mirror of
https://github.com/elastic/kibana.git
synced 2025-04-18 23:21:39 -04:00
## Summary ~**DO NOT MERGE:** depends on https://github.com/elastic/kibana/issues/213468~ This PR reintegrates the work from the `workchat_m1` branch into `main`: - introduces a 4th solution type, `chat`, that will be used for the *WorkChat* project type. - edit things in various platform code to introduce/handle that new project type - add plugins and packages for the workchat app. ### To AppEx reviewers: File change count is scary, but you can safely ignore anything from `xpack/solutions/chat` (given it's solution code), and focus on your owned changes, which are way more reasonable --------- Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com> Co-authored-by: Joe McElroy <joseph.mcelroy@elastic.co> Co-authored-by: Rodney Norris <rodney.norris@elastic.co> Co-authored-by: Jedr Blaszyk <jedrazb@gmail.com> Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com> Co-authored-by: Meghan Murphy <meghan.murphy@elastic.co>
3971 lines
76 KiB
JSON
3971 lines
76 KiB
JSON
{
|
|
"action": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"actionTypeId": {
|
|
"type": "keyword"
|
|
},
|
|
"name": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"action_task_params": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"apiKeyId": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"ad_hoc_run_params": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"apiKeyId": {
|
|
"type": "keyword"
|
|
},
|
|
"createdAt": {
|
|
"type": "date"
|
|
},
|
|
"end": {
|
|
"type": "date"
|
|
},
|
|
"rule": {
|
|
"properties": {
|
|
"alertTypeId": {
|
|
"type": "keyword"
|
|
},
|
|
"consumer": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"start": {
|
|
"type": "date"
|
|
}
|
|
}
|
|
},
|
|
"alert": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"actions": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"actionRef": {
|
|
"type": "keyword"
|
|
},
|
|
"actionTypeId": {
|
|
"type": "keyword"
|
|
},
|
|
"group": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "nested"
|
|
},
|
|
"alertTypeId": {
|
|
"type": "keyword"
|
|
},
|
|
"consumer": {
|
|
"type": "keyword"
|
|
},
|
|
"createdAt": {
|
|
"type": "date"
|
|
},
|
|
"createdBy": {
|
|
"type": "keyword"
|
|
},
|
|
"enabled": {
|
|
"type": "boolean"
|
|
},
|
|
"executionStatus": {
|
|
"properties": {
|
|
"error": {
|
|
"properties": {
|
|
"message": {
|
|
"type": "keyword"
|
|
},
|
|
"reason": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"lastDuration": {
|
|
"type": "long"
|
|
},
|
|
"lastExecutionDate": {
|
|
"type": "date"
|
|
},
|
|
"numberOfTriggeredActions": {
|
|
"type": "long"
|
|
},
|
|
"status": {
|
|
"type": "keyword"
|
|
},
|
|
"warning": {
|
|
"properties": {
|
|
"message": {
|
|
"type": "keyword"
|
|
},
|
|
"reason": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"lastRun": {
|
|
"properties": {
|
|
"alertsCount": {
|
|
"properties": {
|
|
"active": {
|
|
"type": "float"
|
|
},
|
|
"ignored": {
|
|
"type": "float"
|
|
},
|
|
"new": {
|
|
"type": "float"
|
|
},
|
|
"recovered": {
|
|
"type": "float"
|
|
}
|
|
}
|
|
},
|
|
"outcome": {
|
|
"type": "keyword"
|
|
},
|
|
"outcomeOrder": {
|
|
"type": "float"
|
|
}
|
|
}
|
|
},
|
|
"legacyId": {
|
|
"type": "keyword"
|
|
},
|
|
"mapped_params": {
|
|
"properties": {
|
|
"risk_score": {
|
|
"type": "float"
|
|
},
|
|
"severity": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"monitoring": {
|
|
"properties": {
|
|
"run": {
|
|
"properties": {
|
|
"calculated_metrics": {
|
|
"properties": {
|
|
"p50": {
|
|
"type": "long"
|
|
},
|
|
"p95": {
|
|
"type": "long"
|
|
},
|
|
"p99": {
|
|
"type": "long"
|
|
},
|
|
"success_ratio": {
|
|
"type": "float"
|
|
}
|
|
}
|
|
},
|
