(0,98,177,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"32880e50-1b15-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.load.15\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":\"3\",\"point_size\":\"0\",\"fill\":\"0\",\"stacked\":\"none\",\"label\":\"15m\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1},\"aggs\":[],\"listeners\":{}}" + }, + "id": "4d546850-1b15-11e7-b09e-037021c4f8df", + "type": "visualization", + "version": 17 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Mericbeat: Network Traffic (Bytes)", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Mericbeat: Network Traffic (Bytes)\",\"type\":\"metrics\",\"params\":{\"id\":\"da1046f0-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"timeseries\",\"series\":[{\"id\":\"da1046f1-faa0-11e6-86b1-cd7735ff7e23\",\"color\":\"rgba(0,156,224,1)\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"da1046f2-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"max\",\"field\":\"system.network.in.bytes\"},{\"unit\":\"1s\",\"id\":\"f41f9280-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"derivative\",\"field\":\"da1046f2-faa0-11e6-86b1-cd7735ff7e23\"},{\"unit\":\"\",\"id\":\"a87398e0-1b93-11e7-8ada-3df93aab833e\",\"type\":\"positive_only\",\"field\":\"f41f9280-faa0-11e6-86b1-cd7735ff7e23\"},{\"id\":\"2d533df0-2c2d-11e7-be71-3162da85303f\",\"type\":\"series_agg\",\"function\":\"sum\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":\"0\",\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"none\",\"label\":\"Inbound \",\"value_template\":\"{{value}}/s\",\"terms_field\":\"system.network.name\"},{\"id\":\"fbbd5720-faa0-11e6-86b1-cd7735ff7e23\",\"color\":\"rgba(250,40,255,1)\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"fbbd7e30-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"max\",\"field\":\"system.network.out.bytes\"},{\"unit\":\"1s\",\"id\":\"fbbd7e31-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"derivative\",\"field\":\"fbbd7e30-faa0-11e6-86b1-cd7735ff7e23\"},{\"script\":\"params.rate != null \u0026\u0026 params.rate \u003e 0 ? params.rate * -1 : null\",\"id\":\"17e597a0-faa1-11e6-86b1-cd7735ff7e23\",\"type\":\"calculation\",\"variables\":[{\"id\":\"1940bad0-faa1-11e6-86b1-cd7735ff7e23\",\"name\":\"rate\",\"field\":\"fbbd7e31-faa0-11e6-86b1-cd7735ff7e23\"}]},{\"id\":\"533da9b0-2c2d-11e7-be71-3162da85303f\",\"type\":\"series_agg\",\"function\":\"sum\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":\"0\",\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"none\",\"label\":\"Outbound \",\"value_template\":\"{{value}}/s\",\"terms_field\":\"system.network.name\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"filter\":\"-system.network.name:l*\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "089b85d0-1b16-11e7-b09e-037021c4f8df", + "type": "visualization", + "version": 17 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Memory Usage", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Memory Usage\",\"type\":\"metrics\",\"params\":{\"id\":\"32f46f40-1b16-11e7-b09e-037021c4f8df\",\"type\":\"timeseries\",\"series\":[{\"id\":\"4ff61fd0-1b16-11e7-b09e-037021c4f8df\",\"color\":\"rgba(211,49,21,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"4ff61fd1-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.memory.actual.used.bytes\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"stacked\",\"label\":\"Used\"},{\"id\":\"753a6080-1b16-11e7-b09e-037021c4f8df\",\"color\":\"rgba(0,156,224,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"753a6081-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.memory.actual.used.bytes\"},{\"id\":\"7c9d3f00-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.memory.used.bytes\"},{\"script\":\"params.actual != null \u0026\u0026 params.used != null ? params.used - params.actual : null\",\"id\":\"869cc160-1b16-11e7-b09e-037021c4f8df\",\"type\":\"calculation\",\"variables\":[{\"id\":\"890f9620-1b16-11e7-b09e-037021c4f8df\",\"name\":\"actual\",\"field\":\"753a6081-1b16-11e7-b09e-037021c4f8df\"},{\"id\":\"8f3ab7f0-1b16-11e7-b09e-037021c4f8df\",\"name\":\"used\",\"field\":\"7c9d3f00-1b16-11e7-b09e-037021c4f8df\"}]}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"stacked\",\"label\":\"Cache\"},{\"id\":\"32f46f41-1b16-11e7-b09e-037021c4f8df\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"32f46f42-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.memory.free\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"stacked\",\"label\":\"Free\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1},\"aggs\":[],\"listeners\":{}}" + }, + "id": "bfa5e400-1b16-11e7-b09e-037021c4f8df", + "type": "visualization", + "version": 17 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Top Processes By CPU", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Top Processes By CPU\",\"type\":\"metrics\",\"params\":{\"id\":\"5f5b8d50-1b18-11e7-b09e-037021c4f8df\",\"type\":\"top_n\",\"series\":[{\"id\":\"5f5b8d51-1b18-11e7-b09e-037021c4f8df\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"5f5b8d52-1b18-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.process.cpu.total.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"system.process.name\",\"terms_order_by\":\"5f5b8d52-1b18-11e7-b09e-037021c4f8df\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"bar_color_rules\":[{\"value\":0,\"id\":\"60e11be0-1b18-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(104,188,0,1)\",\"opperator\":\"gte\"}],\"drilldown_url\":\"\",\"filter\":\"\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "e0f001c0-1b18-11e7-b09e-037021c4f8df", + "type": "visualization", + "version": 17 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Processes By Memory", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Processes By Memory\",\"type\":\"metrics\",\"params\":{\"id\":\"edfceb30-1b18-11e7-b09e-037021c4f8df\",\"type\":\"top_n\",\"series\":[{\"id\":\"edfceb31-1b18-11e7-b09e-037021c4f8df\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"edfceb32-1b18-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.process.memory.rss.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"system.process.name\",\"terms_order_by\":\"edfceb32-1b18-11e7-b09e-037021c4f8df\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"bar_color_rules\":[{\"value\":0,\"id\":\"efb9b660-1b18-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(104,188,0,1)\",\"opperator\":\"gte\"},{\"value\":0.7,\"id\":\"17fcb820-1b19-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(254,146,0,1)\",\"opperator\":\"gte\"},{\"value\":0.85,\"id\":\"1dd61070-1b19-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(211,49,21,1)\",\"opperator\":\"gte\"}],\"drilldown_url\":\"\",\"filter\":\"\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "2e224660-1b19-11e7-b09e-037021c4f8df", + "type": "visualization", + "version": 17 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: CPU Usage", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: CPU Usage\",\"type\":\"metrics\",\"params\":{\"id\":\"80a04950-1b19-11e7-b09e-037021c4f8df\",\"type\":\"timeseries\",\"series\":[{\"id\":\"80a04951-1b19-11e7-b09e-037021c4f8df\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"80a04952-1b19-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.cpu.user.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"stacked\",\"label\":\"user\"},{\"id\":\"993acf30-1b19-11e7-b09e-037021c4f8df\",\"color\":\"rgba(211,49,21,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"993acf31-1b19-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.cpu.system.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"stacked\",\"label\":\"system\"},{\"id\":\"65ca35e0-1b1a-11e7-b09e-037021c4f8df\",\"color\":\"rgba(123,100,255,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"65ca5cf0-1b1a-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.cpu.nice.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"stacked\",\"label\":\"nice\"},{\"id\":\"741b5f20-1b1a-11e7-b09e-037021c4f8df\",\"color\":\"rgba(226,115,0,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"741b5f21-1b1a-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.cpu.irq.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"stacked\",\"label\":\"irq\"},{\"id\":\"2efc5d40-1b1a-11e7-b09e-037021c4f8df\",\"color\":\"rgba(176,188,0,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"2efc5d41-1b1a-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.cpu.softirq.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"stacked\",\"label\":\"softirq\"},{\"id\":\"ae644a30-1b19-11e7-b09e-037021c4f8df\",\"color\":\"rgba(15,20,25,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"ae644a31-1b19-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.cpu.iowait.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"stacked\",\"label\":\"iowait\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1},\"aggs\":[],\"listeners\":{}}" + }, + "id": "ab2d1e90-1b1a-11e7-b09e-037021c4f8df", + "type": "visualization", + "version": 17 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Disk IO (Bytes)", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Disk IO (Bytes)\",\"type\":\"metrics\",\"params\":{\"id\":\"d3c67db0-1b1a-11e7-b09e-037021c4f8df\",\"type\":\"timeseries\",\"series\":[{\"id\":\"d3c67db1-1b1a-11e7-b09e-037021c4f8df\",\"color\":\"rgba(22,165,165,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"d3c67db2-1b1a-11e7-b09e-037021c4f8df\",\"type\":\"max\",\"field\":\"system.diskio.read.bytes\"},{\"unit\":\"1s\",\"id\":\"f55b9910-1b1a-11e7-b09e-037021c4f8df\",\"type\":\"derivative\",\"field\":\"d3c67db2-1b1a-11e7-b09e-037021c4f8df\"},{\"unit\":\"\",\"id\":\"dcbbb100-1b93-11e7-8ada-3df93aab833e\",\"type\":\"positive_only\",\"field\":\"f55b9910-1b1a-11e7-b09e-037021c4f8df\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"none\",\"label\":\"reads\",\"value_template\":\"{{value}}/s\"},{\"id\":\"144124d0-1b1b-11e7-b09e-037021c4f8df\",\"color\":\"rgba(251,158,0,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"144124d1-1b1b-11e7-b09e-037021c4f8df\",\"type\":\"max\",\"field\":\"system.diskio.write.bytes\"},{\"unit\":\"1s\",\"id\":\"144124d2-1b1b-11e7-b09e-037021c4f8df\",\"type\":\"derivative\",\"field\":\"144124d1-1b1b-11e7-b09e-037021c4f8df\"},{\"script\":\"params.rate \u003e 0 ? params.rate * -1 : 0\",\"id\":\"144124d4-1b1b-11e7-b09e-037021c4f8df\",\"type\":\"calculation\",\"variables\":[{\"id\":\"144124d3-1b1b-11e7-b09e-037021c4f8df\",\"name\":\"rate\",\"field\":\"144124d2-1b1b-11e7-b09e-037021c4f8df\"}]}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"none\",\"label\":\"writes\",\"value_template\":\"{{value}}/s\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"filter\":\"\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "4e4bb1e0-1b1b-11e7-b09e-037021c4f8df", + "type": "visualization", + "version": 17 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: 5m Load Gauge", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: 5m Load Gauge\",\"type\":\"metrics\",\"params\":{\"id\":\"fdcc6180-1b90-11e7-bec4-a5e9ec5cab8b\",\"type\":\"gauge\",\"series\":[{\"id\":\"fdcc6181-1b90-11e7-bec4-a5e9ec5cab8b\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"fdcc6182-1b90-11e7-bec4-a5e9ec5cab8b\",\"type\":\"avg\",\"field\":\"system.load.5\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"5m Load\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"background_color_rules\":[{\"id\":\"feefabd0-1b90-11e7-bec4-a5e9ec5cab8b\"}],\"gauge_color_rules\":[{\"id\":\"ffd94880-1b90-11e7-bec4-a5e9ec5cab8b\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "26732e20-1b91-11e7-bec4-a5e9ec5cab8b", + "type": "visualization", + "version": 17 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Disk Usage", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Disk Usage\",\"type\":\"metrics\",\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"bar_color_rules\":[{\"bar_color\":\"rgba(104,188,0,1)\",\"id\":\"bf525310-1b95-11e7-8ada-3df93aab833e\",\"opperator\":\"gte\",\"value\":0},{\"bar_color\":\"rgba(254,146,0,1)\",\"id\":\"125fc4c0-1b96-11e7-8ada-3df93aab833e\",\"opperator\":\"gte\",\"value\":0.7},{\"bar_color\":\"rgba(211,49,21,1)\",\"id\":\"1a5c7240-1b96-11e7-8ada-3df93aab833e\",\"opperator\":\"gte\",\"value\":0.85}],\"drilldown_url\":\"\",\"filter\":\"-system.filesystem.mount_point:\\\\/run* AND -system.filesystem.mount_point:\\\\/sys* AND -system.filesystem.mount_point:\\\\/dev* AND -system.filesystem.mount_point:\\\\/proc* AND -system.filesystem.mount_point:\\\\/var* AND -system.filesystem.mount_point:\\\\/boot\",\"id\":\"9f7e48a0-1b95-11e7-8ada-3df93aab833e\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"9f7e48a1-1b95-11e7-8ada-3df93aab833e\",\"line_width\":1,\"metrics\":[{\"field\":\"system.filesystem.used.pct\",\"id\":\"9f7e48a2-1b95-11e7-8ada-3df93aab833e\",\"type\":\"avg\"}],\"point_size\":1,\"seperate_axis\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"system.filesystem.mount_point\"}],\"show_legend\":1,\"time_field\":\"@timestamp\",\"type\":\"top_n\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "34f97ee0-1b96-11e7-8ada-3df93aab833e", + "type": "visualization", + "version": 17 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Warning", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Warning\",\"type\":\"markdown\",\"params\":{\"markdown\":\"**This dashboard is only compatible with Kibana 5.4 and above. **\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "aa984970-1e0b-11e7-852e-cdcfcfdffddd", + "type": "visualization", + "version": 26 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Swap usage", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Swap usage\",\"type\":\"metrics\",\"params\":{\"id\":\"cee2fd20-4d59-11e7-aee5-fdc812cc3bec\",\"type\":\"gauge\",\"series\":[{\"id\":\"cee2fd21-4d59-11e7-aee5-fdc812cc3bec\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"cee2fd22-4d59-11e7-aee5-fdc812cc3bec\",\"type\":\"avg\",\"field\":\"system.memory.swap.used.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Swap usage\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"gauge_color_rules\":[{\"value\":0,\"id\":\"d17c1e90-4d59-11e7-aee5-fdc812cc3bec\",\"gauge\":\"rgba(104,188,0,1)\",\"opperator\":\"gte\"},{\"value\":0.7,\"id\":\"fc1d3490-4d59-11e7-aee5-fdc812cc3bec\",\"gauge\":\"rgba(251,158,0,1)\",\"opperator\":\"gte\"},{\"value\":0.85,\"id\":\"0e204240-4d5a-11e7-aee5-fdc812cc3bec\",\"gauge\":\"rgba(211,49,21,1)\",\"opperator\":\"gte\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"gauge_max\":\"\",\"filter\":\"\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "19e123b0-4d5a-11e7-aee5-fdc812cc3bec", + "type": "visualization", + "version": 2 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Memory usage vs total", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Memory usage vs total\",\"type\":\"metrics\",\"params\":{\"id\":\"6bc65720-4d5c-11e7-aa29-87a97a796de6\",\"type\":\"metric\",\"series\":[{\"id\":\"6bc65721-4d5c-11e7-aa29-87a97a796de6\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"6bc65722-4d5c-11e7-aa29-87a97a796de6\",\"type\":\"avg\",\"field\":\"system.memory.actual.used.bytes\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Memory usage\"},{\"id\":\"b8fe6820-4d5c-11e7-aa29-87a97a796de6\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"b8fe6821-4d5c-11e7-aa29-87a97a796de6\",\"type\":\"avg\",\"field\":\"system.memory.total\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Total Memory\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"background_color_rules\":[{\"id\":\"6f7618b0-4d5c-11e7-aa29-87a97a796de6\"}]},\"aggs\":[],\"listeners\":{}}" + }, + "id": "d2e80340-4d5c-11e7-aa29-87a97a796de6", + "type": "visualization", + "version": 2 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Packetloss", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Packetloss\",\"type\":\"metrics\",\"params\":{\"id\":\"6984af10-4d5d-11e7-aa29-87a97a796de6\",\"type\":\"metric\",\"series\":[{\"id\":\"6984af11-4d5d-11e7-aa29-87a97a796de6\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"6984af12-4d5d-11e7-aa29-87a97a796de6\",\"type\":\"max\",\"field\":\"system.network.in.dropped\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"In Packetloss\"},{\"id\":\"ac2e6b30-4d5d-11e7-aa29-87a97a796de6\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"ac2e6b31-4d5d-11e7-aa29-87a97a796de6\",\"type\":\"max\",\"field\":\"system.network.out.dropped\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Out Packetloss\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"background_color_rules\":[{\"id\":\"6ba9b1f0-4d5d-11e7-aa29-87a97a796de6\"}]},\"aggs\":[],\"listeners\":{}}" + }, + "id": "96976150-4d5d-11e7-aa29-87a97a796de6", + "type": "visualization", + "version": 3 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Swap usage vs total", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Swap usage vs total\",\"type\":\"metrics\",\"params\":{\"id\":\"2cac1870-4d5e-11e7-b561-4b24320e8d01\",\"type\":\"metric\",\"series\":[{\"id\":\"2cac1871-4d5e-11e7-b561-4b24320e8d01\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"2cac1872-4d5e-11e7-b561-4b24320e8d01\",\"type\":\"avg\",\"field\":\"system.memory.swap.used.bytes\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Swap usage\"},{\"id\":\"3fa8ef70-4d5e-11e7-b561-4b24320e8d01\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"3fa8ef71-4d5e-11e7-b561-4b24320e8d01\",\"type\":\"avg\",\"field\":\"system.memory.swap.total\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Total swap\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"background_color_rules\":[{\"id\":\"2fa1d8d0-4d5e-11e7-b561-4b24320e8d01\"}]},\"aggs\":[],\"listeners\":{}}" + }, + "id": "6a960290-4d5e-11e7-b561-4b24320e8d01", + "type": "visualization", + "version": 2 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Interfaces by Incoming traffic", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Interfaces by Incoming traffic\",\"type\":\"metrics\",\"params\":{\"id\":\"42ceae90-4d60-11e7-9a4c-ed99bbcaa42b\",\"type\":\"top_n\",\"series\":[{\"id\":\"42ced5a0-4d60-11e7-9a4c-ed99bbcaa42b\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"42ced5a1-4d60-11e7-9a4c-ed99bbcaa42b\",\"type\":\"avg\",\"field\":\"system.network.in.bytes\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Interfaces by Incoming traffic\",\"terms_field\":\"system.network.name\",\"terms_order_by\":\"42ced5a1-4d60-11e7-9a4c-ed99bbcaa42b\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"bar_color_rules\":[{\"id\":\"44596d40-4d60-11e7-9a4c-ed99bbcaa42b\"}]},\"aggs\":[],\"listeners\":{}}" + }, + "id": "99381c80-4d60-11e7-9a4c-ed99bbcaa42b", + "type": "visualization", + "version": 3 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Interfaces by Outgoing traffic", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Interfaces by Outgoing traffic\",\"type\":\"metrics\",\"params\":{\"id\":\"9cdba910-4d60-11e7-9a4c-ed99bbcaa42b\",\"type\":\"top_n\",\"series\":[{\"id\":\"9cdba911-4d60-11e7-9a4c-ed99bbcaa42b\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"9cdba912-4d60-11e7-9a4c-ed99bbcaa42b\",\"type\":\"avg\",\"field\":\"system.network.out.bytes\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"system.network.name\",\"terms_order_by\":\"9cdba912-4d60-11e7-9a4c-ed99bbcaa42b\",\"label\":\"Interfaces by Outgoing traffic\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"bar_color_rules\":[{\"id\":\"9db20be0-4d60-11e7-9a4c-ed99bbcaa42b\"}]},\"aggs\":[],\"listeners\":{}}" + }, + "id": "c5e3cf90-4d60-11e7-9a4c-ed99bbcaa42b", + "type": "visualization", + "version": 3 + }, + { + "attributes": { + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"beat.hostname:\\\"mar.local\\\"\"}}}],\"highlightAll\":true,\"version\":true}" + }, + "optionsJSON": "{\"darkTheme\":false}", + "panelsJSON": "[{\"col\":1,\"id\":\"6b7b9a40-faa1-11e6-86b1-cd7735ff7e23\",\"panelIndex\":1,\"row\":12,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"4d546850-1b15-11e7-b09e-037021c4f8df\",\"panelIndex\":2,\"row\":6,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"089b85d0-1b16-11e7-b09e-037021c4f8df\",\"panelIndex\":3,\"row\":12,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"bfa5e400-1b16-11e7-b09e-037021c4f8df\",\"panelIndex\":4,\"row\":9,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"e0f001c0-1b18-11e7-b09e-037021c4f8df\",\"panelIndex\":5,\"row\":15,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"2e224660-1b19-11e7-b09e-037021c4f8df\",\"panelIndex\":6,\"row\":15,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"ab2d1e90-1b1a-11e7-b09e-037021c4f8df\",\"panelIndex\":7,\"row\":6,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"4e4bb1e0-1b1b-11e7-b09e-037021c4f8df\",\"panelIndex\":8,\"row\":9,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":11,\"id\":\"26732e20-1b91-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":9,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"83e12df0-1b91-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":10,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":9,\"id\":\"d3166e80-1b91-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":11,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"522ee670-1b92-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":12,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"1aae9140-1b93-11e7-8ada-3df93aab833e\",\"panelIndex\":13,\"row\":4,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":3,\"id\":\"34f97ee0-1b96-11e7-8ada-3df93aab833e\",\"panelIndex\":14,\"row\":4,\"size_x\":4,\"size_y\":2,\"type\":\"visualization\"},{\"col\":10,\"id\":\"aa984970-1e0b-11e7-852e-cdcfcfdffddd\",\"panelIndex\":15,\"row\":1,\"size_x\":3,\"size_y\":1,\"type\":\"visualization\"},{\"col\":1,\"id\":\"System-Navigation\",\"panelIndex\":16,\"row\":1,\"size_x\":9,\"size_y\":1,\"type\":\"visualization\"},{\"col\":5,\"id\":\"19e123b0-4d5a-11e7-aee5-fdc812cc3bec\",\"panelIndex\":21,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"d2e80340-4d5c-11e7-aa29-87a97a796de6\",\"panelIndex\":22,\"row\":4,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":3,\"id\":\"825fdb80-4d1d-11e7-b5f2-2b7c1895bf32\",\"panelIndex\":23,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":11,\"id\":\"96976150-4d5d-11e7-aa29-87a97a796de6\",\"panelIndex\":25,\"row\":4,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":9,\"id\":\"6a960290-4d5e-11e7-b561-4b24320e8d01\",\"panelIndex\":26,\"row\":4,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"99381c80-4d60-11e7-9a4c-ed99bbcaa42b\",\"panelIndex\":27,\"row\":18,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"c5e3cf90-4d60-11e7-9a4c-ed99bbcaa42b\",\"panelIndex\":28,\"row\":18,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"}]", + "refreshInterval": { + "display": "Off", + "pause": false, + "value": 0 + }, + "timeFrom": "now-15m", + "timeRestore": true, + "timeTo": "now", + "title": "Metricbeat host overview", + "uiStateJSON": "{}", + "version": 1 + }, + "id": "79ffd6e0-faa0-11e6-947f-177f697178b8", + "type": "dashboard", + "version": 20 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"metricbeat-*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Container CPU usage", + "uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}", + "version": 