Commit 891433ce authored by Jürgen Haas's avatar Jürgen Haas

Update index setup

parent 4b68ce2d
{ {
"mapping": { "properties": {
"ansible": { "@log_name": {
"_all": { "type": "text"
"enabled": true },
}, "@timestamp": {
"properties": { "type": "date"
"@log_name": { },
"type": "text", "ansible_company": {
"fields": { "type": "text",
"keyword": { "fields": {
"type": "keyword", "keyword": {
"ignore_above": 256 "type": "keyword",
} "ignore_above": 256
} }
}, }
"@timestamp": { },
"type": "date" "ansible_host": {
}, "type": "text",
"ansible_company": { "fields": {
"type": "text", "keyword": {
"fields": { "type": "keyword",
"keyword": { "ignore_above": 256
"type": "keyword", }
"ignore_above": 256 }
} },
} "ansible_playbook": {
}, "type": "text",
"ansible_host": { "fields": {
"type": "text", "keyword": {
"fields": { "type": "keyword",
"keyword": { "ignore_above": 256
"type": "keyword", }
"ignore_above": 256 }
} },
} "ansible_result": {
}, "type": "text",
"ansible_playbook": { "fields": {
"type": "text", "keyword": {
"fields": { "type": "keyword",
"keyword": { "ignore_above": 256
"type": "keyword", }
"ignore_above": 256 }
} },
} "ansible_task": {
}, "type": "text",
"ansible_result": { "fields": {
"type": "text", "keyword": {
"fields": { "type": "keyword",
"keyword": { "ignore_above": 256
"type": "keyword", }
"ignore_above": 256 }
} },
} "ansible_type": {
}, "type": "text",
"ansible_task": { "fields": {
"type": "text", "keyword": {
"fields": { "type": "keyword",
"keyword": { "ignore_above": 256
"type": "keyword", }
"ignore_above": 256 }
} },
} "fluent_added_timestamp": {
}, "type": "date"
"ansible_type": { },
"type": "text", "host": {
"fields": { "type": "text",
"keyword": { "fields": {
"type": "keyword", "keyword": {
"ignore_above": 256 "type": "keyword",
} "ignore_above": 256
} }
}, }
"fluent_added_timestamp": { },
"type": "date" "hostname": {
}, "type": "text",
"host": { "fields": {
"type": "text", "keyword": {
"fields": { "type": "keyword",
"keyword": { "ignore_above": 256
"type": "keyword", }
"ignore_above": 256 }
} },
} "index": {
}, "type": "long"
"hostname": { },
"type": "text", "msg": {
"fields": { "type": "text",
"keyword": { "fields": {
"type": "keyword", "keyword": {
"ignore_above": 256 "type": "keyword",
} "ignore_above": 256
} }
}, }
"index": { },
"type": "long" "session": {
}, "type": "text",
"msg": { "fields": {
"type": "text", "keyword": {
"fields": { "type": "keyword",
"keyword": { "ignore_above": 256
"type": "keyword", }
"ignore_above": 256 }
} },
} "status": {
}, "type": "text",
"session": { "fields": {
"type": "text", "keyword": {
"fields": { "type": "keyword",
"keyword": { "ignore_above": 256
"type": "keyword", }
"ignore_above": 256 }
} },
} "sys_host": {
}, "type": "text",
"status": { "fields": {
"type": "text", "keyword": {
"fields": { "type": "keyword",
"keyword": { "ignore_above": 256
"type": "keyword", }
"ignore_above": 256 }
} },
} "sys_module": {
}, "type": "text",
"sys_host": { "fields": {
"type": "text", "keyword": {
"fields": { "type": "keyword",
"keyword": { "ignore_above": 256
"type": "keyword", }
"ignore_above": 256 }
} },
} "sys_name": {
}, "type": "text",
"sys_module": { "fields": {
"type": "text", "keyword": {
"fields": { "type": "keyword",
"keyword": { "ignore_above": 256
"type": "keyword",
"ignore_above": 256
}
}
},
"sys_name": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
} }
} }
} }
......
{ {
"mapping": { "properties": {
"haproxy": { "@log_name": {
"_all": { "type": "text"
"enabled": true },
}, "actconn": {
"properties": { "type": "text",
"actconn": { "fields": {
"type": "text" "keyword": {
}, "type": "keyword",
"b_end": { "ignore_above": 256
"type": "text" }
}, }
"b_server": { },
"type": "text" "b_end": {
}, "type": "text",
"backend_queue": { "fields": {
"type": "text" "keyword": {
}, "type": "keyword",
"beconn": { "ignore_above": 256
"type": "text" }
}, }
"bytes_read": { },
"type": "text" "b_server": {
}, "type": "text",
"c_ip": { "fields": {
"type": "text" "keyword": {
}, "type": "keyword",
"c_port": { "ignore_above": 256
"type": "text" }
}, }
"captured_request_cookie": { },
"type": "text" "backend_queue": {
}, "type": "text",
"captured_response_cookie": { "fields": {
"type": "text" "keyword": {
}, "type": "keyword",
"f_end": { "ignore_above": 256
"type": "text" }
}, }
"feconn": { },
"type": "text" "beconn": {
}, "type": "text",
"http_request": { "fields": {
"type": "text" "keyword": {
}, "type": "keyword",
"pid": { "ignore_above": 256
"type": "text" }
}, }
"prefix": { },
"type": "text" "bytes_read": {
}, "type": "text",
"ps": { "fields": {
"type": "text" "keyword": {
}, "type": "keyword",
"retries": { "ignore_above": 256
"type": "text" }
}, }
"srv_conn": { },
"type": "text" "c_ip": {
}, "type": "text",
"srv_queue": { "fields": {
"type": "text" "keyword": {
}, "type": "keyword",
"status_code": { "ignore_above": 256
"type": "text" }
}, }
"syslog_time": { },
"type": "date", "c_port": {
"format": "dd/MMM/yyyy:HH:mm:ss Z" "type": "text",
}, "fields": {
"tc": { "keyword": {
"type": "text" "type": "keyword",
}, "ignore_above": 256
"termination_state": { }
"type": "text" }
}, },
"tq": { "captured_request_cookie": {
"type": "text" "type": "text",
}, "fields": {
"tr": { "keyword": {
"type": "text" "type": "keyword",
}, "ignore_above": 256
"tt": { }
"type": "text" }
}, },
"tw": { "captured_response_cookie": {
"type": "text" "type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"f_end": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"feconn": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"hostname": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"http_request": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"message": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"pid": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"prefix": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"ps": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"retries": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"sni": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"srv_conn": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"srv_queue": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"status_code": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"syslog_time": {
"type": "date",
"format": "dd/MMM/yyyy:HH:mm:ss Z"
},
"tc": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"termination_state": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"tq": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"tr": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"tt": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"tw": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
} }
} }
} }
......
{ {
"mapping": { "properties": {
"ping": { "@log_name": {
"_all": { "type": "text"
"enabled": true },
}, "@timestamp": {
"properties": { "type": "date"
"@log_name": { },
"type": "text", "downtime": {
"fields": { "type": "integer"
"keyword": { },
"type": "keyword", "error": {
"ignore_above": 256 "type": "text"
} },
} "fluent_added_timestamp": {
}, "type": "date"
"@timestamp": { },
"type": "date" "hostname": {
}, "type": "text",
"downtime": { "fields": {
"type": "integer" "keyword": {
}, "type": "keyword",
"error": { "ignore_above": 256
"type": "text" }