|
"last_run": {
|
|
"properties": {
|
|
"metrics": {
|
|
"properties": {
|
|
"duration": {
|
|
"type": "long"
|
|
},
|
|
"gap_duration_s": {
|
|
"type": "float"
|
|
},
|
|
"total_alerts_created": {
|
|
"type": "float"
|
|
},
|
|
"total_alerts_detected": {
|
|
"type": "float"
|
|
},
|
|
"total_indexing_duration_ms": {
|
|
"type": "long"
|
|
},
|
|
"total_search_duration_ms": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
},
|
|
"timestamp": {
|
|
"type": "date"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"muteAll": {
|
|
"type": "boolean"
|
|
},
|
|
"mutedInstanceIds": {
|
|
"type": "keyword"
|
|
},
|
|
"name": {
|
|
"fields": {
|
|
"keyword": {
|
|
"normalizer": "lowercase",
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
},
|
|
"notifyWhen": {
|
|
"type": "keyword"
|
|
},
|
|
"params": {
|
|
"ignore_above": 4096,
|
|
"type": "flattened"
|
|
},
|
|
"revision": {
|
|
"type": "long"
|
|
},
|
|
"running": {
|
|
"type": "boolean"
|
|
},
|
|
"schedule": {
|
|
"properties": {
|
|
"interval": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"scheduledTaskId": {
|
|
"type": "keyword"
|
|
},
|
|
"snoozeSchedule": {
|
|
"properties": {
|
|
"duration": {
|
|
"type": "long"
|
|
},
|
|
"id": {
|
|
"type": "keyword"
|
|
},
|
|
"skipRecurrences": {
|
|
"format": "strict_date_time",
|
|
"type": "date"
|
|
}
|
|
},
|
|
"type": "nested"
|
|
},
|
|
"tags": {
|
|
"type": "keyword"
|
|
},
|
|
"throttle": {
|
|
"type": "keyword"
|
|
},
|
|
"updatedAt": {
|
|
"type": "date"
|
|
},
|
|
"updatedBy": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"api_key_pending_invalidation": {
|
|
"properties": {
|
|
"apiKeyId": {
|
|
"type": "keyword"
|
|
},
|
|
"createdAt": {
|
|
"type": "date"
|
|
}
|
|
}
|
|
},
|
|
"apm-custom-dashboards": {
|
|
"properties": {
|
|
"dashboardSavedObjectId": {
|
|
"type": "keyword"
|
|
},
|
|
"kuery": {
|
|
"type": "text"
|
|
},
|
|
"serviceEnvironmentFilterEnabled": {
|
|
"type": "boolean"
|
|
},
|
|
"serviceNameFilterEnabled": {
|
|
"type": "boolean"
|
|
}
|
|
}
|
|
},
|
|
"apm-indices": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"apm-server-schema": {
|
|
"properties": {
|
|
"schemaJson": {
|
|
"index": false,
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"apm-service-group": {
|
|
"properties": {
|
|
"color": {
|
|
"type": "text"
|
|
},
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"groupName": {
|
|
"type": "keyword"
|
|
},
|
|
"kuery": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"apm-telemetry": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"app_search_telemetry": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"application_usage_daily": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"timestamp": {
|
|
"type": "date"
|
|
}
|
|
}
|
|
},
|
|
"application_usage_totals": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"background-task-node": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"id": {
|
|
"type": "keyword"
|
|
},
|
|
"last_seen": {
|
|
"type": "date"
|
|
}
|
|
}
|
|
},
|
|
"canvas-element": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"@created": {
|
|
"type": "date"
|
|
},
|
|
"@timestamp": {
|
|
"type": "date"
|
|
},
|
|
"content": {
|
|
"type": "text"
|
|
},
|
|
"help": {
|
|
"type": "text"
|
|
},
|
|
"image": {
|
|
"type": "text"
|
|
},
|
|
"name": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"canvas-workpad": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"@created": {
|
|
"type": "date"
|
|
},
|
|
"@timestamp": {
|
|
"type": "date"
|
|
},
|
|
"name": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"canvas-workpad-template": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"help": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
},
|
|