1, + "visState": "{\"title\":\"Container CPU usage\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.cpuacct.stats.user.ns\",\"customLabel\":\"CPU user\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.cpu.cfs.quota.us\",\"customLabel\":\"CPU quota\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"system.process.cgroup.id\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Container ID\"}},{\"id\":\"4\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.cpu.stats.throttled.ns\",\"customLabel\":\"CPU throttling\"}},{\"id\":\"5\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.cpuacct.stats.system.ns\",\"customLabel\":\"CPU kernel\"}},{\"id\":\"6\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"system.process.name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Process name\"}}],\"listeners\":{}}" + }, + "id": "Container-CPU-usage", + "type": "visualization", + "version": 17 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"metricbeat-*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Container Memory stats", + "uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}", + "version": 1, + "visState": "{\"title\":\"Container Memory stats\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showMeticsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"13\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.mem.usage.bytes\",\"customLabel\":\"Usage\"}},{\"id\":\"14\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.mem.usage.max.bytes\",\"customLabel\":\"Max usage\"}},{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.stats.page_faults\",\"customLabel\":\"Page faults\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.stats.pages_in\",\"customLabel\":\"Pages in memory\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.stats.pages_out\",\"customLabel\":\"Pages out of memory\"}},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"system.process.cgroup.id\",\"size\":50,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Container ID\"}},{\"id\":\"5\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.stats.inactive_file.bytes\",\"customLabel\":\"Inactive files\"}},{\"id\":\"6\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.stats.major_page_faults\",\"customLabel\":\"# Major page faults\"}},{\"id\":\"8\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"system.process.name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Process name\"}},{\"id\":\"12\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.mem.failures\",\"customLabel\":\"Failures\"}},{\"id\":\"10\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.kmem_tcp.usage.bytes\",\"customLabel\":\"TCP buffers\"}},{\"id\":\"11\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.stats.rss_huge.bytes\",\"customLabel\":\"Huge pages\"}},{\"id\":\"7\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.stats.rss.bytes\",\"customLabel\":\"Swap caches\"}},{\"id\":\"15\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.stats.swap.bytes\",\"customLabel\":\"Swap usage\"}},{\"id\":\"16\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.blkio.total.ios\",\"customLabel\":\"Block I/O\"}}],\"listeners\":{}}" + }, + "id": "Container-Memory-stats", + "type": "visualization", + "version": 17 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"metricbeat-*\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Container Block IO", + "uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}", + "version": 1, + "visState": "{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{\"customLabel\":\"Total\",\"field\":\"system.process.cgroup.blkio.total.bytes\"},\"schema\":\"metric\",\"type\":\"avg\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"customLabel\":\"I/O\",\"field\":\"system.process.cgroup.blkio.total.ios\"},\"schema\":\"metric\",\"type\":\"avg\"},{\"enabled\":true,\"id\":\"3\",\"params\":{\"customLabel\":\"Container ID\",\"field\":\"system.process.cgroup.id\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":5},\"schema\":\"bucket\",\"type\":\"terms\"},{\"enabled\":true,\"id\":\"4\",\"params\":{\"customLabel\":\"Process name\",\"field\":\"system.process.name\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":5},\"schema\":\"bucket\",\"type\":\"terms\"}],\"listeners\":{},\"params\":{\"perPage\":10,\"showMeticsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"},\"title\":\"Container Block IO\",\"type\":\"table\"}" + }, + "id": "Container-Block-IO", + "type": "visualization", + "version": 17 + }, + { + "attributes": { + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}" + }, + "optionsJSON": "{\"darkTheme\":false}", + "panelsJSON": "[{\"col\":1,\"id\":\"Container-CPU-usage\",\"panelIndex\":2,\"row\":2,\"size_x\":12,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"System-Navigation\",\"panelIndex\":3,\"row\":1,\"size_x\":12,\"size_y\":1,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Container-Memory-stats\",\"panelIndex\":4,\"row\":5,\"size_x\":12,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Container-Block-IO\",\"panelIndex\":5,\"row\":8,\"size_x\":12,\"size_y\":4,\"type\":\"visualization\"}]", + "timeRestore": false, + "title": "Metricbeat CPU/Memory per container", + "uiStateJSON": "{\"P-2\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-4\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-5\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}", + "version": 1 + }, + "id": "CPU-slash-Memory-per-container", + "type": "dashboard", + "version": 9 + } + ], + "version": "6.0.0-alpha2" +} \ No newline at end of file diff --git a/metricbeat/module/system/_meta/kibana/default/dashboard/Metricbeat-system.json b/metricbeat/module/system/_meta/kibana/default/dashboard/Metricbeat-system.json new file mode 100644 index 00000000000..33219281166 --- /dev/null +++ b/metricbeat/module/system/_meta/kibana/default/dashboard/Metricbeat-system.json @@ -0,0 +1,531 @@ +{ + "objects": [ + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[{\"meta\":{\"index\":\"metricbeat-*\",\"key\":\"beat.name\",\"value\":\"mar.local\",\"disabled\":false,\"negate\":false,\"alias\":null,\"type\":\"phrase\"},\"query\":{\"match\":{\"beat.name\":{\"query\":\"mar.local\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}}]}" + }, + "title": "System Navigation", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"System Navigation\",\"type\":\"markdown\",\"params\":{\"markdown\":\"| [System Overview](#/dashboard/Metricbeat-system-overview) | [Host Overview (requires Kibana \u003e 5.4)](#/dashboard/79ffd6e0-faa0-11e6-947f-177f697178b8) | [ Docker container overview](#/dashboard/CPU-slash-Memory-per-container) |\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "System-Navigation", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"metricbeat-*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Number of hosts", + "uiStateJSON": "{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}}", + "version": 1, + "visState": "{\"title\":\"Number of hosts\",\"type\":\"metric\",\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"gauge\",\"gauge\":{\"verticalSplit\":false,\"autoExtend\":false,\"percentageMode\":false,\"gaugeType\":\"Metric\",\"gaugeStyle\":\"Full\",\"backStyle\":\"Full\",\"orientation\":\"vertical\",\"colorSchema\":\"Green to Red\",\"gaugeColorMode\":\"None\",\"useRange\":false,\"colorsRange\":[{\"from\":0,\"to\":100}],\"invertColors\":false,\"labels\":{\"show\":false,\"color\":\"black\"},\"scale\":{\"show\":false,\"labels\":false,\"color\":\"#333\",\"width\":2},\"type\":\"simple\",\"style\":{\"fontSize\":\"63\",\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\"}}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"beat.hostname\",\"customLabel\":\"Number of hosts\"}}],\"listeners\":{}}" + }, + "id": "c6f2ffd0-4d17-11e7-a196-69b9a7a020a9", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Top Hosts By Memory (Realtime)", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Top Hosts By Memory (Realtime)\",\"type\":\"metrics\",\"params\":{\"id\":\"31e5afa0-1b1c-11e7-b09e-037021c4f8df\",\"type\":\"top_n\",\"series\":[{\"id\":\"31e5afa1-1b1c-11e7-b09e-037021c4f8df\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"31e5afa2-1b1c-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.memory.actual.used.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"beat.hostname\",\"terms_order_by\":\"31e5afa2-1b1c-11e7-b09e-037021c4f8df\",\"terms_size\":\"10\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"bar_color_rules\":[{\"value\":0,\"id\":\"33349dd0-1b1c-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(104,188,0,1)\",\"opperator\":\"gte\"},{\"value\":0.6,\"id\":\"997dc440-1b1c-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(254,146,0,1)\",\"opperator\":\"gte\"},{\"value\":0.85,\"id\":\"a10d7f20-1b1c-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(211,49,21,1)\",\"opperator\":\"gte\"}],\"drilldown_url\":\"../app/kibana#/dashboard/79ffd6e0-faa0-11e6-947f-177f697178b8?_a=(query:(query_string:(analyze_wildcard:!t,query:'beat.hostname:\\\"{{key}}\\\"')))\",\"filter\":\"\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "fe064790-1b1f-11e7-bec4-a5e9ec5cab8b", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Top Hosts By CPU (Realtime)", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Top Hosts By CPU (Realtime)\",\"type\":\"metrics\",\"params\":{\"id\":\"31e5afa0-1b1c-11e7-b09e-037021c4f8df\",\"type\":\"top_n\",\"series\":[{\"id\":\"31e5afa1-1b1c-11e7-b09e-037021c4f8df\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"31e5afa2-1b1c-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.cpu.user.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"beat.hostname\",\"terms_order_by\":\"31e5afa2-1b1c-11e7-b09e-037021c4f8df\",\"terms_size\":\"10\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"bar_color_rules\":[{\"value\":0,\"id\":\"33349dd0-1b1c-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(104,188,0,1)\",\"opperator\":\"gte\"},{\"value\":0.6,\"id\":\"997dc440-1b1c-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(254,146,0,1)\",\"opperator\":\"gte\"},{\"value\":0.85,\"id\":\"a10d7f20-1b1c-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(211,49,21,1)\",\"opperator\":\"gte\"}],\"drilldown_url\":\"../app/kibana#/dashboard/79ffd6e0-faa0-11e6-947f-177f697178b8?_a=(query:(query_string:(analyze_wildcard:!t,query:'beat.hostname:\\\"{{key}}\\\"')))\",\"filter\":\"\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "855899e0-1b1c-11e7-b09e-037021c4f8df", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"metricbeat-*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Hosts histogram by CPU usage", + "uiStateJSON": "{\"vis\":{\"defaultColors\":{\"0% - 5%\":\"rgb(247,252,245)\",\"5% - 10%\":\"rgb(199,233,192)\",\"10% - 15%\":\"rgb(116,196,118)\",\"15% - 20%\":\"rgb(35,139,69)\"}}}", + "version": 1, + "visState": "{\"title\":\"Hosts histogram by CPU usage\",\"type\":\"heatmap\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"enableHover\":false,\"legendPosition\":\"right\",\"times\":[],\"colorsNumber\":4,\"colorSchema\":\"Greens\",\"setColorRange\":false,\"colorsRange\":[],\"invertColors\":false,\"percentageMode\":false,\"valueAxes\":[{\"show\":false,\"id\":\"ValueAxis-1\",\"type\":\"value\",\"scale\":{\"type\":\"linear\",\"defaultYExtents\":false},\"labels\":{\"show\":false,\"rotate\":0,\"color\":\"#555\"}}]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.cpu.user.pct\",\"customLabel\":\"CPU usage\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"beat.hostname\",\"size\":20,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Hosts\"}}],\"listeners\":{}}" + }, + "id": "7cdb1330-4d1a-11e7-a196-69b9a7a020a9", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Inbound Traffic Metric", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Inbound Traffic Metric\",\"type\":\"metrics\",\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"background_color_rules\":[{\"id\":\"0e346760-1b92-11e7-bec4-a5e9ec5cab8b\"}],\"filter\":\"-system.network.name:l*\",\"id\":\"0c761590-1b92-11e7-bec4-a5e9ec5cab8b\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"bytes\",\"id\":\"0c761591-1b92-11e7-bec4-a5e9ec5cab8b\",\"label\":\"Inbound Traffic\",\"line_width\":1,\"metrics\":[{\"field\":\"system.network.in.bytes\",\"id\":\"0c761592-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"max\"},{\"field\":\"0c761592-1b92-11e7-bec4-a5e9ec5cab8b\",\"id\":\"1d659060-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"derivative\",\"unit\":\"1s\"},{\"field\":\"1d659060-1b92-11e7-bec4-a5e9ec5cab8b\",\"id\":\"f2074f70-1b92-11e7-a416-41f5ccdba2e6\",\"type\":\"positive_only\",\"unit\":\"\"},{\"id\":\"c40e18f0-2c55-11e7-a0ad-277ce466684d\",\"type\":\"series_agg\",\"function\":\"sum\"}],\"point_size\":1,\"seperate_axis\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"value_template\":\"{{value}}/s\",\"terms_field\":\"system.network.name\"},{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"bytes\",\"id\":\"37f70440-1b92-11e7-bec4-a5e9ec5cab8b\",\"label\":\"Total Transfered\",\"line_width\":1,\"metrics\":[{\"field\":\"system.network.in.bytes\",\"id\":\"37f72b50-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"max\"},{\"field\":\"37f72b50-1b92-11e7-bec4-a5e9ec5cab8b\",\"id\":\"37f72b51-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"derivative\",\"unit\":\"\"},{\"unit\":\"\",\"id\":\"f9da2dd0-1b92-11e7-a416-41f5ccdba2e6\",\"type\":\"positive_only\",\"field\":\"37f72b51-1b92-11e7-bec4-a5e9ec5cab8b\"},{\"sigma\":\"\",\"field\":\"f9da2dd0-1b92-11e7-a416-41f5ccdba2e6\",\"id\":\"3e63c2f0-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"series_agg\",\"function\":\"overall_sum\"}],\"point_size\":1,\"seperate_axis\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"value_template\":\"{{value}}\",\"terms_field\":\"system.network.name\"}],\"show_legend\":1,\"time_field\":\"@timestamp\",\"type\":\"metric\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "522ee670-1b92-11e7-bec4-a5e9ec5cab8b", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Outbound Traffic Metric", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Outbound Traffic Metric\",\"type\":\"metrics\",\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"background_color_rules\":[{\"id\":\"0e346760-1b92-11e7-bec4-a5e9ec5cab8b\"}],\"filter\":\"-system.network.name:l*\",\"id\":\"0c761590-1b92-11e7-bec4-a5e9ec5cab8b\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"bytes\",\"id\":\"0c761591-1b92-11e7-bec4-a5e9ec5cab8b\",\"label\":\"Outbound Traffic\",\"line_width\":1,\"metrics\":[{\"field\":\"system.network.out.bytes\",\"id\":\"0c761592-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"max\"},{\"field\":\"0c761592-1b92-11e7-bec4-a5e9ec5cab8b\",\"id\":\"1d659060-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"derivative\",\"unit\":\"1s\"},{\"field\":\"1d659060-1b92-11e7-bec4-a5e9ec5cab8b\",\"id\":\"f2074f70-1b92-11e7-a416-41f5ccdba2e6\",\"type\":\"positive_only\",\"unit\":\"\"},{\"id\":\"a1737470-2c55-11e7-a0ad-277ce466684d\",\"type\":\"series_agg\",\"function\":\"sum\"}],\"point_size\":1,\"seperate_axis\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"value_template\":\"{{value}}/s\",\"terms_field\":\"system.network.name\"},{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"bytes\",\"id\":\"37f70440-1b92-11e7-bec4-a5e9ec5cab8b\",\"label\":\"Total Transfered\",\"line_width\":1,\"metrics\":[{\"field\":\"system.network.out.bytes\",\"id\":\"37f72b50-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"max\"},{\"field\":\"37f72b50-1b92-11e7-bec4-a5e9ec5cab8b\",\"id\":\"37f72b51-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"derivative\",\"unit\":\"\"},{\"unit\":\"\",\"id\":\"f9da2dd0-1b92-11e7-a416-41f5ccdba2e6\",\"type\":\"positive_only\",\"field\":\"37f72b51-1b92-11e7-bec4-a5e9ec5cab8b\"},{\"sigma\":\"\",\"field\":\"f9da2dd0-1b92-11e7-a416-41f5ccdba2e6\",\"id\":\"3e63c2f0-1b92-11e7-bec4-a5e9ec5cab8b\",\"type\":\"series_agg\",\"function\":\"overall_sum\"}],\"point_size\":1,\"seperate_axis\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"value_template\":\"{{value}}\",\"terms_field\":\"system.network.name\"}],\"show_legend\":1,\"time_field\":\"@timestamp\",\"type\":\"metric\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "1aae9140-1b93-11e7-8ada-3df93aab833e", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Disk used", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Disk used\",\"type\":\"metrics\",\"params\":{\"id\":\"4e4dc780-4d1d-11e7-b5f2-2b7c1895bf32\",\"type\":\"gauge\",\"series\":[{\"id\":\"4e4dee90-4d1d-11e7-b5f2-2b7c1895bf32\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"4e4dee91-4d1d-11e7-b5f2-2b7c1895bf32\",\"type\":\"avg\",\"field\":\"system.fsstat.total_size.used\"},{\"id\":\"57c96ee0-4d54-11e7-b5f2-2b7c1895bf32\",\"type\":\"avg\",\"field\":\"system.fsstat.total_size.total\"},{\"script\":\"params.total != null \u0026\u0026 params.total \u003e 0 ? params.used/params.total : null\",\"id\":\"6304cca0-4d54-11e7-b5f2-2b7c1895bf32\",\"type\":\"calculation\",\"variables\":[{\"id\":\"6da10430-4d54-11e7-b5f2-2b7c1895bf32\",\"field\":\"4e4dee91-4d1d-11e7-b5f2-2b7c1895bf32\",\"name\":\"used\"},{\"id\":\"73b8c510-4d54-11e7-b5f2-2b7c1895bf32\",\"name\":\"total\",\"field\":\"57c96ee0-4d54-11e7-b5f2-2b7c1895bf32\"}]}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Disk used\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"gauge_color_rules\":[{\"value\":0,\"id\":\"51921d10-4d1d-11e7-b5f2-2b7c1895bf32\",\"gauge\":\"rgba(104,188,0,1)\",\"opperator\":\"gte\"},{\"value\":0.7,\"id\":\"f26de750-4d54-11e7-b5f2-2b7c1895bf32\",\"gauge\":\"rgba(251,158,0,1)\",\"opperator\":\"gte\"},{\"value\":0.85,\"id\":\"fa31d190-4d54-11e7-b5f2-2b7c1895bf32\",\"gauge\":\"rgba(211,49,21,1)\",\"opperator\":\"gte\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"gauge_max\":\"1\",\"filter\":\"\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "825fdb80-4d1d-11e7-b5f2-2b7c1895bf32", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Memory Usage Gauge", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Memory Usage Gauge\",\"type\":\"metrics\",\"params\":{\"id\":\"9f51b730-1b91-11e7-bec4-a5e9ec5cab8b\",\"type\":\"gauge\",\"series\":[{\"id\":\"9f51b731-1b91-11e7-bec4-a5e9ec5cab8b\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"9f51b732-1b91-11e7-bec4-a5e9ec5cab8b\",\"type\":\"avg\",\"field\":\"system.memory.actual.used.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Memory Usage\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"gauge_color_rules\":[{\"value\":0,\"id\":\"a0d522e0-1b91-11e7-bec4-a5e9ec5cab8b\",\"gauge\":\"rgba(104,188,0,1)\",\"opperator\":\"gte\"},{\"value\":0.7,\"id\":\"b45ad8f0-1b91-11e7-bec4-a5e9ec5cab8b\",\"gauge\":\"rgba(254,146,0,1)\",\"opperator\":\"gte\"},{\"value\":0.85,\"id\":\"c06e9550-1b91-11e7-bec4-a5e9ec5cab8b\",\"gauge\":\"rgba(211,49,21,1)\",\"opperator\":\"gte\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"gauge_max\":\"1\",\"filter\":\"\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "d3166e80-1b91-11e7-bec4-a5e9ec5cab8b", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: CPU Usage Gauge", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: CPU Usage Gauge\",\"type\":\"metrics\",\"params\":{\"id\":\"4c9e2550-1b91-11e7-bec4-a5e9ec5cab8b\",\"type\":\"gauge\",\"series\":[{\"id\":\"4c9e2551-1b91-11e7-bec4-a5e9ec5cab8b\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"4c9e2552-1b91-11e7-bec4-a5e9ec5cab8b\",\"type\":\"avg\",\"field\":\"system.cpu.user.pct\"},{\"script\":\"params.user \u003e 0 ? 1 - params.user : null\",\"id\":\"587aa510-1b91-11e7-bec4-a5e9ec5cab8b\",\"type\":\"calculation\",\"variables\":[{\"id\":\"5a19af10-1b91-11e7-bec4-a5e9ec5cab8b\",\"name\":\"user\",\"field\":\"4c9e2552-1b91-11e7-bec4-a5e9ec5cab8b\"}]}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"CPU Usage\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"gauge_color_rules\":[{\"value\":0,\"id\":\"4ef2c3b0-1b91-11e7-bec4-a5e9ec5cab8b\",\"gauge\":\"rgba(104,188,0,1)\",\"opperator\":\"gte\"},{\"value\":0.7,\"id\":\"e6561ae0-1b91-11e7-bec4-a5e9ec5cab8b\",\"gauge\":\"rgba(254,146,0,1)\",\"opperator\":\"gte\"},{\"value\":0.85,\"id\":\"ec655040-1b91-11e7-bec4-a5e9ec5cab8b\",\"gauge\":\"rgba(211,49,21,1)\",\"opperator\":\"gte\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"gauge_max\":\"1\",\"filter\":\"\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "83e12df0-1b91-11e7-bec4-a5e9ec5cab8b", + "type": "visualization", + "version": 2 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Tip System overview", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Tip System overview\",\"type\":\"metrics\",\"params\":{\"id\":\"0a46a600-4d64-11e7-aa29-87a97a796de6\",\"type\":\"markdown\",\"series\":[{\"id\":\"0a46cd10-4d64-11e7-aa29-87a97a796de6\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"0a46cd11-4d64-11e7-aa29-87a97a796de6\",\"type\":\"count\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"markdown\":\"**Tip:** Click on any of the hosts from the Top Hosts By CPU or Top Hosts by Memory to view more details about the host.\",\"background_color\":\"rgba(252,220,0,1)\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "e9d22060-4d64-11e7-aa29-87a97a796de6", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}" + }, + "optionsJSON": "{\"darkTheme\":false}", + "panelsJSON": "[{\"col\":1,\"id\":\"System-Navigation\",\"panelIndex\":9,\"row\":1,\"size_x\":8,\"size_y\":1,\"type\":\"visualization\"},{\"col\":1,\"id\":\"c6f2ffd0-4d17-11e7-a196-69b9a7a020a9\",\"panelIndex\":11,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"fe064790-1b1f-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":12,\"row\":4,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"855899e0-1b1c-11e7-b09e-037021c4f8df\",\"panelIndex\":13,\"row\":4,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"7cdb1330-4d1a-11e7-a196-69b9a7a020a9\",\"panelIndex\":14,\"row\":9,\"size_x\":12,\"size_y\":6,\"type\":\"visualization\"},{\"col\":9,\"id\":\"522ee670-1b92-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":16,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":11,\"id\":\"1aae9140-1b93-11e7-8ada-3df93aab833e\",\"panelIndex\":17,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"825fdb80-4d1d-11e7-b5f2-2b7c1895bf32\",\"panelIndex\":18,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":5,\"id\":\"d3166e80-1b91-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":19,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":3,\"id\":\"83e12df0-1b91-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":20,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":9,\"id\":\"e9d22060-4d64-11e7-aa29-87a97a796de6\",\"panelIndex\":21,\"row\":1,\"size_x\":4,\"size_y\":1,\"type\":\"visualization\"}]", + "timeRestore": false, + "title": "Metricbeat system overview", + "uiStateJSON": "{\"P-11\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-12\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-14\":{\"vis\":{\"defaultColors\":{\"0% - 8.75%\":\"rgb(247,252,245)\",\"8.75% - 17.5%\":\"rgb(199,233,192)\",\"17.5% - 26.25%\":\"rgb(116,196,118)\",\"26.25% - 35%\":\"rgb(35,139,69)\"}}},\"P-16\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-2\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-3\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}}}", + "version": 1 + }, + "id": "Metricbeat-system-overview", + "type": "dashboard", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Mericbeat: Network Traffic (Packets)", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Mericbeat: Network Traffic (Packets)\",\"type\":\"metrics\",\"params\":{\"id\":\"da1046f0-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"timeseries\",\"series\":[{\"id\":\"da1046f1-faa0-11e6-86b1-cd7735ff7e23\",\"color\":\"rgba(0,156,224,1)\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"da1046f2-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"max\",\"field\":\"system.network.in.packets\"},{\"unit\":\"1s\",\"id\":\"f41f9280-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"derivative\",\"field\":\"da1046f2-faa0-11e6-86b1-cd7735ff7e23\"},{\"unit\":\"\",\"id\":\"c0da3d80-1b93-11e7-8ada-3df93aab833e\",\"type\":\"positive_only\",\"field\":\"f41f9280-faa0-11e6-86b1-cd7735ff7e23\"},{\"id\":\"ecaad010-2c2c-11e7-be71-3162da85303f\",\"type\":\"series_agg\",\"function\":\"sum\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"0.