[Sample Data] Add event.dataset to sample web logs (#48150) (#48243)

* [Sample Data] Add event.dataset to sample web logs

* Update saved_objects.js
This commit is contained in:
Zacqary Adam Xeper 2019-10-15 12:39:52 -05:00 committed by GitHub
parent 96f84aef78
commit c73a4d1204
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 54 additions and 47 deletions

View file

@ -26,131 +26,138 @@ export const fieldMappings = {
fields: {
keyword: {
type: 'keyword',
ignore_above: 256
}
}
ignore_above: 256,
},
},
},
geo: {
properties: {
srcdest: {
type: 'keyword'
type: 'keyword',
},
src: {
type: 'keyword'
type: 'keyword',
},
dest: {
type: 'keyword'
type: 'keyword',
},
coordinates: {
type: 'geo_point'
}
}
type: 'geo_point',
},
},
},
utc_time: {
type: 'date'
type: 'date',
},
url: {
type: 'text',
fields: {
keyword: {
type: 'keyword',
ignore_above: 256
}
}
ignore_above: 256,
},
},
},
message: {
type: 'text',
fields: {
keyword: {
type: 'keyword',
ignore_above: 256
}
}
ignore_above: 256,
},
},
},
host: {
type: 'text',
fields: {
keyword: {
type: 'keyword',
ignore_above: 256
}
}
ignore_above: 256,
},
},
},
clientip: {
type: 'ip'
type: 'ip',
},
response: {
type: 'text',
fields: {
keyword: {
type: 'keyword',
ignore_above: 256
}
}
ignore_above: 256,
},
},
},
machine: {
properties: {
ram: {
type: 'long'
type: 'long',
},
os: {
type: 'text',
fields: {
keyword: {
type: 'keyword',
ignore_above: 256
}
}
}
}
ignore_above: 256,
},
},
},
},
},
agent: {
type: 'text',
fields: {
keyword: {
type: 'keyword',
ignore_above: 256
}
}
ignore_above: 256,
},
},
},
bytes: {
type: 'long'
type: 'long',
},
tags: {
type: 'text',
fields: {
keyword: {
type: 'keyword',
ignore_above: 256
}
}
ignore_above: 256,
},
},
},
referer: {
type: 'keyword'
type: 'keyword',
},
ip: {
type: 'ip'
type: 'ip',
},
timestamp: {
type: 'date'
type: 'date',
},
'@timestamp': {
type: 'alias',
path: 'timestamp'
path: 'timestamp',
},
phpmemory: {
type: 'long'
type: 'long',
},
memory: {
type: 'double'
type: 'double',
},
extension: {
type: 'text',
fields: {
keyword: {
type: 'keyword',
ignore_above: 256
}
}
}
ignore_above: 256,
},
},
},
event: {
properties: {
dataset: {
type: 'keyword',
},
},
},
};

File diff suppressed because one or more lines are too long