"name": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
},
|
|
"tags": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
},
|
|
"template_key": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"cases": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"assignees": {
|
|
"properties": {
|
|
"uid": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"category": {
|
|
"type": "keyword"
|
|
},
|
|
"closed_at": {
|
|
"type": "date"
|
|
},
|
|
"closed_by": {
|
|
"properties": {
|
|
"email": {
|
|
"type": "keyword"
|
|
},
|
|
"full_name": {
|
|
"type": "keyword"
|
|
},
|
|
"profile_uid": {
|
|
"type": "keyword"
|
|
},
|
|
"username": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"connector": {
|
|
"properties": {
|
|
"fields": {
|
|
"properties": {
|
|
"key": {
|
|
"type": "text"
|
|
},
|
|
"value": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"name": {
|
|
"type": "text"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"created_at": {
|
|
"type": "date"
|
|
},
|
|
"created_by": {
|
|
"properties": {
|
|
"email": {
|
|
"type": "keyword"
|
|
},
|
|
"full_name": {
|
|
"type": "keyword"
|
|
},
|
|
"profile_uid": {
|
|
"type": "keyword"
|
|
},
|
|
"username": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"customFields": {
|
|
"properties": {
|
|
"key": {
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
},
|
|
"value": {
|
|
"fields": {
|
|
"boolean": {
|
|
"ignore_malformed": true,
|
|
"type": "boolean"
|
|
},
|
|
"date": {
|
|
"ignore_malformed": true,
|
|
"type": "date"
|
|
},
|
|
"ip": {
|
|
"ignore_malformed": true,
|
|
"type": "ip"
|
|
},
|
|
"number": {
|
|
"ignore_malformed": true,
|
|
"type": "long"
|
|
},
|
|
"string": {
|
|
"type": "text"
|
|
}
|
|
},
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "nested"
|
|
},
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"duration": {
|
|
"type": "unsigned_long"
|
|
},
|
|
"external_service": {
|
|
"properties": {
|
|
"connector_name": {
|
|
"type": "keyword"
|
|
},
|
|
"external_id": {
|
|
"type": "keyword"
|
|
},
|
|
"external_title": {
|
|
"type": "text"
|
|
},
|
|
"external_url": {
|
|
"type": "text"
|
|
},
|
|
"pushed_at": {
|
|
"type": "date"
|
|
},
|
|
"pushed_by": {
|
|
"properties": {
|
|
"email": {
|
|
"type": "keyword"
|
|
},
|
|
"full_name": {
|
|
"type": "keyword"
|
|
},
|
|
"profile_uid": {
|
|
"type": "keyword"
|
|
},
|
|
"username": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"observables": {
|
|
"properties": {
|
|
"typeKey": {
|
|
"type": "keyword"
|
|
},
|
|
"value": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "nested"
|
|
},
|
|
"owner": {
|
|
"type": "keyword"
|
|
},
|
|
"settings": {
|
|
"properties": {
|
|
"syncAlerts": {
|
|
"type": "boolean"
|
|
}
|
|
}
|
|
},
|
|
"severity": {
|
|
"type": "short"
|
|
},
|
|
"status": {
|
|
"type": "short"
|
|
},
|
|
"tags": {
|
|
"type": "keyword"
|
|
},
|
|
"title": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
},
|
|
"total_alerts": {
|
|
"type": "integer"
|
|
},
|
|
"total_comments": {
|
|
"type": "integer"
|
|
},
|
|
"updated_at": {
|
|
"type": "date"
|
|
},
|
|
"updated_by": {
|
|
"properties": {
|
|
"email": {
|
|
"type": "keyword"
|
|
},
|
|
"full_name": {
|
|
"type": "keyword"
|
|
},
|
|
"profile_uid": {
|
|
"type": "keyword"
|
|
},
|
|
"username": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"cases-comments": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"actions": {
|
|
"properties": {
|
|
"type": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"alertId": {
|
|
"type": "keyword"
|
|
},
|
|
"comment": {
|
|
"type": "text"
|
|
},
|
|
"created_at": {
|
|
"type": "date"
|
|
},
|
|
"created_by": {
|
|
"properties": {
|
|
"username": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"externalReferenceAttachmentTypeId": {