[00]a\",\"chart_type\":\"line\",\"line_width\":\"0\",\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"none\",\"label\":\"Inbound\",\"value_template\":\"{{value}}/s\",\"terms_field\":\"system.network.name\"},{\"id\":\"fbbd5720-faa0-11e6-86b1-cd7735ff7e23\",\"color\":\"rgba(250,40,255,1)\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"fbbd7e30-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"max\",\"field\":\"system.network.out.packets\"},{\"unit\":\"1s\",\"id\":\"fbbd7e31-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"derivative\",\"field\":\"fbbd7e30-faa0-11e6-86b1-cd7735ff7e23\"},{\"script\":\"params.rate != null \u0026\u0026 params.rate \u003e 0 ? params.rate * -1 : null\",\"id\":\"17e597a0-faa1-11e6-86b1-cd7735ff7e23\",\"type\":\"calculation\",\"variables\":[{\"id\":\"1940bad0-faa1-11e6-86b1-cd7735ff7e23\",\"name\":\"rate\",\"field\":\"fbbd7e31-faa0-11e6-86b1-cd7735ff7e23\"}]},{\"id\":\"fe5fbdc0-2c2c-11e7-be71-3162da85303f\",\"type\":\"series_agg\",\"function\":\"sum\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"0.[00]a\",\"chart_type\":\"line\",\"line_width\":\"0\",\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"none\",\"label\":\"Outbound\",\"value_template\":\"{{value}}/s\",\"terms_field\":\"system.network.name\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"filter\":\"-system.network.name:l*\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "6b7b9a40-faa1-11e6-86b1-cd7735ff7e23", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: System Load", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: System Load\",\"type\":\"metrics\",\"params\":{\"id\":\"f6264ad0-1b14-11e7-b09e-037021c4f8df\",\"type\":\"timeseries\",\"series\":[{\"id\":\"f62671e0-1b14-11e7-b09e-037021c4f8df\",\"color\":\"rgba(115,216,255,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"f62671e1-1b14-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.load.1\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":\"3\",\"point_size\":1,\"fill\":\"0\",\"stacked\":\"none\",\"label\":\"1m\"},{\"id\":\"1c324850-1b15-11e7-b09e-037021c4f8df\",\"color\":\"rgba(0,156,224,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"1c324851-1b15-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.load.5\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":\"3\",\"point_size\":\"0\",\"fill\":\"0\",\"stacked\":\"none\",\"label\":\"5m\"},{\"id\":\"3287e740-1b15-11e7-b09e-037021c4f8df\",\"color\":\"rgba(0,98,177,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"32880e50-1b15-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.load.15\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":\"3\",\"point_size\":\"0\",\"fill\":\"0\",\"stacked\":\"none\",\"label\":\"15m\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1},\"aggs\":[],\"listeners\":{}}" + }, + "id": "4d546850-1b15-11e7-b09e-037021c4f8df", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Mericbeat: Network Traffic (Bytes)", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Mericbeat: Network Traffic (Bytes)\",\"type\":\"metrics\",\"params\":{\"id\":\"da1046f0-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"timeseries\",\"series\":[{\"id\":\"da1046f1-faa0-11e6-86b1-cd7735ff7e23\",\"color\":\"rgba(0,156,224,1)\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"da1046f2-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"max\",\"field\":\"system.network.in.bytes\"},{\"unit\":\"1s\",\"id\":\"f41f9280-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"derivative\",\"field\":\"da1046f2-faa0-11e6-86b1-cd7735ff7e23\"},{\"unit\":\"\",\"id\":\"a87398e0-1b93-11e7-8ada-3df93aab833e\",\"type\":\"positive_only\",\"field\":\"f41f9280-faa0-11e6-86b1-cd7735ff7e23\"},{\"id\":\"2d533df0-2c2d-11e7-be71-3162da85303f\",\"type\":\"series_agg\",\"function\":\"sum\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":\"0\",\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"none\",\"label\":\"Inbound \",\"value_template\":\"{{value}}/s\",\"terms_field\":\"system.network.name\"},{\"id\":\"fbbd5720-faa0-11e6-86b1-cd7735ff7e23\",\"color\":\"rgba(250,40,255,1)\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"fbbd7e30-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"max\",\"field\":\"system.network.out.bytes\"},{\"unit\":\"1s\",\"id\":\"fbbd7e31-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"derivative\",\"field\":\"fbbd7e30-faa0-11e6-86b1-cd7735ff7e23\"},{\"script\":\"params.rate != null \u0026\u0026 params.rate \u003e 0 ? params.rate * -1 : null\",\"id\":\"17e597a0-faa1-11e6-86b1-cd7735ff7e23\",\"type\":\"calculation\",\"variables\":[{\"id\":\"1940bad0-faa1-11e6-86b1-cd7735ff7e23\",\"name\":\"rate\",\"field\":\"fbbd7e31-faa0-11e6-86b1-cd7735ff7e23\"}]},{\"id\":\"533da9b0-2c2d-11e7-be71-3162da85303f\",\"type\":\"series_agg\",\"function\":\"sum\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":\"0\",\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"none\",\"label\":\"Outbound \",\"value_template\":\"{{value}}/s\",\"terms_field\":\"system.network.name\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"filter\":\"-system.network.name:l*\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "089b85d0-1b16-11e7-b09e-037021c4f8df", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Memory Usage", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Memory Usage\",\"type\":\"metrics\",\"params\":{\"id\":\"32f46f40-1b16-11e7-b09e-037021c4f8df\",\"type\":\"timeseries\",\"series\":[{\"id\":\"4ff61fd0-1b16-11e7-b09e-037021c4f8df\",\"color\":\"rgba(211,49,21,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"4ff61fd1-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.memory.actual.used.bytes\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"stacked\",\"label\":\"Used\"},{\"id\":\"753a6080-1b16-11e7-b09e-037021c4f8df\",\"color\":\"rgba(0,156,224,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"753a6081-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.memory.actual.used.bytes\"},{\"id\":\"7c9d3f00-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.memory.used.bytes\"},{\"script\":\"params.actual != null \u0026\u0026 params.used != null ? params.used - params.actual : null\",\"id\":\"869cc160-1b16-11e7-b09e-037021c4f8df\",\"type\":\"calculation\",\"variables\":[{\"id\":\"890f9620-1b16-11e7-b09e-037021c4f8df\",\"name\":\"actual\",\"field\":\"753a6081-1b16-11e7-b09e-037021c4f8df\"},{\"id\":\"8f3ab7f0-1b16-11e7-b09e-037021c4f8df\",\"name\":\"used\",\"field\":\"7c9d3f00-1b16-11e7-b09e-037021c4f8df\"}]}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"stacked\",\"label\":\"Cache\"},{\"id\":\"32f46f41-1b16-11e7-b09e-037021c4f8df\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"32f46f42-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.memory.free\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"stacked\",\"label\":\"Free\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1},\"aggs\":[],\"listeners\":{}}" + }, + "id": "bfa5e400-1b16-11e7-b09e-037021c4f8df", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Top Processes By CPU", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Top Processes By CPU\",\"type\":\"metrics\",\"params\":{\"id\":\"5f5b8d50-1b18-11e7-b09e-037021c4f8df\",\"type\":\"top_n\",\"series\":[{\"id\":\"5f5b8d51-1b18-11e7-b09e-037021c4f8df\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"5f5b8d52-1b18-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.process.cpu.total.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"system.process.name\",\"terms_order_by\":\"5f5b8d52-1b18-11e7-b09e-037021c4f8df\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"bar_color_rules\":[{\"value\":0,\"id\":\"60e11be0-1b18-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(104,188,0,1)\",\"opperator\":\"gte\"}],\"drilldown_url\":\"\",\"filter\":\"\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "e0f001c0-1b18-11e7-b09e-037021c4f8df", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Processes By Memory", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Processes By Memory\",\"type\":\"metrics\",\"params\":{\"id\":\"edfceb30-1b18-11e7-b09e-037021c4f8df\",\"type\":\"top_n\",\"series\":[{\"id\":\"edfceb31-1b18-11e7-b09e-037021c4f8df\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"edfceb32-1b18-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.process.memory.rss.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"system.process.name\",\"terms_order_by\":\"edfceb32-1b18-11e7-b09e-037021c4f8df\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"bar_color_rules\":[{\"value\":0,\"id\":\"efb9b660-1b18-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(104,188,0,1)\",\"opperator\":\"gte\"},{\"value\":0.7,\"id\":\"17fcb820-1b19-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(254,146,0,1)\",\"opperator\":\"gte\"},{\"value\":0.85,\"id\":\"1dd61070-1b19-11e7-b09e-037021c4f8df\",\"bar_color\":\"rgba(211,49,21,1)\",\"opperator\":\"gte\"}],\"drilldown_url\":\"\",\"filter\":\"\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "2e224660-1b19-11e7-b09e-037021c4f8df", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: CPU Usage", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: CPU Usage\",\"type\":\"metrics\",\"params\":{\"id\":\"80a04950-1b19-11e7-b09e-037021c4f8df\",\"type\":\"timeseries\",\"series\":[{\"id\":\"80a04951-1b19-11e7-b09e-037021c4f8df\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"80a04952-1b19-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.cpu.user.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"stacked\",\"label\":\"user\"},{\"id\":\"993acf30-1b19-11e7-b09e-037021c4f8df\",\"color\":\"rgba(211,49,21,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"993acf31-1b19-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.cpu.system.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"stacked\",\"label\":\"system\"},{\"id\":\"65ca35e0-1b1a-11e7-b09e-037021c4f8df\",\"color\":\"rgba(123,100,255,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"65ca5cf0-1b1a-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.cpu.nice.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"stacked\",\"label\":\"nice\"},{\"id\":\"741b5f20-1b1a-11e7-b09e-037021c4f8df\",\"color\":\"rgba(226,115,0,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"741b5f21-1b1a-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.cpu.irq.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"stacked\",\"label\":\"irq\"},{\"id\":\"2efc5d40-1b1a-11e7-b09e-037021c4f8df\",\"color\":\"rgba(176,188,0,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"2efc5d41-1b1a-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.cpu.softirq.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"stacked\",\"label\":\"softirq\"},{\"id\":\"ae644a30-1b19-11e7-b09e-037021c4f8df\",\"color\":\"rgba(15,20,25,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"ae644a31-1b19-11e7-b09e-037021c4f8df\",\"type\":\"avg\",\"field\":\"system.cpu.iowait.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"stacked\",\"label\":\"iowait\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1},\"aggs\":[],\"listeners\":{}}" + }, + "id": "ab2d1e90-1b1a-11e7-b09e-037021c4f8df", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Disk IO (Bytes)", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Disk IO (Bytes)\",\"type\":\"metrics\",\"params\":{\"id\":\"d3c67db0-1b1a-11e7-b09e-037021c4f8df\",\"type\":\"timeseries\",\"series\":[{\"id\":\"d3c67db1-1b1a-11e7-b09e-037021c4f8df\",\"color\":\"rgba(22,165,165,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"d3c67db2-1b1a-11e7-b09e-037021c4f8df\",\"type\":\"max\",\"field\":\"system.diskio.read.bytes\"},{\"unit\":\"1s\",\"id\":\"f55b9910-1b1a-11e7-b09e-037021c4f8df\",\"type\":\"derivative\",\"field\":\"d3c67db2-1b1a-11e7-b09e-037021c4f8df\"},{\"unit\":\"\",\"id\":\"dcbbb100-1b93-11e7-8ada-3df93aab833e\",\"type\":\"positive_only\",\"field\":\"f55b9910-1b1a-11e7-b09e-037021c4f8df\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"none\",\"label\":\"reads\",\"value_template\":\"{{value}}/s\"},{\"id\":\"144124d0-1b1b-11e7-b09e-037021c4f8df\",\"color\":\"rgba(251,158,0,1)\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"144124d1-1b1b-11e7-b09e-037021c4f8df\",\"type\":\"max\",\"field\":\"system.diskio.write.bytes\"},{\"unit\":\"1s\",\"id\":\"144124d2-1b1b-11e7-b09e-037021c4f8df\",\"type\":\"derivative\",\"field\":\"144124d1-1b1b-11e7-b09e-037021c4f8df\"},{\"script\":\"params.rate \u003e 0 ? params.rate * -1 : 0\",\"id\":\"144124d4-1b1b-11e7-b09e-037021c4f8df\",\"type\":\"calculation\",\"variables\":[{\"id\":\"144124d3-1b1b-11e7-b09e-037021c4f8df\",\"name\":\"rate\",\"field\":\"144124d2-1b1b-11e7-b09e-037021c4f8df\"}]}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"1\",\"stacked\":\"none\",\"label\":\"writes\",\"value_template\":\"{{value}}/s\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"filter\":\"\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "4e4bb1e0-1b1b-11e7-b09e-037021c4f8df", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: 5m Load Gauge", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: 5m Load Gauge\",\"type\":\"metrics\",\"params\":{\"id\":\"fdcc6180-1b90-11e7-bec4-a5e9ec5cab8b\",\"type\":\"gauge\",\"series\":[{\"id\":\"fdcc6181-1b90-11e7-bec4-a5e9ec5cab8b\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"fdcc6182-1b90-11e7-bec4-a5e9ec5cab8b\",\"type\":\"avg\",\"field\":\"system.load.5\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"5m Load\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"background_color_rules\":[{\"id\":\"feefabd0-1b90-11e7-bec4-a5e9ec5cab8b\"}],\"gauge_color_rules\":[{\"id\":\"ffd94880-1b90-11e7-bec4-a5e9ec5cab8b\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "26732e20-1b91-11e7-bec4-a5e9ec5cab8b", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Disk Usage", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Disk Usage\",\"type\":\"metrics\",\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"bar_color_rules\":[{\"bar_color\":\"rgba(104,188,0,1)\",\"id\":\"bf525310-1b95-11e7-8ada-3df93aab833e\",\"opperator\":\"gte\",\"value\":0},{\"bar_color\":\"rgba(254,146,0,1)\",\"id\":\"125fc4c0-1b96-11e7-8ada-3df93aab833e\",\"opperator\":\"gte\",\"value\":0.7},{\"bar_color\":\"rgba(211,49,21,1)\",\"id\":\"1a5c7240-1b96-11e7-8ada-3df93aab833e\",\"opperator\":\"gte\",\"value\":0.85}],\"drilldown_url\":\"\",\"filter\":\"-system.filesystem.mount_point:\\\\/run* AND -system.filesystem.mount_point:\\\\/sys* AND -system.filesystem.mount_point:\\\\/dev* AND -system.filesystem.mount_point:\\\\/proc* AND -system.filesystem.mount_point:\\\\/var* AND -system.filesystem.mount_point:\\\\/boot\",\"id\":\"9f7e48a0-1b95-11e7-8ada-3df93aab833e\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"9f7e48a1-1b95-11e7-8ada-3df93aab833e\",\"line_width\":1,\"metrics\":[{\"field\":\"system.filesystem.used.pct\",\"id\":\"9f7e48a2-1b95-11e7-8ada-3df93aab833e\",\"type\":\"avg\"}],\"point_size\":1,\"seperate_axis\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"system.filesystem.mount_point\"}],\"show_legend\":1,\"time_field\":\"@timestamp\",\"type\":\"top_n\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "34f97ee0-1b96-11e7-8ada-3df93aab833e", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Warning", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Warning\",\"type\":\"markdown\",\"params\":{\"markdown\":\"**This dashboard is only compatible with Kibana 5.4 and above. **\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "aa984970-1e0b-11e7-852e-cdcfcfdffddd", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Swap usage", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Swap usage\",\"type\":\"metrics\",\"params\":{\"id\":\"cee2fd20-4d59-11e7-aee5-fdc812cc3bec\",\"type\":\"gauge\",\"series\":[{\"id\":\"cee2fd21-4d59-11e7-aee5-fdc812cc3bec\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"cee2fd22-4d59-11e7-aee5-fdc812cc3bec\",\"type\":\"avg\",\"field\":\"system.memory.swap.used.pct\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Swap usage\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"gauge_color_rules\":[{\"value\":0,\"id\":\"d17c1e90-4d59-11e7-aee5-fdc812cc3bec\",\"gauge\":\"rgba(104,188,0,1)\",\"opperator\":\"gte\"},{\"value\":0.7,\"id\":\"fc1d3490-4d59-11e7-aee5-fdc812cc3bec\",\"gauge\":\"rgba(251,158,0,1)\",\"opperator\":\"gte\"},{\"value\":0.85,\"id\":\"0e204240-4d5a-11e7-aee5-fdc812cc3bec\",\"gauge\":\"rgba(211,49,21,1)\",\"opperator\":\"gte\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"gauge_max\":\"\",\"filter\":\"\"},\"aggs\":[],\"listeners\":{}}" + }, + "id": "19e123b0-4d5a-11e7-aee5-fdc812cc3bec", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Memory usage vs total", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Memory usage vs total\",\"type\":\"metrics\",\"params\":{\"id\":\"6bc65720-4d5c-11e7-aa29-87a97a796de6\",\"type\":\"metric\",\"series\":[{\"id\":\"6bc65721-4d5c-11e7-aa29-87a97a796de6\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"6bc65722-4d5c-11e7-aa29-87a97a796de6\",\"type\":\"avg\",\"field\":\"system.memory.actual.used.bytes\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Memory usage\"},{\"id\":\"b8fe6820-4d5c-11e7-aa29-87a97a796de6\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"b8fe6821-4d5c-11e7-aa29-87a97a796de6\",\"type\":\"avg\",\"field\":\"system.memory.total\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Total Memory\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"background_color_rules\":[{\"id\":\"6f7618b0-4d5c-11e7-aa29-87a97a796de6\"}]},\"aggs\":[],\"listeners\":{}}" + }, + "id": "d2e80340-4d5c-11e7-aa29-87a97a796de6", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Packetloss", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Packetloss\",\"type\":\"metrics\",\"params\":{\"id\":\"6984af10-4d5d-11e7-aa29-87a97a796de6\",\"type\":\"metric\",\"series\":[{\"id\":\"6984af11-4d5d-11e7-aa29-87a97a796de6\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"6984af12-4d5d-11e7-aa29-87a97a796de6\",\"type\":\"max\",\"field\":\"system.network.in.dropped\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"In Packetloss\"},{\"id\":\"ac2e6b30-4d5d-11e7-aa29-87a97a796de6\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"ac2e6b31-4d5d-11e7-aa29-87a97a796de6\",\"type\":\"max\",\"field\":\"system.network.out.dropped\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Out Packetloss\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"background_color_rules\":[{\"id\":\"6ba9b1f0-4d5d-11e7-aa29-87a97a796de6\"}]},\"aggs\":[],\"listeners\":{}}" + }, + "id": "96976150-4d5d-11e7-aa29-87a97a796de6", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Interfaces by Incoming traffic", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Interfaces by Incoming traffic\",\"type\":\"metrics\",\"params\":{\"id\":\"42ceae90-4d60-11e7-9a4c-ed99bbcaa42b\",\"type\":\"top_n\",\"series\":[{\"id\":\"42ced5a0-4d60-11e7-9a4c-ed99bbcaa42b\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"42ced5a1-4d60-11e7-9a4c-ed99bbcaa42b\",\"type\":\"avg\",\"field\":\"system.network.in.bytes\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Interfaces by Incoming traffic\",\"terms_field\":\"system.network.name\",\"terms_order_by\":\"42ced5a1-4d60-11e7-9a4c-ed99bbcaa42b\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"bar_color_rules\":[{\"id\":\"44596d40-4d60-11e7-9a4c-ed99bbcaa42b\"}]},\"aggs\":[],\"listeners\":{}}" + }, + "id": "99381c80-4d60-11e7-9a4c-ed99bbcaa42b", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"query_string\":{\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Metricbeat: Interfaces by Outgoing traffic", + "uiStateJSON": "{}", + "version": 1, + "visState": "{\"title\":\"Metricbeat: Interfaces by Outgoing traffic\",\"type\":\"metrics\",\"params\":{\"id\":\"9cdba910-4d60-11e7-9a4c-ed99bbcaa42b\",\"type\":\"top_n\",\"series\":[{\"id\":\"9cdba911-4d60-11e7-9a4c-ed99bbcaa42b\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"9cdba912-4d60-11e7-9a4c-ed99bbcaa42b\",\"type\":\"avg\",\"field\":\"system.network.out.bytes\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"system.network.name\",\"terms_order_by\":\"9cdba912-4d60-11e7-9a4c-ed99bbcaa42b\",\"label\":\"Interfaces by Outgoing traffic\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"bar_color_rules\":[{\"id\":\"9db20be0-4d60-11e7-9a4c-ed99bbcaa42b\"}]},\"aggs\":[],\"listeners\":{}}" + }, + "id": "c5e3cf90-4d60-11e7-9a4c-ed99bbcaa42b", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"metricbeat-*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Number of processes", + "uiStateJSON": "{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}}", + "version": 1, + "visState": "{\"title\":\"Number of processes\",\"type\":\"metric\",\"params\":{\"addLegend\":false,\"addTooltip\":true,\"gauge\":{\"autoExtend\":false,\"backStyle\":\"Full\",\"colorSchema\":\"Green to Red\",\"colorsRange\":[{\"from\":0,\"to\":100}],\"gaugeColorMode\":\"None\",\"gaugeStyle\":\"Full\",\"gaugeType\":\"Metric\",\"invertColors\":false,\"labels\":{\"color\":\"black\",\"show\":true},\"orientation\":\"vertical\",\"percentageMode\":false,\"scale\":{\"color\":\"#333\",\"labels\":false,\"show\":false,\"width\":2},\"style\":{\"bgColor\":false,\"bgFill\":\"#000\",\"fontSize\":60,\"labelColor\":false,\"subText\":\"\"},\"type\":\"simple\",\"useRange\":false,\"verticalSplit\":false},\"type\":\"gauge\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.pid\",\"customLabel\":\"Processes\"}}],\"listeners\":{}}" + }, + "id": "590a60f0-5d87-11e7-8884-1bb4c3b890e4", + "type": "visualization", + "version": 2 + }, + { + "attributes": { + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"beat.hostname:\\\"mar.local\\\"\"}}}],\"highlightAll\":true,\"version\":true}" + }, + "optionsJSON": "{\"darkTheme\":false}", + "panelsJSON": "[{\"col\":1,\"id\":\"6b7b9a40-faa1-11e6-86b1-cd7735ff7e23\",\"panelIndex\":1,\"row\":12,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"4d546850-1b15-11e7-b09e-037021c4f8df\",\"panelIndex\":2,\"row\":6,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"089b85d0-1b16-11e7-b09e-037021c4f8df\",\"panelIndex\":3,\"row\":12,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"bfa5e400-1b16-11e7-b09e-037021c4f8df\",\"panelIndex\":4,\"row\":9,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"e0f001c0-1b18-11e7-b09e-037021c4f8df\",\"panelIndex\":5,\"row\":15,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"2e224660-1b19-11e7-b09e-037021c4f8df\",\"panelIndex\":6,\"row\":15,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"ab2d1e90-1b1a-11e7-b09e-037021c4f8df\",\"panelIndex\":7,\"row\":6,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"4e4bb1e0-1b1b-11e7-b09e-037021c4f8df\",\"panelIndex\":8,\"row\":9,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":5,\"id\":\"26732e20-1b91-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":9,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"83e12df0-1b91-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":10,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":3,\"id\":\"d3166e80-1b91-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":11,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"522ee670-1b92-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":12,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":9,\"id\":\"1aae9140-1b93-11e7-8ada-3df93aab833e\",\"panelIndex\":13,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":9,\"id\":\"34f97ee0-1b96-11e7-8ada-3df93aab833e\",\"panelIndex\":14,\"row\":4,\"size_x\":4,\"size_y\":2,\"type\":\"visualization\"},{\"col\":10,\"id\":\"aa984970-1e0b-11e7-852e-cdcfcfdffddd\",\"panelIndex\":15,\"row\":1,\"size_x\":3,\"size_y\":1,\"type\":\"visualization\"},{\"col\":1,\"id\":\"System-Navigation\",\"panelIndex\":16,\"row\":1,\"size_x\":9,\"size_y\":1,\"type\":\"visualization\"},{\"col\":1,\"id\":\"19e123b0-4d5a-11e7-aee5-fdc812cc3bec\",\"panelIndex\":21,\"row\":4,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":3,\"id\":\"d2e80340-4d5c-11e7-aa29-87a97a796de6\",\"panelIndex\":22,\"row\":4,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"825fdb80-4d1d-11e7-b5f2-2b7c1895bf32\",\"panelIndex\":23,\"row\":4,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":11,\"id\":\"96976150-4d5d-11e7-aa29-87a97a796de6\",\"panelIndex\":25,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"99381c80-4d60-11e7-9a4c-ed99bbcaa42b\",\"panelIndex\":27,\"row\":18,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"c5e3cf90-4d60-11e7-9a4c-ed99bbcaa42b\",\"panelIndex\":28,\"row\":18,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":5,\"id\":\"590a60f0-5d87-11e7-8884-1bb4c3b890e4\",\"panelIndex\":29,\"row\":4,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"}]", + "refreshInterval": { + "display": "Off", + "pause": false, + "value": 0 + }, + "timeFrom": "now-15m", + "timeRestore": true, + "timeTo": "now", + "title": "Metricbeat host overview", + "uiStateJSON": "{\"P-29\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}}}", + "version": 1 + }, + "id": "79ffd6e0-faa0-11e6-947f-177f697178b8", + "type": "dashboard", + "version": 6 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"metricbeat-*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Container CPU usage", + "uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}", + "version": 1, + "visState": "{\"title\":\"Container CPU usage\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.cpuacct.stats.user.ns\",\"customLabel\":\"CPU user\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.cpu.cfs.quota.us\",\"customLabel\":\"CPU quota\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"system.process.cgroup.id\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Container ID\"}},{\"id\":\"4\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.cpu.stats.throttled.ns\",\"customLabel\":\"CPU throttling\"}},{\"id\":\"5\",\"enabled\":true,\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.cpuacct.stats.system.ns\",\"customLabel\":\"CPU kernel\"}},{\"id\":\"6\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"system.process.name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Process name\"}}],\"listeners\":{}}" + }, + "id": "Container-CPU-usage", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"metricbeat-*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}" + }, + "title": "Container Memory stats", + "uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}", + "version": 1, + "visState": "{\"title\":\"Container Memory stats\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showMeticsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"13\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.mem.usage.bytes\",\"customLabel\":\"Usage\"}},{\"id\":\"14\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.mem.usage.max.bytes\",\"customLabel\":\"Max usage\"}},{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.stats.page_faults\",\"customLabel\":\"Page faults\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.stats.pages_in\",\"customLabel\":\"Pages in memory\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.stats.pages_out\",\"customLabel\":\"Pages out of memory\"}},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"system.process.cgroup.id\",\"size\":50,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Container ID\"}},{\"id\":\"5\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.stats.inactive_file.bytes\",\"customLabel\":\"Inactive files\"}},{\"id\":\"6\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.stats.major_page_faults\",\"customLabel\":\"# Major page faults\"}},{\"id\":\"8\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"system.process.name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Process name\"}},{\"id\":\"12\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.mem.failures\",\"customLabel\":\"Failures\"}},{\"id\":\"10\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.kmem_tcp.usage.bytes\",\"customLabel\":\"TCP buffers\"}},{\"id\":\"11\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.stats.rss_huge.bytes\",\"customLabel\":\"Huge pages\"}},{\"id\":\"7\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.stats.rss.bytes\",\"customLabel\":\"Swap caches\"}},{\"id\":\"15\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.memory.stats.swap.bytes\",\"customLabel\":\"Swap usage\"}},{\"id\":\"16\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"system.process.cgroup.blkio.total.ios\",\"customLabel\":\"Block I/O\"}}],\"listeners\":{}}" + }, + "id": "Container-Memory-stats", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"metricbeat-*\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[]}" + }, + "title": "Container Block IO", + "uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}", + "version": 1, + "visState": "{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{\"customLabel\":\"Total\",\"field\":\"system.process.cgroup.blkio.total.bytes\"},\"schema\":\"metric\",\"type\":\"avg\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"customLabel\":\"I/O\",\"field\":\"system.process.cgroup.blkio.total.ios\"},\"schema\":\"metric\",\"type\":\"avg\"},{\"enabled\":true,\"id\":\"3\",\"params\":{\"customLabel\":\"Container ID\",\"field\":\"system.process.cgroup.id\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":5},\"schema\":\"bucket\",\"type\":\"terms\"},{\"enabled\":true,\"id\":\"4\",\"params\":{\"customLabel\":\"Process name\",\"field\":\"system.process.name\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":5},\"schema\":\"bucket\",\"type\":\"terms\"}],\"listeners\":{},\"params\":{\"perPage\":10,\"showMeticsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"},\"title\":\"Container Block IO\",\"type\":\"table\"}" + }, + "id": "Container-Block-IO", + "type": "visualization", + "version": 1 + }, + { + "attributes": { + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}" + }, + "optionsJSON": "{\"darkTheme\":false}", + "panelsJSON": "[{\"col\":1,\"id\":\"Container-CPU-usage\",\"panelIndex\":2,\"row\":2,\"size_x\":12,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"System-Navigation\",\"panelIndex\":3,\"row\":1,\"size_x\":12,\"size_y\":1,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Container-Memory-stats\",\"panelIndex\":4,\"row\":5,\"size_x\":12,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Container-Block-IO\",\"panelIndex\":5,\"row\":8,\"size_x\":12,\"size_y\":4,\"type\":\"visualization\"}]", + "timeRestore": false, + "title": "Metricbeat CPU/Memory per container", + "uiStateJSON": "{\"P-2\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-4\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-5\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}", + "version": 1 + }, + "id": "CPU-slash-Memory-per-container", + "type": "dashboard", + "version": 1 + } + ], + "version": "6.0.0-alpha3-SNAPSHOT" +} \ No newline at end of file diff --git a/packetbeat/_meta/kibana/dashboard/DNS-Unique-Domains.json b/packetbeat/_meta/kibana/5.x/dashboard/DNS-Unique-Domains.json similarity index 100% rename from packetbeat/_meta/kibana/dashboard/DNS-Unique-Domains.json rename to packetbeat/_meta/kibana/5.x/dashboard/DNS-Unique-Domains.json diff --git a/packetbeat/_meta/kibana/dashboard/DNS.json b/packetbeat/_meta/kibana/5.x/dashboard/DNS.json similarity index 100% rename from packetbeat/_meta/kibana/dashboard/DNS.json rename to packetbeat/_meta/kibana/5.x/dashboard/DNS.json diff --git a/packetbeat/_meta/kibana/dashboard/Packetbeat-Cassandra.json b/packetbeat/_meta/kibana/5.x/dashboard/Packetbeat-Cassandra.json similarity index 100% rename from packetbeat/_meta/kibana/dashboard/Packetbeat-Cassandra.json rename to packetbeat/_meta/kibana/5.x/dashboard/Packetbeat-Cassandra.json diff --git a/packetbeat/_meta/kibana/dashboard/Packetbeat-Dashboard.json b/packetbeat/_meta/kibana/5.x/dashboard/Packetbeat-Dashboard.json similarity index 100% rename from packetbeat/_meta/kibana/dashboard/Packetbeat-Dashboard.json rename to packetbeat/_meta/kibana/5.x/dashboard/Packetbeat-Dashboard.json diff --git a/packetbeat/_meta/kibana/dashboard/Packetbeat-Flows.json b/packetbeat/_meta/kibana/5.x/dashboard/Packetbeat-Flows.json similarity index 100% rename from packetbeat/_meta/kibana/dashboard/Packetbeat-Flows.json rename to packetbeat/_meta/kibana/5.x/dashboard/Packetbeat-Flows.json diff --git a/packetbeat/_meta/kibana/dashboard/Packetbeat-HTTP.json b/packetbeat/_meta/kibana/5.x/dashboard/Packetbeat-HTTP.json similarity index 100% rename from packetbeat/_meta/kibana/dashboard/Packetbeat-HTTP.json rename to packetbeat/_meta/kibana/5.x/dashboard/Packetbeat-HTTP.json diff --git a/packetbeat/_meta/kibana/dashboard/Packetbeat-MongoDB-performance.json b/packetbeat/_meta/kibana/5.x/dashboard/Packetbeat-MongoDB-performance.json similarity index 100% rename from packetbeat/_meta/kibana/dashboard/Packetbeat-MongoDB-performance.json rename to packetbeat/_meta/kibana/5.x/dashboard/Packetbeat-MongoDB-performance.json diff --git a/packetbeat/_meta/kibana/dashboard/Packetbeat-MySQL-performance.json b/packetbeat/_meta/kibana/5.x/dashboard/Packetbeat-MySQL-performance.json similarity index 100% rename from packetbeat/_meta/kibana/dashboard/Packetbeat-MySQL-performance.json rename to packetbeat/_meta/kibana/5.x/dashboard/Packetbeat-MySQL-performance.json diff --git a/packetbeat/_meta/kibana/dashboard/Packetbeat-NFS.json b/packetbeat/_meta/kibana/5.x/dashboard/Packetbeat-NFS.json similarity index 100% rename from packetbeat/_meta/kibana/dashboard/Packetbeat-NFS.json rename to packetbeat/_meta/kibana/5.x/dashboard/Packetbeat-NFS.json diff --git a/packetbeat/_meta/kibana/dashboard/Packetbeat-PgSQL-performance.json b/packetbeat/_meta/kibana/5.x/dashboard/Packetbeat-PgSQL-performance.json similarity index 100% rename from packetbeat/_meta/kibana/dashboard/Packetbeat-PgSQL-performance.json rename to packetbeat/_meta/kibana/5.x/dashboard/Packetbeat-PgSQL-performance.json diff --git a/packetbeat/_meta/kibana/dashboard/Packetbeat-Thrift-performance.json b/packetbeat/_meta/kibana/5.x/dashboard/Packetbeat-Thrift-performance.json similarity index 100% rename from packetbeat/_meta/kibana/dashboard/Packetbeat-Thrift-performance.json rename to packetbeat/_meta/kibana/5.x/dashboard/Packetbeat-Thrift-performance.json diff --git a/packetbeat/_meta/kibana/5.x/index-pattern/packetbeat.json b/packetbeat/_meta/kibana/5.x/index-pattern/packetbeat.json new file mode 100644 index 00000000000..d5af3376c66 --- /dev/null +++ b/packetbeat/_meta/kibana/5.x/index-pattern/packetbeat.json @@ -0,0 +1,6 @@ +{ + "fields": "[{\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.hostname\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.timezone\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"@timestamp\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"tags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"fields\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"error.message\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"error.code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"error.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.provider\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.instance_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.instance_name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.machine_type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.availability_zone\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.project_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.region\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.image\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.labels\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.pod.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.namespace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.labels\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.annotations\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.container.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.container.image\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"server\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"client_server\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"service\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"client_service\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"ip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"client_ip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"real_ip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"client_geoip.location\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"client_port\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"transport\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"port\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"proc\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"client_proc\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"release\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"start_time\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"last_time\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"final\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"flow_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"vlan\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"outer_vlan\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.mac\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.ip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.ip_location\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.outer_ip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.outer_ip_location\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.ipv6\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.ipv6_location\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.outer_ipv6\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.outer_ipv6_location\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.port\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.stats.net_packets_total\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.stats.net_bytes_total\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.mac\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.ip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.ip_location\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.outer_ip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.outer_ip_location\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.ipv6\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.ipv6_location\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.outer_ipv6\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.outer_ipv6_location\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.port\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.stats.net_packets_total\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.stats.net_bytes_total\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"connection_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"direction\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"status\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"method\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"resource\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"path\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"query\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"params\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"notes\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"request\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"response\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"responsetime\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cpu_time\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"bytes_in\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"bytes_out\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dnstime\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"connecttime\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"loadtime\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"domloadtime\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.reply-code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.reply-text\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.class-id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.method-id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.exchange\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.exchange-type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.passive\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.durable\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.exclusive\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.auto-delete\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.no-wait\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.consumer-tag\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.delivery-tag\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.message-count\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.consumer-count\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.routing-key\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.no-ack\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.no-local\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.if-unused\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.if-empty\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.queue\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.redelivered\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.multiple\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.arguments\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.mandatory\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.immediate\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.content-type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.content-encoding\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.headers\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.delivery-mode\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.priority\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.correlation-id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.reply-to\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.expiration\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.message-id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.timestamp\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.user-id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.app-id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.request.headers.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.request.headers.flags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.request.headers.stream\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.request.headers.op\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.request.headers.length\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.request.query\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.headers.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.headers.flags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.headers.stream\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.headers.op\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.headers.length\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.rows.num_rows\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.rows.meta.keyspace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.rows.meta.table\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.rows.meta.flags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.rows.meta.col_count\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.rows.meta.pkey_columns\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.rows.meta.paging_state\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.keyspace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.schema_change.change\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.schema_change.keyspace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.schema_change.table\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.schema_change.object\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.schema_change.target\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.schema_change.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.schema_change.args\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.prepared_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.req_meta.keyspace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.req_meta.table\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.req_meta.flags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.req_meta.col_count\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.req_meta.pkey_columns\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.req_meta.paging_state\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.resp_meta.keyspace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.resp_meta.table\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.resp_meta.flags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.resp_meta.col_count\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.resp_meta.pkey_columns\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.resp_meta.paging_state\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.supported\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.authentication.class\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.warnings\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.change\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.host\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.port\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.schema_change.change\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.schema_change.keyspace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.schema_change.table\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.schema_change.object\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.schema_change.target\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.schema_change.