|
|
"type": "keyword"
|
|
},
|
|
"owner": {
|
|
"type": "keyword"
|
|
},
|
|
"persistableStateAttachmentTypeId": {
|
|
"type": "keyword"
|
|
},
|
|
"pushed_at": {
|
|
"type": "date"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
},
|
|
"updated_at": {
|
|
"type": "date"
|
|
}
|
|
}
|
|
},
|
|
"cases-configure": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"closure_type": {
|
|
"type": "keyword"
|
|
},
|
|
"created_at": {
|
|
"type": "date"
|
|
},
|
|
"owner": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"cases-connector-mappings": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"owner": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"cases-rules": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"counter": {
|
|
"type": "unsigned_long"
|
|
},
|
|
"createdAt": {
|
|
"type": "date"
|
|
},
|
|
"rules": {
|
|
"properties": {
|
|
"id": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"updatedAt": {
|
|
"type": "date"
|
|
}
|
|
}
|
|
},
|
|
"cases-telemetry": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"cases-user-actions": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"action": {
|
|
"type": "keyword"
|
|
},
|
|
"created_at": {
|
|
"type": "date"
|
|
},
|
|
"created_by": {
|
|
"properties": {
|
|
"username": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"owner": {
|
|
"type": "keyword"
|
|
},
|
|
"payload": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"assignees": {
|
|
"properties": {
|
|
"uid": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"comment": {
|
|
"properties": {
|
|
"externalReferenceAttachmentTypeId": {
|
|
"type": "keyword"
|
|
},
|
|
"persistableStateAttachmentTypeId": {
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"connector": {
|
|
"properties": {
|
|
"type": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"cloud": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"cloud-security-posture-settings": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"config": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"buildNum": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"config-global": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"buildNum": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"connector_token": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"connectorId": {
|
|
"type": "keyword"
|
|
},
|
|
"tokenType": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"core-usage-stats": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"csp-rule-template": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"metadata": {
|
|
"properties": {
|
|
"benchmark": {
|
|
"properties": {
|
|
"id": {
|
|
"type": "keyword"
|
|
},
|
|
"name": {
|
|
"type": "keyword"
|
|
},
|
|
"posture_type": {
|
|
"type": "keyword"
|
|
},
|
|
"rule_number": {
|
|
"type": "keyword"
|
|
},
|
|
"version": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "object"
|
|
},
|
|
"id": {
|
|
"type": "keyword"
|
|
},
|
|
"name": {
|
|
"fields": {
|
|
"text": {
|
|
"type": "text"
|
|
}
|
|
},
|
|
"type": "keyword"
|
|
},
|
|
"section": {
|
|
"fields": {
|
|
"text": {
|
|
"type": "text"
|
|
}
|
|
},
|
|
"type": "keyword"
|
|
},
|
|
"version": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "object"
|
|
}
|
|
}
|
|
},
|
|
"dashboard": {
|
|
"properties": {
|
|
"controlGroupInput": {
|
|
"properties": {
|
|
"chainingSystem": {
|
|
"doc_values": false,
|
|
"index": false,
|
|
"type": "keyword"
|
|
},
|
|
"controlStyle": {
|
|
"doc_values": false,
|
|
"index": false,
|
|
"type": "keyword"
|
|
},
|
|
"ignoreParentSettingsJSON": {
|
|
"index": false,
|
|
"type": "text"
|
|
},
|
|
"panelsJSON": {
|
|
"index": false,
|
|
"type": "text"
|
|
},
|
|