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.schema_change.args\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.msg\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.read_consistency\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.required\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.alive\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.received\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.blockfor\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.write_type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.data_present\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.keyspace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.table\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.stmt_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.num_failures\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.function\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.arg_types\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.op_code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.flags.authoritative\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.flags.recursion_available\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.flags.recursion_desired\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.flags.authentic_data\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.flags.checking_disabled\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.flags.truncated_response\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.response_code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.question.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.question.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.question.class\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.question.etld_plus_one\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.answers\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.answers_count\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.answers.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.answers.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.answers.class\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.answers.ttl\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.answers.data\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.authorities\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.authorities_count\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.authorities.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.authorities.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.authorities.class\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.additionals\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.additionals_count\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.additionals.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.additionals.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.additionals.class\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.additionals.ttl\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.additionals.data\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.opt.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.opt.do\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.opt.ext_rcode\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.opt.udp_size\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.request.params\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.request.headers\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"http.request.body\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.response.code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.response.phrase\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.response.headers\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.response.body\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp.request.message\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp.request.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp.request.code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp.response.message\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp.response.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp.response.code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.protocol_type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.line\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.command\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.command\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.error_msg\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.opcode\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.opcode\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.opcode_value\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.opcode_value\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.opaque\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.opaque\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.vbucket\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.status\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.status_code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.keys\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.keys\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.count_values\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.count_values\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.values\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.values\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.bytes\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.bytes\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.delta\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.initial\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.verbosity\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.raw_args\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.source_class\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.dest_class\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.automove\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.flags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.flags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.exptime\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.sleep_us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.value\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.noreply\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.quiet\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.cas_unique\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.cas_unique\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.stats\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.error\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.fullCollectionName\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.numberToSkip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.numberToReturn\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.numberReturned\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.startingFrom\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.query\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.returnFieldsSelector\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.selector\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.update\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.cursorId\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.xid\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.call_size\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.reply_size\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.status\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.time\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.time_str\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.auth_flavor\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.cred.uid\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.cred.gid\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.cred.gids\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.cred.stamp\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.cred.machinename\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mysql.iserror\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mysql.affected_rows\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mysql.insert_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mysql.num_fields\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mysql.num_rows\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mysql.query\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mysql.error_code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mysql.error_message\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"nfs.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"nfs.minor_version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"nfs.tag\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"nfs.opcode\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"nfs.status\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"pgsql.query\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"pgsql.iserror\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"pgsql.error_code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"pgsql.error_message\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"pgsql.error_severity\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"pgsql.num_fields\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"pgsql.num_rows\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"redis.return_value\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"redis.error\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"thrift.params\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"thrift.service\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"thrift.return_value\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"thrift.exceptions\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_id\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"_type\", \"searchable\": true, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_index\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_score\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"number\", \"scripted\": false}]", + "fieldFormatMap": "{\"client_ip\": {\"id\": \"dotted notation.\"}, \"memcache.request.bytes\": {\"id\": \"bytes\"}, \"start_time\": {\"id\": \"YYYY-MM-DDTHH:MM:SS.milliZ\"}, \"real_ip\": {\"id\": \"Dotted notation.\"}, \"ip\": {\"id\": \"dotted notation.\"}, \"@timestamp\": {\"id\": \"date\"}, \"bytes_out\": {\"id\": \"bytes\"}, \"last_time\": {\"id\": \"YYYY-MM-DDTHH:MM:SS.milliZ\"}, \"client_port\": {\"id\": \"dotted notation.\"}, \"memcache.response.bytes\": {\"id\": \"bytes\"}, \"bytes_in\": {\"id\": \"bytes\"}, \"port\": {\"id\": \"dotted notation.\"}}", + "timeFieldName": "@timestamp", + "title": "packetbeat-*" +} \ No newline at end of file diff --git a/packetbeat/_meta/kibana/search/Cache-transactions.json b/packetbeat/_meta/kibana/5.x/search/Cache-transactions.json similarity index 100% rename from packetbeat/_meta/kibana/search/Cache-transactions.json rename to packetbeat/_meta/kibana/5.x/search/Cache-transactions.json diff --git a/packetbeat/_meta/kibana/search/Cassandra-QueryView.json b/packetbeat/_meta/kibana/5.x/search/Cassandra-QueryView.json similarity index 100% rename from packetbeat/_meta/kibana/search/Cassandra-QueryView.json rename to packetbeat/_meta/kibana/5.x/search/Cassandra-QueryView.json diff --git a/packetbeat/_meta/kibana/search/DB-transactions.json b/packetbeat/_meta/kibana/5.x/search/DB-transactions.json similarity index 100% rename from packetbeat/_meta/kibana/search/DB-transactions.json rename to packetbeat/_meta/kibana/5.x/search/DB-transactions.json diff --git a/packetbeat/_meta/kibana/search/DNS.json b/packetbeat/_meta/kibana/5.x/search/DNS.json similarity index 100% rename from packetbeat/_meta/kibana/search/DNS.json rename to packetbeat/_meta/kibana/5.x/search/DNS.json diff --git a/packetbeat/_meta/kibana/search/HTTP-errors.json b/packetbeat/_meta/kibana/5.x/search/HTTP-errors.json similarity index 100% rename from packetbeat/_meta/kibana/search/HTTP-errors.json rename to packetbeat/_meta/kibana/5.x/search/HTTP-errors.json diff --git a/packetbeat/_meta/kibana/search/MongoDB-errors.json b/packetbeat/_meta/kibana/5.x/search/MongoDB-errors.json similarity index 100% rename from packetbeat/_meta/kibana/search/MongoDB-errors.json rename to packetbeat/_meta/kibana/5.x/search/MongoDB-errors.json diff --git a/packetbeat/_meta/kibana/search/MongoDB-transactions-with-write-concern-0.json b/packetbeat/_meta/kibana/5.x/search/MongoDB-transactions-with-write-concern-0.json similarity index 100% rename from packetbeat/_meta/kibana/search/MongoDB-transactions-with-write-concern-0.json rename to packetbeat/_meta/kibana/5.x/search/MongoDB-transactions-with-write-concern-0.json diff --git a/packetbeat/_meta/kibana/search/MongoDB-transactions.json b/packetbeat/_meta/kibana/5.x/search/MongoDB-transactions.json similarity index 100% rename from packetbeat/_meta/kibana/search/MongoDB-transactions.json rename to packetbeat/_meta/kibana/5.x/search/MongoDB-transactions.json diff --git a/packetbeat/_meta/kibana/search/MySQL-Transactions.json b/packetbeat/_meta/kibana/5.x/search/MySQL-Transactions.json similarity index 100% rename from packetbeat/_meta/kibana/search/MySQL-Transactions.json rename to packetbeat/_meta/kibana/5.x/search/MySQL-Transactions.json diff --git a/packetbeat/_meta/kibana/search/MySQL-errors.json b/packetbeat/_meta/kibana/5.x/search/MySQL-errors.json similarity index 100% rename from packetbeat/_meta/kibana/search/MySQL-errors.json rename to packetbeat/_meta/kibana/5.x/search/MySQL-errors.json diff --git a/packetbeat/_meta/kibana/search/NFS-errors-search.json b/packetbeat/_meta/kibana/5.x/search/NFS-errors-search.json similarity index 100% rename from packetbeat/_meta/kibana/search/NFS-errors-search.json rename to packetbeat/_meta/kibana/5.x/search/NFS-errors-search.json diff --git a/packetbeat/_meta/kibana/search/Packetbeat-Flows-Search.json b/packetbeat/_meta/kibana/5.x/search/Packetbeat-Flows-Search.json similarity index 100% rename from packetbeat/_meta/kibana/search/Packetbeat-Flows-Search.json rename to packetbeat/_meta/kibana/5.x/search/Packetbeat-Flows-Search.json diff --git a/packetbeat/_meta/kibana/search/Packetbeat-Search.json b/packetbeat/_meta/kibana/5.x/search/Packetbeat-Search.json similarity index 100% rename from packetbeat/_meta/kibana/search/Packetbeat-Search.json rename to packetbeat/_meta/kibana/5.x/search/Packetbeat-Search.json diff --git a/packetbeat/_meta/kibana/search/PgSQL-errors.json b/packetbeat/_meta/kibana/5.x/search/PgSQL-errors.json similarity index 100% rename from packetbeat/_meta/kibana/search/PgSQL-errors.json rename to packetbeat/_meta/kibana/5.x/search/PgSQL-errors.json diff --git a/packetbeat/_meta/kibana/search/PgSQL-transactions.json b/packetbeat/_meta/kibana/5.x/search/PgSQL-transactions.json similarity index 100% rename from packetbeat/_meta/kibana/search/PgSQL-transactions.json rename to packetbeat/_meta/kibana/5.x/search/PgSQL-transactions.json diff --git a/packetbeat/_meta/kibana/search/RPC-transactions.json b/packetbeat/_meta/kibana/5.x/search/RPC-transactions.json similarity index 100% rename from packetbeat/_meta/kibana/search/RPC-transactions.json rename to packetbeat/_meta/kibana/5.x/search/RPC-transactions.json diff --git a/packetbeat/_meta/kibana/search/Thrift-errors.json b/packetbeat/_meta/kibana/5.x/search/Thrift-errors.json similarity index 100% rename from packetbeat/_meta/kibana/search/Thrift-errors.json rename to packetbeat/_meta/kibana/5.x/search/Thrift-errors.json diff --git a/packetbeat/_meta/kibana/search/Thrift-transactions.json b/packetbeat/_meta/kibana/5.x/search/Thrift-transactions.json similarity index 100% rename from packetbeat/_meta/kibana/search/Thrift-transactions.json rename to packetbeat/_meta/kibana/5.x/search/Thrift-transactions.json diff --git a/packetbeat/_meta/kibana/search/Transactions-errors.json b/packetbeat/_meta/kibana/5.x/search/Transactions-errors.json similarity index 100% rename from packetbeat/_meta/kibana/search/Transactions-errors.json rename to packetbeat/_meta/kibana/5.x/search/Transactions-errors.json diff --git a/packetbeat/_meta/kibana/search/Web-transactions.json b/packetbeat/_meta/kibana/5.x/search/Web-transactions.json similarity index 100% rename from packetbeat/_meta/kibana/search/Web-transactions.json rename to packetbeat/_meta/kibana/5.x/search/Web-transactions.json diff --git a/packetbeat/_meta/kibana/search/nfs.json b/packetbeat/_meta/kibana/5.x/search/nfs.json similarity index 100% rename from packetbeat/_meta/kibana/search/nfs.json rename to packetbeat/_meta/kibana/5.x/search/nfs.json diff --git a/packetbeat/_meta/kibana/visualization/Bytes-Transferred-per-Domain.json b/packetbeat/_meta/kibana/5.x/visualization/Bytes-Transferred-per-Domain.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Bytes-Transferred-per-Domain.json rename to packetbeat/_meta/kibana/5.x/visualization/Bytes-Transferred-per-Domain.json diff --git a/packetbeat/_meta/kibana/visualization/Cache-transactions.json b/packetbeat/_meta/kibana/5.x/visualization/Cache-transactions.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Cache-transactions.json rename to packetbeat/_meta/kibana/5.x/visualization/Cache-transactions.json diff --git a/packetbeat/_meta/kibana/visualization/Cassandra-Ops.json b/packetbeat/_meta/kibana/5.x/visualization/Cassandra-Ops.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Cassandra-Ops.json rename to packetbeat/_meta/kibana/5.x/visualization/Cassandra-Ops.json diff --git a/packetbeat/_meta/kibana/visualization/Cassandra-RequestCount.json b/packetbeat/_meta/kibana/5.x/visualization/Cassandra-RequestCount.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Cassandra-RequestCount.json rename to packetbeat/_meta/kibana/5.x/visualization/Cassandra-RequestCount.json diff --git a/packetbeat/_meta/kibana/visualization/Cassandra-RequestCountByType.json b/packetbeat/_meta/kibana/5.x/visualization/Cassandra-RequestCountByType.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Cassandra-RequestCountByType.json rename to packetbeat/_meta/kibana/5.x/visualization/Cassandra-RequestCountByType.json diff --git a/packetbeat/_meta/kibana/visualization/Cassandra-RequestCountStackByType.json b/packetbeat/_meta/kibana/5.x/visualization/Cassandra-RequestCountStackByType.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Cassandra-RequestCountStackByType.json rename to packetbeat/_meta/kibana/5.x/visualization/Cassandra-RequestCountStackByType.json diff --git a/packetbeat/_meta/kibana/visualization/Cassandra-ResponseCountByType.json b/packetbeat/_meta/kibana/5.x/visualization/Cassandra-ResponseCountByType.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Cassandra-ResponseCountByType.json rename to packetbeat/_meta/kibana/5.x/visualization/Cassandra-ResponseCountByType.json diff --git a/packetbeat/_meta/kibana/visualization/Cassandra-ResponseCountStackByType.json b/packetbeat/_meta/kibana/5.x/visualization/Cassandra-ResponseCountStackByType.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Cassandra-ResponseCountStackByType.json rename to packetbeat/_meta/kibana/5.x/visualization/Cassandra-ResponseCountStackByType.json diff --git a/packetbeat/_meta/kibana/visualization/Cassandra-ResponseKeyspace.json b/packetbeat/_meta/kibana/5.x/visualization/Cassandra-ResponseKeyspace.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Cassandra-ResponseKeyspace.json rename to packetbeat/_meta/kibana/5.x/visualization/Cassandra-ResponseKeyspace.json diff --git a/packetbeat/_meta/kibana/visualization/Cassandra-ResponseTime.json b/packetbeat/_meta/kibana/5.x/visualization/Cassandra-ResponseTime.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Cassandra-ResponseTime.json rename to packetbeat/_meta/kibana/5.x/visualization/Cassandra-ResponseTime.json diff --git a/packetbeat/_meta/kibana/visualization/Cassandra-ResponseType.json b/packetbeat/_meta/kibana/5.x/visualization/Cassandra-ResponseType.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Cassandra-ResponseType.json rename to packetbeat/_meta/kibana/5.x/visualization/Cassandra-ResponseType.json diff --git a/packetbeat/_meta/kibana/visualization/Client-locations.json b/packetbeat/_meta/kibana/5.x/visualization/Client-locations.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Client-locations.json rename to packetbeat/_meta/kibana/5.x/visualization/Client-locations.json diff --git a/packetbeat/_meta/kibana/visualization/Connections-over-time.json b/packetbeat/_meta/kibana/5.x/visualization/Connections-over-time.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Connections-over-time.json rename to packetbeat/_meta/kibana/5.x/visualization/Connections-over-time.json diff --git a/packetbeat/_meta/kibana/visualization/DB-transactions.json b/packetbeat/_meta/kibana/5.x/visualization/DB-transactions.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/DB-transactions.json rename to packetbeat/_meta/kibana/5.x/visualization/DB-transactions.json diff --git a/packetbeat/_meta/kibana/visualization/DNS-Count-and-Response-Time.json b/packetbeat/_meta/kibana/5.x/visualization/DNS-Count-and-Response-Time.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/DNS-Count-and-Response-Time.json rename to packetbeat/_meta/kibana/5.x/visualization/DNS-Count-and-Response-Time.json diff --git a/packetbeat/_meta/kibana/visualization/DNS-Query-Summary.json b/packetbeat/_meta/kibana/5.x/visualization/DNS-Query-Summary.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/DNS-Query-Summary.json rename to packetbeat/_meta/kibana/5.x/visualization/DNS-Query-Summary.json diff --git a/packetbeat/_meta/kibana/visualization/DNS-Question-Types.json b/packetbeat/_meta/kibana/5.x/visualization/DNS-Question-Types.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/DNS-Question-Types.json rename to packetbeat/_meta/kibana/5.x/visualization/DNS-Question-Types.json diff --git a/packetbeat/_meta/kibana/visualization/DNS-Request-Status-Over-Time.json b/packetbeat/_meta/kibana/5.x/visualization/DNS-Request-Status-Over-Time.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/DNS-Request-Status-Over-Time.json rename to packetbeat/_meta/kibana/5.x/visualization/DNS-Request-Status-Over-Time.json diff --git a/packetbeat/_meta/kibana/visualization/DNS-Response-Codes.json b/packetbeat/_meta/kibana/5.x/visualization/DNS-Response-Codes.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/DNS-Response-Codes.json rename to packetbeat/_meta/kibana/5.x/visualization/DNS-Response-Codes.json diff --git a/packetbeat/_meta/kibana/visualization/DNS-Top-10-Questions.json b/packetbeat/_meta/kibana/5.x/visualization/DNS-Top-10-Questions.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/DNS-Top-10-Questions.json rename to packetbeat/_meta/kibana/5.x/visualization/DNS-Top-10-Questions.json diff --git a/packetbeat/_meta/kibana/visualization/Errors-count-over-time.json b/packetbeat/_meta/kibana/5.x/visualization/Errors-count-over-time.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Errors-count-over-time.json rename to packetbeat/_meta/kibana/5.x/visualization/Errors-count-over-time.json diff --git a/packetbeat/_meta/kibana/visualization/Errors-vs-successful-transactions.json b/packetbeat/_meta/kibana/5.x/visualization/Errors-vs-successful-transactions.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Errors-vs-successful-transactions.json rename to packetbeat/_meta/kibana/5.x/visualization/Errors-vs-successful-transactions.json diff --git a/packetbeat/_meta/kibana/visualization/Evolution-of-the-CPU-times-per-process.json b/packetbeat/_meta/kibana/5.x/visualization/Evolution-of-the-CPU-times-per-process.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Evolution-of-the-CPU-times-per-process.json rename to packetbeat/_meta/kibana/5.x/visualization/Evolution-of-the-CPU-times-per-process.json diff --git a/packetbeat/_meta/kibana/visualization/HTTP-codes-for-the-top-queries.json b/packetbeat/_meta/kibana/5.x/visualization/HTTP-codes-for-the-top-queries.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/HTTP-codes-for-the-top-queries.json rename to packetbeat/_meta/kibana/5.x/visualization/HTTP-codes-for-the-top-queries.json diff --git a/packetbeat/_meta/kibana/visualization/HTTP-error-codes-evolution.json b/packetbeat/_meta/kibana/5.x/visualization/HTTP-error-codes-evolution.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/HTTP-error-codes-evolution.json rename to packetbeat/_meta/kibana/5.x/visualization/HTTP-error-codes-evolution.json diff --git a/packetbeat/_meta/kibana/visualization/HTTP-error-codes.json b/packetbeat/_meta/kibana/5.x/visualization/HTTP-error-codes.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/HTTP-error-codes.json rename to packetbeat/_meta/kibana/5.x/visualization/HTTP-error-codes.json diff --git a/packetbeat/_meta/kibana/visualization/Latency-histogram.json b/packetbeat/_meta/kibana/5.x/visualization/Latency-histogram.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Latency-histogram.json rename to packetbeat/_meta/kibana/5.x/visualization/Latency-histogram.json diff --git a/packetbeat/_meta/kibana/visualization/MongoDB-commands.json b/packetbeat/_meta/kibana/5.x/visualization/MongoDB-commands.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/MongoDB-commands.json rename to packetbeat/_meta/kibana/5.x/visualization/MongoDB-commands.json diff --git a/packetbeat/_meta/kibana/visualization/MongoDB-errors-per-collection.json b/packetbeat/_meta/kibana/5.x/visualization/MongoDB-errors-per-collection.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/MongoDB-errors-per-collection.json rename to packetbeat/_meta/kibana/5.x/visualization/MongoDB-errors-per-collection.json diff --git a/packetbeat/_meta/kibana/visualization/MongoDB-errors.json b/packetbeat/_meta/kibana/5.x/visualization/MongoDB-errors.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/MongoDB-errors.json rename to packetbeat/_meta/kibana/5.x/visualization/MongoDB-errors.json diff --git a/packetbeat/_meta/kibana/visualization/MongoDB-in-slash-out-throughput.json b/packetbeat/_meta/kibana/5.x/visualization/MongoDB-in-slash-out-throughput.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/MongoDB-in-slash-out-throughput.json rename to packetbeat/_meta/kibana/5.x/visualization/MongoDB-in-slash-out-throughput.json diff --git a/packetbeat/_meta/kibana/visualization/MongoDB-response-times-and-count.json b/packetbeat/_meta/kibana/5.x/visualization/MongoDB-response-times-and-count.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/MongoDB-response-times-and-count.json rename to packetbeat/_meta/kibana/5.x/visualization/MongoDB-response-times-and-count.json diff --git a/packetbeat/_meta/kibana/visualization/MongoDB-response-times-by-collection.json b/packetbeat/_meta/kibana/5.x/visualization/MongoDB-response-times-by-collection.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/MongoDB-response-times-by-collection.json rename to packetbeat/_meta/kibana/5.x/visualization/MongoDB-response-times-by-collection.json diff --git a/packetbeat/_meta/kibana/visualization/Most-frequent-MySQL-queries.json b/packetbeat/_meta/kibana/5.x/visualization/Most-frequent-MySQL-queries.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Most-frequent-MySQL-queries.json rename to packetbeat/_meta/kibana/5.x/visualization/Most-frequent-MySQL-queries.json diff --git a/packetbeat/_meta/kibana/visualization/Most-frequent-PgSQL-queries.json b/packetbeat/_meta/kibana/5.x/visualization/Most-frequent-PgSQL-queries.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Most-frequent-PgSQL-queries.json rename to packetbeat/_meta/kibana/5.x/visualization/Most-frequent-PgSQL-queries.json diff --git a/packetbeat/_meta/kibana/visualization/MySQL-Errors.json b/packetbeat/_meta/kibana/5.x/visualization/MySQL-Errors.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/MySQL-Errors.json rename to packetbeat/_meta/kibana/5.x/visualization/MySQL-Errors.json diff --git a/packetbeat/_meta/kibana/visualization/MySQL-Methods.json b/packetbeat/_meta/kibana/5.x/visualization/MySQL-Methods.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/MySQL-Methods.json rename to packetbeat/_meta/kibana/5.x/visualization/MySQL-Methods.json diff --git a/packetbeat/_meta/kibana/visualization/MySQL-Reads-vs-Writes.json b/packetbeat/_meta/kibana/5.x/visualization/MySQL-Reads-vs-Writes.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/MySQL-Reads-vs-Writes.json rename to packetbeat/_meta/kibana/5.x/visualization/MySQL-Reads-vs-Writes.json diff --git a/packetbeat/_meta/kibana/visualization/MySQL-throughput.json b/packetbeat/_meta/kibana/5.x/visualization/MySQL-throughput.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/MySQL-throughput.json rename to packetbeat/_meta/kibana/5.x/visualization/MySQL-throughput.json diff --git a/packetbeat/_meta/kibana/visualization/Mysql-response-times-percentiles.json b/packetbeat/_meta/kibana/5.x/visualization/Mysql-response-times-percentiles.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Mysql-response-times-percentiles.json rename to packetbeat/_meta/kibana/5.x/visualization/Mysql-response-times-percentiles.json diff --git a/packetbeat/_meta/kibana/visualization/NFS-bytes-in-slash-out.json b/packetbeat/_meta/kibana/5.x/visualization/NFS-bytes-in-slash-out.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/NFS-bytes-in-slash-out.json rename to packetbeat/_meta/kibana/5.x/visualization/NFS-bytes-in-slash-out.json diff --git a/packetbeat/_meta/kibana/visualization/NFS-clients-pie-chart.json b/packetbeat/_meta/kibana/5.x/visualization/NFS-clients-pie-chart.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/NFS-clients-pie-chart.json rename to packetbeat/_meta/kibana/5.x/visualization/NFS-clients-pie-chart.json diff --git a/packetbeat/_meta/kibana/visualization/NFS-errors.json b/packetbeat/_meta/kibana/5.x/visualization/NFS-errors.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/NFS-errors.json rename to packetbeat/_meta/kibana/5.x/visualization/NFS-errors.json diff --git a/packetbeat/_meta/kibana/visualization/NFS-operation-table.json b/packetbeat/_meta/kibana/5.x/visualization/NFS-operation-table.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/NFS-operation-table.json rename to packetbeat/_meta/kibana/5.x/visualization/NFS-operation-table.json diff --git a/packetbeat/_meta/kibana/visualization/NFS-operations-area-chart.json b/packetbeat/_meta/kibana/5.x/visualization/NFS-operations-area-chart.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/NFS-operations-area-chart.json rename to packetbeat/_meta/kibana/5.x/visualization/NFS-operations-area-chart.json diff --git a/packetbeat/_meta/kibana/visualization/NFS-response-times.json b/packetbeat/_meta/kibana/5.x/visualization/NFS-response-times.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/NFS-response-times.json rename to packetbeat/_meta/kibana/5.x/visualization/NFS-response-times.json diff --git a/packetbeat/_meta/kibana/visualization/NFS-top-group-pie-chart.json b/packetbeat/_meta/kibana/5.x/visualization/NFS-top-group-pie-chart.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/NFS-top-group-pie-chart.json rename to packetbeat/_meta/kibana/5.x/visualization/NFS-top-group-pie-chart.json diff --git a/packetbeat/_meta/kibana/visualization/NFS-top-users-pie-chart.json b/packetbeat/_meta/kibana/5.x/visualization/NFS-top-users-pie-chart.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/NFS-top-users-pie-chart.json rename to packetbeat/_meta/kibana/5.x/visualization/NFS-top-users-pie-chart.json diff --git a/packetbeat/_meta/kibana/visualization/Navigation.json b/packetbeat/_meta/kibana/5.x/visualization/Navigation.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Navigation.json rename to packetbeat/_meta/kibana/5.x/visualization/Navigation.json diff --git a/packetbeat/_meta/kibana/visualization/Network-traffic-between-your-hosts.json b/packetbeat/_meta/kibana/5.x/visualization/Network-traffic-between-your-hosts.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Network-traffic-between-your-hosts.json rename to packetbeat/_meta/kibana/5.x/visualization/Network-traffic-between-your-hosts.json diff --git a/packetbeat/_meta/kibana/visualization/Number-of-MongoDB-transactions-with-writeConcern-w-equal-0.json b/packetbeat/_meta/kibana/5.x/visualization/Number-of-MongoDB-transactions-with-writeConcern-w-equal-0.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Number-of-MongoDB-transactions-with-writeConcern-w-equal-0.json rename to packetbeat/_meta/kibana/5.x/visualization/Number-of-MongoDB-transactions-with-writeConcern-w-equal-0.json diff --git a/packetbeat/_meta/kibana/visualization/PgSQL-Errors.json b/packetbeat/_meta/kibana/5.x/visualization/PgSQL-Errors.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/PgSQL-Errors.json rename to packetbeat/_meta/kibana/5.x/visualization/PgSQL-Errors.json diff --git a/packetbeat/_meta/kibana/visualization/PgSQL-Methods.json b/packetbeat/_meta/kibana/5.x/visualization/PgSQL-Methods.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/PgSQL-Methods.json rename to packetbeat/_meta/kibana/5.x/visualization/PgSQL-Methods.json diff --git a/packetbeat/_meta/kibana/visualization/PgSQL-Reads-vs-Writes.json b/packetbeat/_meta/kibana/5.x/visualization/PgSQL-Reads-vs-Writes.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/PgSQL-Reads-vs-Writes.json rename to packetbeat/_meta/kibana/5.x/visualization/PgSQL-Reads-vs-Writes.json diff --git a/packetbeat/_meta/kibana/visualization/PgSQL-response-times-percentiles.json b/packetbeat/_meta/kibana/5.x/visualization/PgSQL-response-times-percentiles.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/PgSQL-response-times-percentiles.json rename to packetbeat/_meta/kibana/5.x/visualization/PgSQL-response-times-percentiles.json diff --git a/packetbeat/_meta/kibana/visualization/PgSQL-throughput.json b/packetbeat/_meta/kibana/5.x/visualization/PgSQL-throughput.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/PgSQL-throughput.json rename to packetbeat/_meta/kibana/5.x/visualization/PgSQL-throughput.json diff --git a/packetbeat/_meta/kibana/visualization/RPC-transactions.json b/packetbeat/_meta/kibana/5.x/visualization/RPC-transactions.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/RPC-transactions.json rename to packetbeat/_meta/kibana/5.x/visualization/RPC-transactions.json diff --git a/packetbeat/_meta/kibana/visualization/Reads-versus-Writes.json b/packetbeat/_meta/kibana/5.x/visualization/Reads-versus-Writes.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Reads-versus-Writes.json rename to packetbeat/_meta/kibana/5.x/visualization/Reads-versus-Writes.json diff --git a/packetbeat/_meta/kibana/visualization/Response-times-percentiles.json b/packetbeat/_meta/kibana/5.x/visualization/Response-times-percentiles.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Response-times-percentiles.json rename to packetbeat/_meta/kibana/5.x/visualization/Response-times-percentiles.json diff --git a/packetbeat/_meta/kibana/visualization/Response-times-repartition.json b/packetbeat/_meta/kibana/5.x/visualization/Response-times-repartition.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Response-times-repartition.json rename to packetbeat/_meta/kibana/5.x/visualization/Response-times-repartition.json diff --git a/packetbeat/_meta/kibana/visualization/Slowest-MySQL-queries.json b/packetbeat/_meta/kibana/5.x/visualization/Slowest-MySQL-queries.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Slowest-MySQL-queries.json rename to packetbeat/_meta/kibana/5.x/visualization/Slowest-MySQL-queries.json diff --git a/packetbeat/_meta/kibana/visualization/Slowest-PgSQL-queries.json b/packetbeat/_meta/kibana/5.x/visualization/Slowest-PgSQL-queries.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Slowest-PgSQL-queries.json rename to packetbeat/_meta/kibana/5.x/visualization/Slowest-PgSQL-queries.json diff --git a/packetbeat/_meta/kibana/visualization/Slowest-Thrift-RPC-methods.json b/packetbeat/_meta/kibana/5.x/visualization/Slowest-Thrift-RPC-methods.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Slowest-Thrift-RPC-methods.json rename to packetbeat/_meta/kibana/5.x/visualization/Slowest-Thrift-RPC-methods.json diff --git a/packetbeat/_meta/kibana/visualization/Thrift-RPC-Errors.json b/packetbeat/_meta/kibana/5.x/visualization/Thrift-RPC-Errors.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Thrift-RPC-Errors.json rename to packetbeat/_meta/kibana/5.x/visualization/Thrift-RPC-Errors.json diff --git a/packetbeat/_meta/kibana/visualization/Thrift-requests-per-minute.json b/packetbeat/_meta/kibana/5.x/visualization/Thrift-requests-per-minute.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Thrift-requests-per-minute.json rename to packetbeat/_meta/kibana/5.x/visualization/Thrift-requests-per-minute.json diff --git a/packetbeat/_meta/kibana/visualization/Thrift-response-times-percentiles.json b/packetbeat/_meta/kibana/5.x/visualization/Thrift-response-times-percentiles.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Thrift-response-times-percentiles.json rename to packetbeat/_meta/kibana/5.x/visualization/Thrift-response-times-percentiles.json diff --git a/packetbeat/_meta/kibana/visualization/Top-10-HTTP-requests.json b/packetbeat/_meta/kibana/5.x/visualization/Top-10-HTTP-requests.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Top-10-HTTP-requests.json rename to packetbeat/_meta/kibana/5.x/visualization/Top-10-HTTP-requests.json diff --git a/packetbeat/_meta/kibana/visualization/Top-Thrift-RPC-calls-with-errors.json b/packetbeat/_meta/kibana/5.x/visualization/Top-Thrift-RPC-calls-with-errors.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Top-Thrift-RPC-calls-with-errors.json rename to packetbeat/_meta/kibana/5.x/visualization/Top-Thrift-RPC-calls-with-errors.json diff --git a/packetbeat/_meta/kibana/visualization/Top-Thrift-RPC-methods.json b/packetbeat/_meta/kibana/5.x/visualization/Top-Thrift-RPC-methods.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Top-Thrift-RPC-methods.json rename to packetbeat/_meta/kibana/5.x/visualization/Top-Thrift-RPC-methods.json diff --git a/packetbeat/_meta/kibana/visualization/Top-hosts-creating-traffic.json b/packetbeat/_meta/kibana/5.x/visualization/Top-hosts-creating-traffic.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Top-hosts-creating-traffic.json rename to packetbeat/_meta/kibana/5.x/visualization/Top-hosts-creating-traffic.json diff --git a/packetbeat/_meta/kibana/visualization/Top-hosts-receiving-traffic.json b/packetbeat/_meta/kibana/5.x/visualization/Top-hosts-receiving-traffic.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Top-hosts-receiving-traffic.json rename to packetbeat/_meta/kibana/5.x/visualization/Top-hosts-receiving-traffic.json diff --git a/packetbeat/_meta/kibana/visualization/Top-slowest-MongoDB-queries.json b/packetbeat/_meta/kibana/5.x/visualization/Top-slowest-MongoDB-queries.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Top-slowest-MongoDB-queries.json rename to packetbeat/_meta/kibana/5.x/visualization/Top-slowest-MongoDB-queries.json diff --git a/packetbeat/_meta/kibana/visualization/Total-number-of-HTTP-transactions.json b/packetbeat/_meta/kibana/5.x/visualization/Total-number-of-HTTP-transactions.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Total-number-of-HTTP-transactions.json rename to packetbeat/_meta/kibana/5.x/visualization/Total-number-of-HTTP-transactions.json diff --git a/packetbeat/_meta/kibana/visualization/Total-time-spent-in-each-MongoDB-collection.json b/packetbeat/_meta/kibana/5.x/visualization/Total-time-spent-in-each-MongoDB-collection.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Total-time-spent-in-each-MongoDB-collection.json rename to packetbeat/_meta/kibana/5.x/visualization/Total-time-spent-in-each-MongoDB-collection.json diff --git a/packetbeat/_meta/kibana/visualization/Unique-FQDNs-per-eTLD 1-Table.json b/packetbeat/_meta/kibana/5.x/visualization/Unique-FQDNs-per-eTLD 1-Table.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Unique-FQDNs-per-eTLD 1-Table.json rename to packetbeat/_meta/kibana/5.x/visualization/Unique-FQDNs-per-eTLD 1-Table.json diff --git a/packetbeat/_meta/kibana/visualization/Unique-FQDNs-per-eTLD 1.json b/packetbeat/_meta/kibana/5.x/visualization/Unique-FQDNs-per-eTLD 1.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Unique-FQDNs-per-eTLD 1.json rename to packetbeat/_meta/kibana/5.x/visualization/Unique-FQDNs-per-eTLD 1.json diff --git a/packetbeat/_meta/kibana/visualization/Web-transactions.json b/packetbeat/_meta/kibana/5.x/visualization/Web-transactions.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/Web-transactions.json rename to packetbeat/_meta/kibana/5.x/visualization/Web-transactions.json diff --git a/packetbeat/_meta/kibana/visualization/dc743240-1665-11e7-a6de-cbac1a3d0a7d.json b/packetbeat/_meta/kibana/5.x/visualization/dc743240-1665-11e7-a6de-cbac1a3d0a7d.json similarity index 100% rename from packetbeat/_meta/kibana/visualization/dc743240-1665-11e7-a6de-cbac1a3d0a7d.json rename to packetbeat/_meta/kibana/5.x/visualization/dc743240-1665-11e7-a6de-cbac1a3d0a7d.json diff --git a/packetbeat/_meta/kibana/default/index-pattern/packetbeat.json b/packetbeat/_meta/kibana/default/index-pattern/packetbeat.json new file mode 100644 index 00000000000..378c41b33cc --- /dev/null +++ b/packetbeat/_meta/kibana/default/index-pattern/packetbeat.json @@ -0,0 +1,16 @@ +{ + "version": "6.0.0-alpha2", + "objects": [ + { + "attributes": { + "fields": "[{\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.hostname\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.timezone\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"@timestamp\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"tags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"fields\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"error.message\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"error.code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"error.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.provider\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.instance_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.instance_name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.machine_type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.availability_zone\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.project_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.region\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.image\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.labels\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.pod.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.namespace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.labels\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.annotations\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.container.