"showApplySelections": {
|
|
"doc_values": false,
|
|
"index": false,
|
|
"type": "boolean"
|
|
}
|
|
}
|
|
},
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"hits": {
|
|
"doc_values": false,
|
|
"index": false,
|
|
"type": "integer"
|
|
},
|
|
"kibanaSavedObjectMeta": {
|
|
"properties": {
|
|
"searchSourceJSON": {
|
|
"index": false,
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"optionsJSON": {
|
|
"index": false,
|
|
"type": "text"
|
|
},
|
|
"panelsJSON": {
|
|
"index": false,
|
|
"type": "text"
|
|
},
|
|
"refreshInterval": {
|
|
"properties": {
|
|
"display": {
|
|
"doc_values": false,
|
|
"index": false,
|
|
"type": "keyword"
|
|
},
|
|
"pause": {
|
|
"doc_values": false,
|
|
"index": false,
|
|
"type": "boolean"
|
|
},
|
|
"section": {
|
|
"doc_values": false,
|
|
"index": false,
|
|
"type": "integer"
|
|
},
|
|
"value": {
|
|
"doc_values": false,
|
|
"index": false,
|
|
"type": "integer"
|
|
}
|
|
}
|
|
},
|
|
"timeFrom": {
|
|
"doc_values": false,
|
|
"index": false,
|
|
"type": "keyword"
|
|
},
|
|
"timeRestore": {
|
|
"doc_values": false,
|
|
"index": false,
|
|
"type": "boolean"
|
|
},
|
|
"timeTo": {
|
|
"doc_values": false,
|
|
"index": false,
|
|
"type": "keyword"
|
|
},
|
|
"title": {
|
|
"type": "text"
|
|
},
|
|
"version": {
|
|
"type": "integer"
|
|
}
|
|
}
|
|
},
|
|
"dynamic-config-overrides": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"endpoint:unified-user-artifact-manifest": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"artifactIds": {
|
|
"type": "keyword"
|
|
},
|
|
"policyId": {
|
|
"type": "keyword"
|
|
},
|
|
"semanticVersion": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"endpoint:user-artifact-manifest": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"artifacts": {
|
|
"type": "nested"
|
|
},
|
|
"schemaVersion": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"enterprise_search_telemetry": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"entity-definition": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"filter": {
|
|
"type": "keyword"
|
|
},
|
|
"id": {
|
|
"type": "keyword"
|
|
},
|
|
"identityFields": {
|
|
"type": "object"
|
|
},
|
|
"indexPatterns": {
|
|
"type": "keyword"
|
|
},
|
|
"managed": {
|
|
"type": "boolean"
|
|
},
|
|
"metadata": {
|
|
"type": "object"
|
|
},
|
|
"metrics": {
|
|
"type": "object"
|
|
},
|
|
"name": {
|
|
"type": "text"
|
|
},
|
|
"staticFields": {
|
|
"type": "object"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
},
|
|
"version": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"entity-discovery-api-key": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"apiKey": {
|
|
"type": "binary"
|
|
}
|
|
}
|
|
},
|
|
"entity-engine-status": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"fieldHistoryLength": {
|
|
"index": false,
|
|
"type": "integer"
|
|
},
|
|
"filter": {
|
|
"type": "keyword"
|
|
},
|
|
"indexPattern": {
|
|
"type": "keyword"
|
|
},
|
|
"status": {
|
|
"type": "keyword"
|
|
},
|
|
"timestampField": {
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"epm-packages": {
|
|
"properties": {
|
|
"additional_spaces_installed_kibana": {
|
|
"index": false,
|
|
"type": "flattened"
|
|
},
|
|
"es_index_patterns": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"experimental_data_stream_features": {
|
|
"properties": {
|
|
"data_stream": {
|
|
"type": "keyword"
|
|
},
|
|
"features": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"synthetic_source": {
|
|
"type": "boolean"
|
|
},
|
|
"tsdb": {
|
|
"type": "boolean"
|
|
}
|
|
},
|
|
"type": "nested"
|
|
}
|
|
},
|
|
"type": "nested"
|
|
},
|
|
"install_format_schema_version": {
|
|
"type": "version"
|
|
},
|
|
"install_source": {
|
|
"type": "keyword"
|
|
},
|
|