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.container.image\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"server\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"client_server\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"service\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"client_service\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"ip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"client_ip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"real_ip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"client_geoip.location\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"client_port\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"transport\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"port\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"proc\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"client_proc\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"release\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"start_time\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"last_time\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"final\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"flow_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"vlan\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"outer_vlan\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.mac\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.ip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.ip_location\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.outer_ip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.outer_ip_location\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.ipv6\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.ipv6_location\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.outer_ipv6\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.outer_ipv6_location\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.port\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.stats.net_packets_total\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source.stats.net_bytes_total\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.mac\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.ip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.ip_location\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.outer_ip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.outer_ip_location\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.ipv6\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.ipv6_location\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.outer_ipv6\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.outer_ipv6_location\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.port\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.stats.net_packets_total\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dest.stats.net_bytes_total\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"connection_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"direction\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"status\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"method\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"resource\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"path\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"query\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"params\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"notes\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"request\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"response\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"responsetime\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cpu_time\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"bytes_in\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"bytes_out\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dnstime\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"connecttime\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"loadtime\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"domloadtime\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.reply-code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.reply-text\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.class-id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.method-id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.exchange\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.exchange-type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.passive\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.durable\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.exclusive\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.auto-delete\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.no-wait\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.consumer-tag\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.delivery-tag\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.message-count\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.consumer-count\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.routing-key\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.no-ack\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.no-local\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.if-unused\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.if-empty\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.queue\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.redelivered\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.multiple\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.arguments\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.mandatory\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.immediate\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.content-type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.content-encoding\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.headers\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.delivery-mode\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.priority\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.correlation-id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.reply-to\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.expiration\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.message-id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.timestamp\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.user-id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"amqp.app-id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.request.headers.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.request.headers.flags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.request.headers.stream\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.request.headers.op\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.request.headers.length\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.request.query\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.headers.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.headers.flags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.headers.stream\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.headers.op\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.headers.length\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.rows.num_rows\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.rows.meta.keyspace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.rows.meta.table\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.rows.meta.flags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.rows.meta.col_count\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.rows.meta.pkey_columns\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.rows.meta.paging_state\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.keyspace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.schema_change.change\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.schema_change.keyspace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.schema_change.table\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.schema_change.object\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.schema_change.target\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.schema_change.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.schema_change.args\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.prepared_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.req_meta.keyspace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.req_meta.table\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.req_meta.flags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.req_meta.col_count\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.req_meta.pkey_columns\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.req_meta.paging_state\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.resp_meta.keyspace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.resp_meta.table\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.resp_meta.flags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.resp_meta.col_count\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.resp_meta.pkey_columns\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.result.prepared.resp_meta.paging_state\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.supported\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.authentication.class\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.warnings\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.change\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.host\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.port\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.schema_change.change\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.schema_change.keyspace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.schema_change.table\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.schema_change.object\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.schema_change.target\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.schema_change.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.event.schema_change.args\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.msg\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.read_consistency\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.required\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.alive\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.received\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.blockfor\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.write_type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.data_present\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.keyspace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.table\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.stmt_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.num_failures\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.function\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"cassandra.response.error.details.arg_types\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.op_code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.flags.authoritative\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.flags.recursion_available\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.flags.recursion_desired\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.flags.authentic_data\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.flags.checking_disabled\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.flags.truncated_response\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.response_code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.question.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.question.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.question.class\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.question.etld_plus_one\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.answers\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.answers_count\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.answers.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.answers.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.answers.class\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.answers.ttl\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.answers.data\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.authorities\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.authorities_count\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.authorities.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.authorities.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.authorities.class\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.additionals\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.additionals_count\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.additionals.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.additionals.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.additionals.class\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.additionals.ttl\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.additionals.data\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.opt.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.opt.do\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.opt.ext_rcode\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"dns.opt.udp_size\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.request.params\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.request.headers\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"http.request.body\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.response.code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.response.phrase\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.response.headers\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"http.response.body\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp.request.message\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp.request.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp.request.code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp.response.message\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp.response.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"icmp.response.code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.protocol_type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.line\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.command\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.command\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.error_msg\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.opcode\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.opcode\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.opcode_value\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.opcode_value\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.opaque\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.opaque\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.vbucket\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.status\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.status_code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.keys\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.keys\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.count_values\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.count_values\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.values\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.values\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.bytes\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.bytes\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.delta\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.initial\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.verbosity\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.raw_args\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.source_class\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.dest_class\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.automove\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.flags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.flags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.exptime\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.sleep_us\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.value\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.noreply\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.quiet\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.request.cas_unique\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.cas_unique\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.stats\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"memcache.response.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.error\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.fullCollectionName\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.numberToSkip\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.numberToReturn\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.numberReturned\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.startingFrom\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.query\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.returnFieldsSelector\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.selector\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.update\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mongodb.cursorId\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.xid\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.call_size\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.reply_size\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.status\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.time\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.time_str\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.auth_flavor\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.cred.uid\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.cred.gid\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.cred.gids\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.cred.stamp\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"rpc.cred.machinename\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mysql.iserror\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mysql.affected_rows\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mysql.insert_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mysql.num_fields\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mysql.num_rows\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mysql.query\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mysql.error_code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"mysql.error_message\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"nfs.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"nfs.minor_version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"nfs.tag\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"nfs.opcode\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"nfs.status\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"pgsql.query\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"pgsql.iserror\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"pgsql.error_code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"pgsql.error_message\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"pgsql.error_severity\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"pgsql.num_fields\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"pgsql.num_rows\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"redis.return_value\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"redis.error\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"thrift.params\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"thrift.service\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"thrift.return_value\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"thrift.exceptions\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_id\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"_type\", \"searchable\": true, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_index\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_score\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"number\", \"scripted\": false}]", + "fieldFormatMap": "{\"client_ip\": {\"id\": \"dotted notation.\"}, \"memcache.request.bytes\": {\"id\": \"bytes\"}, \"start_time\": {\"id\": \"YYYY-MM-DDTHH:MM:SS.milliZ\"}, \"real_ip\": {\"id\": \"Dotted notation.\"}, \"ip\": {\"id\": \"dotted notation.\"}, \"@timestamp\": {\"id\": \"date\"}, \"bytes_out\": {\"id\": \"bytes\"}, \"last_time\": {\"id\": \"YYYY-MM-DDTHH:MM:SS.milliZ\"}, \"client_port\": {\"id\": \"dotted notation.\"}, \"memcache.response.bytes\": {\"id\": \"bytes\"}, \"bytes_in\": {\"id\": \"bytes\"}, \"port\": {\"id\": \"dotted notation.\"}}", + "timeFieldName": "@timestamp", + "title": "packetbeat-*" + }, + "version": 1, + "type": "index-pattern", + "id": "packetbeat-*" + } + ] +} \ No newline at end of file diff --git a/packetbeat/packetbeat.reference.yml b/packetbeat/packetbeat.reference.yml index 0b098895a41..5a554fd0cf6 100644 --- a/packetbeat/packetbeat.reference.yml +++ b/packetbeat/packetbeat.reference.yml @@ -1015,7 +1015,7 @@ output.elasticsearch: #============================== Dashboards ===================================== # These settings control loading the sample dashboards to the Kibana index. Loading # the dashboards is disabled by default and can be enabled either by setting the -# options here, or by using the `-setup` CLI flag. +# options here, or by using the `-setup` CLI flag or the `setup` command. #setup.dashboards.enabled: false # The URL from where to download the dashboards archive. By default this URL @@ -1071,6 +1071,25 @@ output.elasticsearch: # Overwrite existing template #setup.template.overwrite: false +#============================== Kibana ===================================== + +# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API. +# This requires a Kibana endpoint configuration. +setup.kibana: + + # Kibana Host + # Scheme and port can be left out and will be set to the default (http and 5601) + # In case you specify and additional path, the scheme is required: http://localhost:5601/path + # IPv6 addresses should always be defined as: https://[2001:db8::1]:5601 + #host: "localhost:5601" + + # Optional protocol and basic auth crendentials. + #protocol: "https" + #username: "elastic" + #password: "changeme" + + # Optional HTTP Path + #path: "" #================================ HTTP Endpoint ====================================== # Each beat can expose internal data points through a http endpoint. For security diff --git a/packetbeat/packetbeat.yml b/packetbeat/packetbeat.yml index bc0febba93f..9e5b1c3e61d 100644 --- a/packetbeat/packetbeat.yml +++ b/packetbeat/packetbeat.yml @@ -108,6 +108,31 @@ packetbeat.protocols: #fields: # env: staging + +#============================== Dashboards ===================================== +# These settings control loading the sample dashboards to the Kibana index. Loading +# the dashboards is disabled by default and can be enabled either by setting the +# options here, or by using the `-setup` CLI flag or the `setup` command. +#setup.dashboards.enabled: false + +# The URL from where to download the dashboards archive. By default this URL +# has a value which is computed based on the Beat name and version. For released +# versions, this URL points to the dashboard archive on the artifacts.elastic.co +# website. +#setup.dashboards.url: + +#============================== Kibana ===================================== + +# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API. +# This requires a Kibana endpoint configuration. +setup.kibana: + + # Kibana Host + # Scheme and port can be left out and will be set to the default (http and 5601) + # In case you specify and additional path, the scheme is required: http://localhost:5601/path + # IPv6 addresses should always be defined as: https://[2001:db8::1]:5601 + #host: "localhost:5601" + #================================ Outputs ===================================== # Configure what outputs to use when sending the data collected by the beat. diff --git a/testing/environments/args.yml b/testing/environments/args.yml index fa7dca30509..e54e5017356 100644 --- a/testing/environments/args.yml +++ b/testing/environments/args.yml @@ -5,5 +5,5 @@ services: args: build: args: - DOWNLOAD_URL: https://artifacts.elastic.co/downloads - ELASTIC_VERSION: 6.0.0-alpha2 + DOWNLOAD_URL: https://snapshots.elastic.co/downloads + ELASTIC_VERSION: 6.0.0-alpha3-SNAPSHOT diff --git a/winlogbeat/_meta/kibana/dashboard/Winlogbeat-Dashboard.json b/winlogbeat/_meta/kibana/5.x/dashboard/Winlogbeat-Dashboard.json similarity index 100% rename from winlogbeat/_meta/kibana/dashboard/Winlogbeat-Dashboard.json rename to winlogbeat/_meta/kibana/5.x/dashboard/Winlogbeat-Dashboard.json diff --git a/winlogbeat/_meta/kibana/5.x/index-pattern/winlogbeat.json b/winlogbeat/_meta/kibana/5.x/index-pattern/winlogbeat.json new file mode 100644 index 00000000000..256c64ec4ef --- /dev/null +++ b/winlogbeat/_meta/kibana/5.x/index-pattern/winlogbeat.json @@ -0,0 +1,6 @@ +{ + "fields": "[{\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.hostname\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.timezone\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"@timestamp\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"tags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"fields\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"error.message\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"error.code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"error.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.provider\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.instance_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.instance_name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.machine_type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.availability_zone\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.project_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.region\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.image\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.labels\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.pod.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.namespace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.labels\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.annotations\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.container.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.container.image\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"activity_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"computer_name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"event_data\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"event_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"keywords\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"log_name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"level\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"message\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"message_error\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"record_number\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"related_activity_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"opcode\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"provider_guid\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"process_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source_name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"task\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"thread_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"user_data\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"user.identifier\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"user.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"user.domain\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"user.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"xml\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_id\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"_type\", \"searchable\": true, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_index\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_score\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"number\", \"scripted\": false}]", + "fieldFormatMap": "{\"@timestamp\": {\"id\": \"date\"}}", + "timeFieldName": "@timestamp", + "title": "winlogbeat-*" +} \ No newline at end of file diff --git a/winlogbeat/_meta/kibana/search/Winlogbeat-Search.json b/winlogbeat/_meta/kibana/5.x/search/Winlogbeat-Search.json similarity index 100% rename from winlogbeat/_meta/kibana/search/Winlogbeat-Search.json rename to winlogbeat/_meta/kibana/5.x/search/Winlogbeat-Search.json diff --git a/winlogbeat/_meta/kibana/visualization/Errors-count-over-time.json b/winlogbeat/_meta/kibana/5.x/visualization/Errors-count-over-time.json similarity index 100% rename from winlogbeat/_meta/kibana/visualization/Errors-count-over-time.json rename to winlogbeat/_meta/kibana/5.x/visualization/Errors-count-over-time.json diff --git a/winlogbeat/_meta/kibana/visualization/Event-Levels.json b/winlogbeat/_meta/kibana/5.x/visualization/Event-Levels.json similarity index 100% rename from winlogbeat/_meta/kibana/visualization/Event-Levels.json rename to winlogbeat/_meta/kibana/5.x/visualization/Event-Levels.json diff --git a/winlogbeat/_meta/kibana/visualization/Evolution-of-the-CPU-times-per-process.json b/winlogbeat/_meta/kibana/5.x/visualization/Evolution-of-the-CPU-times-per-process.json similarity index 100% rename from winlogbeat/_meta/kibana/visualization/Evolution-of-the-CPU-times-per-process.json rename to winlogbeat/_meta/kibana/5.x/visualization/Evolution-of-the-CPU-times-per-process.json diff --git a/winlogbeat/_meta/kibana/visualization/Number-of-Events-Over-Time-By-Event-Log.json b/winlogbeat/_meta/kibana/5.x/visualization/Number-of-Events-Over-Time-By-Event-Log.json similarity index 100% rename from winlogbeat/_meta/kibana/visualization/Number-of-Events-Over-Time-By-Event-Log.json rename to winlogbeat/_meta/kibana/5.x/visualization/Number-of-Events-Over-Time-By-Event-Log.json diff --git a/winlogbeat/_meta/kibana/visualization/Number-of-Events.json b/winlogbeat/_meta/kibana/5.x/visualization/Number-of-Events.json similarity index 100% rename from winlogbeat/_meta/kibana/visualization/Number-of-Events.json rename to winlogbeat/_meta/kibana/5.x/visualization/Number-of-Events.json diff --git a/winlogbeat/_meta/kibana/visualization/Sources.json b/winlogbeat/_meta/kibana/5.x/visualization/Sources.json similarity index 100% rename from winlogbeat/_meta/kibana/visualization/Sources.json rename to winlogbeat/_meta/kibana/5.x/visualization/Sources.json diff --git a/winlogbeat/_meta/kibana/visualization/Top-Event-IDs.json b/winlogbeat/_meta/kibana/5.x/visualization/Top-Event-IDs.json similarity index 100% rename from winlogbeat/_meta/kibana/visualization/Top-Event-IDs.json rename to winlogbeat/_meta/kibana/5.x/visualization/Top-Event-IDs.json diff --git a/winlogbeat/_meta/kibana/default/index-pattern/winlogbeat.json b/winlogbeat/_meta/kibana/default/index-pattern/winlogbeat.json new file mode 100644 index 00000000000..abc8f57a7b1 --- /dev/null +++ b/winlogbeat/_meta/kibana/default/index-pattern/winlogbeat.json @@ -0,0 +1,16 @@ +{ + "version": "6.0.0-alpha2", + "objects": [ + { + "attributes": { + "fields": "[{\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.hostname\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.timezone\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"beat.version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"@timestamp\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"tags\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"fields\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"error.message\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"error.code\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"error.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.provider\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.instance_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.instance_name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.machine_type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.availability_zone\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.project_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"meta.cloud.region\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.image\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"docker.container.labels\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.pod.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.namespace\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.labels\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.annotations\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.container.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"kubernetes.container.image\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"activity_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"computer_name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"event_data\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"event_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"keywords\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"log_name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"level\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"message\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"message_error\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"record_number\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"related_activity_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"opcode\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"provider_guid\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"process_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"source_name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"task\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"thread_id\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"user_data\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"user.identifier\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"user.name\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"user.domain\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"user.type\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"version\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"xml\", \"searchable\": true, \"indexed\": true, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_id\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": true, \"name\": \"_type\", \"searchable\": true, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_index\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"analyzed\": false, \"aggregatable\": false, \"name\": \"_score\", \"searchable\": false, \"indexed\": false, \"doc_values\": false, \"type\": \"number\", \"scripted\": false}]", + "fieldFormatMap": "{\"@timestamp\": {\"id\": \"date\"}}", + "timeFieldName": "@timestamp", + "title": "winlogbeat-*" + }, + "version": 1, + "type": "index-pattern", + "id": "winlogbeat-*" + } + ] +} \ No newline at end of file diff --git a/winlogbeat/winlogbeat.reference.yml b/winlogbeat/winlogbeat.reference.yml index 66dfafcdb57..e44d243b354 100644 --- a/winlogbeat/winlogbeat.reference.yml +++ b/winlogbeat/winlogbeat.reference.yml @@ -589,7 +589,7 @@ output.elasticsearch: #============================== Dashboards ===================================== # These settings control loading the sample dashboards to the Kibana index. Loading # the dashboards is disabled by default and can be enabled either by setting the -# options here, or by using the `-setup` CLI flag. +# options here, or by using the `-setup` CLI flag or the `setup` command. #setup.dashboards.enabled: false # The URL from where to download the dashboards archive. By default this URL @@ -645,6 +645,25 @@ output.elasticsearch: # Overwrite existing template #setup.template.overwrite: false +#============================== Kibana ===================================== + +# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API. +# This requires a Kibana endpoint configuration. +setup.kibana: + + # Kibana Host + # Scheme and port can be left out and will be set to the default (http and 5601) + # In case you specify and additional path, the scheme is required: http://localhost:5601/path + # IPv6 addresses should always be defined as: https://[2001:db8::1]:5601 + #host: "localhost:5601" + + # Optional protocol and basic auth crendentials. + #protocol: "https" + #username: "elastic" + #password: "changeme" + + # Optional HTTP Path + #path: "" #================================ HTTP Endpoint ====================================== # Each beat can expose internal data points through a http endpoint. For security diff --git a/winlogbeat/winlogbeat.yml b/winlogbeat/winlogbeat.yml index f827ace1501..ed162e15099 100644 --- a/winlogbeat/winlogbeat.yml +++ b/winlogbeat/winlogbeat.yml @@ -38,6 +38,31 @@ winlogbeat.event_logs: #fields: # env: staging + +#============================== Dashboards ===================================== +# These settings control loading the sample dashboards to the Kibana index. Loading +# the dashboards is disabled by default and can be enabled either by setting the +# options here, or by using the `-setup` CLI flag or the `setup` command. +#setup.dashboards.enabled: false + +# The URL from where to download the dashboards archive. By default this URL +# has a value which is computed based on the Beat name and version. For released +# versions, this URL points to the dashboard archive on the artifacts.elastic.co +# website. +#setup.dashboards.url: + +#============================== Kibana ===================================== + +# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API. +# This requires a Kibana endpoint configuration. +setup.kibana: + + # Kibana Host + # Scheme and port can be left out and will be set to the default (http and 5601) + # In case you specify and additional path, the scheme is required: http://localhost:5601/path + # IPv6 addresses should always be defined as: https://[2001:db8::1]:5601 + #host: "localhost:5601" + #================================ Outputs ===================================== # Configure what outputs to use when sending the data collected by the beat. From 25f5c73a5daf6abce5e2316d9f9ae289d6364d13 Mon Sep 17 00:00:00 2001 From: Monica Sarbu Date: Mon, 3 Jul 2017 12:24:58 +0200 Subject: [PATCH 2/2] Fix the CPU usage visualization --- .../default/dashboard/Metricbeat-system.json | 24 +++++++++---------- 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/metricbeat/module/system/_meta/kibana/default/dashboard/Metricbeat-system.json b/metricbeat/module/system/_meta/kibana/default/dashboard/Metricbeat-system.json index 33219281166..7a1fdd1c2fe 100644 --- a/metricbeat/module/system/_meta/kibana/default/dashboard/Metricbeat-system.json +++ b/metricbeat/module/system/_meta/kibana/default/dashboard/Metricbeat-system.json @@ -4,16 +4,16 @@ "attributes": { "description": "", "kibanaSavedObjectMeta": { - "searchSourceJSON": "{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[{\"meta\":{\"index\":\"metricbeat-*\",\"key\":\"beat.name\",\"value\":\"mar.local\",\"disabled\":false,\"negate\":false,\"alias\":null,\"type\":\"phrase\"},\"query\":{\"match\":{\"beat.name\":{\"query\":\"mar.local\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}}]}" + "searchSourceJSON": "{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[]}" }, "title": "System Navigation", "uiStateJSON": "{}", "version": 1, - "visState": "{\"title\":\"System Navigation\",\"type\":\"markdown\",\"params\":{\"markdown\":\"| [System Overview](#/dashboard/Metricbeat-system-overview) | [Host Overview (requires Kibana \u003e 5.4)](#/dashboard/79ffd6e0-faa0-11e6-947f-177f697178b8) | [ Docker container overview](#/dashboard/CPU-slash-Memory-per-container) |\"},\"aggs\":[],\"listeners\":{}}" + "visState": "{\"title\":\"System Navigation\",\"type\":\"markdown\",\"params\":{\"markdown\":\"[System Overview](#/dashboard/Metricbeat-system-overview) | [Host Overview (requires Kibana \u003e 5.4)](#/dashboard/79ffd6e0-faa0-11e6-947f-177f697178b8) |\\n[Docker containers overview](#/dashboard/CPU-slash-Memory-per-container)\"},\"aggs\":[],\"listeners\":{}}" }, "id": "System-Navigation", "type": "visualization", - "version": 1 + "version": 15 }, { "attributes": { @@ -43,7 +43,7 @@ }, "id": "fe064790-1b1f-11e7-bec4-a5e9ec5cab8b", "type": "visualization", - "version": 1 + "version": 2 }, { "attributes": { @@ -58,7 +58,7 @@ }, "id": "855899e0-1b1c-11e7-b09e-037021c4f8df", "type": "visualization", - "version": 1 + "version": 2 }, { "attributes": { @@ -144,7 +144,7 @@ "title": "Metricbeat: CPU Usage Gauge", "uiStateJSON": "{}", "version": 1, - "visState": "{\"title\":\"Metricbeat: CPU Usage Gauge\",\"type\":\"metrics\",\"params\":{\"id\":\"4c9e2550-1b91-11e7-bec4-a5e9ec5cab8b\",\"type\":\"gauge\",\"series\":[{\"id\":\"4c9e2551-1b91-11e7-bec4-a5e9ec5cab8b\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"4c9e2552-1b91-11e7-bec4-a5e9ec5cab8b\",\"type\":\"avg\",\"field\":\"system.cpu.user.pct\"},{\"script\":\"params.user \u003e 0 ? 1 - params.user : null\",\"id\":\"587aa510-1b91-11e7-bec4-a5e9ec5cab8b\",\"type\":\"calculation\",\"variables\":[{\"id\":\"5a19af10-1b91-11e7-bec4-a5e9ec5cab8b\",\"name\":\"user\",\"field\":\"4c9e2552-1b91-11e7-bec4-a5e9ec5cab8b\"}]}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"CPU Usage\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"gauge_color_rules\":[{\"value\":0,\"id\":\"4ef2c3b0-1b91-11e7-bec4-a5e9ec5cab8b\",\"gauge\":\"rgba(104,188,0,1)\",\"opperator\":\"gte\"},{\"value\":0.7,\"id\":\"e6561ae0-1b91-11e7-bec4-a5e9ec5cab8b\",\"gauge\":\"rgba(254,146,0,1)\",\"opperator\":\"gte\"},{\"value\":0.85,\"id\":\"ec655040-1b91-11e7-bec4-a5e9ec5cab8b\",\"gauge\":\"rgba(211,49,21,1)\",\"opperator\":\"gte\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"gauge_max\":\"1\",\"filter\":\"\"},\"aggs\":[],\"listeners\":{}}" + "visState": "{\"title\":\"Metricbeat: CPU Usage Gauge\",\"type\":\"metrics\",\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"filter\":\"\",\"gauge_color_rules\":[{\"gauge\":\"rgba(104,188,0,1)\",\"id\":\"4ef2c3b0-1b91-11e7-bec4-a5e9ec5cab8b\",\"opperator\":\"gte\",\"value\":0},{\"gauge\":\"rgba(254,146,0,1)\",\"id\":\"e6561ae0-1b91-11e7-bec4-a5e9ec5cab8b\",\"opperator\":\"gte\",\"value\":0.7},{\"gauge\":\"rgba(211,49,21,1)\",\"id\":\"ec655040-1b91-11e7-bec4-a5e9ec5cab8b\",\"opperator\":\"gte\",\"value\":0.85}],\"gauge_inner_width\":10,\"gauge_max\":\"1\",\"gauge_style\":\"half\",\"gauge_width\":10,\"id\":\"4c9e2550-1b91-11e7-bec4-a5e9ec5cab8b\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"4c9e2551-1b91-11e7-bec4-a5e9ec5cab8b\",\"label\":\"CPU Usage\",\"line_width\":1,\"metrics\":[{\"field\":\"system.cpu.user.pct\",\"id\":\"4c9e2552-1b91-11e7-bec4-a5e9ec5cab8b\",\"type\":\"avg\"},{\"field\":\"system.cpu.system.pct\",\"id\":\"225c2140-5fd7-11e7-a63a-a937b7c1a7e1\",\"type\":\"avg\"},{\"field\":\"system.cpu.cores\",\"id\":\"837a30c0-5fd7-11e7-a63a-a937b7c1a7e1\",\"type\":\"avg\"},{\"script\":\"params.n \u003e 0 ? (params.user+params.system)/params.n : null\",\"id\":\"587aa510-1b91-11e7-bec4-a5e9ec5cab8b\",\"type\":\"calculation\",\"variables\":[{\"field\":\"4c9e2552-1b91-11e7-bec4-a5e9ec5cab8b\",\"id\":\"5a19af10-1b91-11e7-bec4-a5e9ec5cab8b\",\"name\":\"user\"},{\"field\":\"225c2140-5fd7-11e7-a63a-a937b7c1a7e1\",\"id\":\"32b54f80-5fd7-11e7-a63a-a937b7c1a7e1\",\"name\":\"system\"},{\"field\":\"837a30c0-5fd7-11e7-a63a-a937b7c1a7e1\",\"id\":\"8ba6eef0-5fd7-11e7-a63a-a937b7c1a7e1\",\"name\":\"n\"}]}],\"point_size\":1,\"seperate_axis\":0,\"split_mode\":\"everything\",\"stacked\":\"none\"}],\"show_legend\":1,\"time_field\":\"@timestamp\",\"type\":\"gauge\"},\"aggs\":[],\"listeners\":{}}" }, "id": "83e12df0-1b91-11e7-bec4-a5e9ec5cab8b", "type": "visualization", @@ -159,11 +159,11 @@ "title": "Tip System overview", "uiStateJSON": "{}", "version": 1, - "visState": "{\"title\":\"Tip System overview\",\"type\":\"metrics\",\"params\":{\"id\":\"0a46a600-4d64-11e7-aa29-87a97a796de6\",\"type\":\"markdown\",\"series\":[{\"id\":\"0a46cd10-4d64-11e7-aa29-87a97a796de6\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"0a46cd11-4d64-11e7-aa29-87a97a796de6\",\"type\":\"count\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"markdown\":\"**Tip:** Click on any of the hosts from the Top Hosts By CPU or Top Hosts by Memory to view more details about the host.\",\"background_color\":\"rgba(252,220,0,1)\"},\"aggs\":[],\"listeners\":{}}" + "visState": "{\"title\":\"Tip System overview\",\"type\":\"metrics\",\"params\":{\"id\":\"0a46a600-4d64-11e7-aa29-87a97a796de6\",\"type\":\"markdown\",\"series\":[{\"id\":\"0a46cd10-4d64-11e7-aa29-87a97a796de6\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"0a46cd11-4d64-11e7-aa29-87a97a796de6\",\"type\":\"count\"}],\"seperate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"*\",\"interval\":\"auto\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"show_legend\":1,\"markdown\":\"**Tip:** Click on any of the hosts from the Top Hosts By CPU or Top Hosts by Memory to view more details about the host.\",\"background_color\":\"rgba(252,220,0,0)\"},\"aggs\":[],\"listeners\":{}}" }, "id": "e9d22060-4d64-11e7-aa29-87a97a796de6", "type": "visualization", - "version": 1 + "version": 2 }, { "attributes": { @@ -176,12 +176,12 @@ "panelsJSON": "[{\"col\":1,\"id\":\"System-Navigation\",\"panelIndex\":9,\"row\":1,\"size_x\":8,\"size_y\":1,\"type\":\"visualization\"},{\"col\":1,\"id\":\"c6f2ffd0-4d17-11e7-a196-69b9a7a020a9\",\"panelIndex\":11,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"fe064790-1b1f-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":12,\"row\":4,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"855899e0-1b1c-11e7-b09e-037021c4f8df\",\"panelIndex\":13,\"row\":4,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"7cdb1330-4d1a-11e7-a196-69b9a7a020a9\",\"panelIndex\":14,\"row\":9,\"size_x\":12,\"size_y\":6,\"type\":\"visualization\"},{\"col\":9,\"id\":\"522ee670-1b92-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":16,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":11,\"id\":\"1aae9140-1b93-11e7-8ada-3df93aab833e\",\"panelIndex\":17,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"825fdb80-4d1d-11e7-b5f2-2b7c1895bf32\",\"panelIndex\":18,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":5,\"id\":\"d3166e80-1b91-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":19,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":3,\"id\":\"83e12df0-1b91-11e7-bec4-a5e9ec5cab8b\",\"panelIndex\":20,\"row\":2,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"col\":9,\"id\":\"e9d22060-4d64-11e7-aa29-87a97a796de6\",\"panelIndex\":21,\"row\":1,\"size_x\":4,\"size_y\":1,\"type\":\"visualization\"}]", "timeRestore": false, "title": "Metricbeat system overview", - "uiStateJSON": "{\"P-11\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-12\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-14\":{\"vis\":{\"defaultColors\":{\"0% - 8.75%\":\"rgb(247,252,245)\",\"8.75% - 17.5%\":\"rgb(199,233,192)\",\"17.5% - 26.25%\":\"rgb(116,196,118)\",\"26.25% - 35%\":\"rgb(35,139,69)\"}}},\"P-16\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-2\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-3\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}}}", + "uiStateJSON": "{\"P-11\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-12\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-14\":{\"vis\":{\"defaultColors\":{\"0% - 8.75%\":\"rgb(247,252,245)\",\"17.5% - 26.25%\":\"rgb(116,196,118)\",\"26.25% - 35%\":\"rgb(35,139,69)\",\"8.75% - 17.5%\":\"rgb(199,233,192)\"}}},\"P-16\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-2\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-3\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}}}", "version": 1 }, "id": "Metricbeat-system-overview", "type": "dashboard", - "version": 1 + "version": 2 }, { "attributes": { @@ -346,7 +346,7 @@ }, "id": "aa984970-1e0b-11e7-852e-cdcfcfdffddd", "type": "visualization", - "version": 1 + "version": 3 }, { "attributes": { @@ -461,7 +461,7 @@ }, "id": "79ffd6e0-faa0-11e6-947f-177f697178b8", "type": "dashboard", - "version": 6 + "version": 2 }, { "attributes": {