"install_started_at": {
|
|
"type": "date"
|
|
},
|
|
"install_status": {
|
|
"type": "keyword"
|
|
},
|
|
"install_version": {
|
|
"type": "keyword"
|
|
},
|
|
"installed_es": {
|
|
"properties": {
|
|
"deferred": {
|
|
"type": "boolean"
|
|
},
|
|
"id": {
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
},
|
|
"version": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "nested"
|
|
},
|
|
"installed_kibana": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"installed_kibana_space_id": {
|
|
"type": "keyword"
|
|
},
|
|
"internal": {
|
|
"type": "boolean"
|
|
},
|
|
"keep_policies_up_to_date": {
|
|
"index": false,
|
|
"type": "boolean"
|
|
},
|
|
"latest_executed_state": {
|
|
"enabled": false,
|
|
"type": "object"
|
|
},
|
|
"latest_install_failed_attempts": {
|
|
"enabled": false,
|
|
"type": "object"
|
|
},
|
|
"name": {
|
|
"type": "keyword"
|
|
},
|
|
"package_assets": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"verification_key_id": {
|
|
"type": "keyword"
|
|
},
|
|
"verification_status": {
|
|
"type": "keyword"
|
|
},
|
|
"version": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"epm-packages-assets": {
|
|
"properties": {
|
|
"asset_path": {
|
|
"type": "keyword"
|
|
},
|
|
"data_base64": {
|
|
"type": "binary"
|
|
},
|
|
"data_utf8": {
|
|
"index": false,
|
|
"type": "text"
|
|
},
|
|
"install_source": {
|
|
"type": "keyword"
|
|
},
|
|
"media_type": {
|
|
"type": "keyword"
|
|
},
|
|
"package_name": {
|
|
"type": "keyword"
|
|
},
|
|
"package_version": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"event-annotation-group": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"title": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"event_loop_delays_daily": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"lastUpdatedAt": {
|
|
"type": "date"
|
|
}
|
|
}
|
|
},
|
|
"exception-list": {
|
|
"properties": {
|
|
"_tags": {
|
|
"type": "keyword"
|
|
},
|
|
"comments": {
|
|
"properties": {
|
|
"comment": {
|
|
"type": "keyword"
|
|
},
|
|
"created_at": {
|
|
"type": "keyword"
|
|
},
|
|
"created_by": {
|
|
"type": "keyword"
|
|
},
|
|
"id": {
|
|
"type": "keyword"
|
|
},
|
|
"updated_at": {
|
|
"type": "keyword"
|
|
},
|
|
"updated_by": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"created_at": {
|
|
"type": "keyword"
|
|
},
|
|
"created_by": {
|
|
"type": "keyword"
|
|
},
|
|
"description": {
|
|
"type": "keyword"
|
|
},
|
|
"entries": {
|
|
"properties": {
|
|
"entries": {
|
|
"properties": {
|
|
"field": {
|
|
"type": "keyword"
|
|
},
|
|
"operator": {
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
},
|
|
"value": {
|
|
"fields": {
|
|
"text": {
|
|
"type": "text"
|
|
}
|
|
},
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"field": {
|
|
"type": "keyword"
|
|
},
|
|
"list": {
|
|
"properties": {
|
|
"id": {
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"operator": {
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
},
|
|
"value": {
|
|
"fields": {
|
|
"text": {
|
|
"type": "text"
|
|
}
|
|
},
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"expire_time": {
|
|
"type": "date"
|
|
},
|
|
"immutable": {
|
|
"type": "boolean"
|
|
},
|
|
"item_id": {
|
|
"type": "keyword"
|
|
},
|
|
"list_id": {
|
|
"type": "keyword"
|
|
},
|
|
"list_type": {
|
|
"type": "keyword"
|
|
},
|
|
"meta": {
|
|
"type": "keyword"
|
|
},
|
|
"name": {
|
|
"fields": {
|
|
"text": {
|
|
"type": "text"
|
|
}
|
|
},
|
|
"type": "keyword"
|
|
},
|
|
"os_types": {
|
|
"type": "keyword"
|
|
},
|
|
"tags": {
|
|
"fields": {
|
|
"text": {
|
|
"type": "text"
|
|
}
|
|
},
|
|
"type": "keyword"
|
|
},
|
|
"tie_breaker_id": {
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
},
|
|
"updated_by": {
|
|
"type": "keyword"
|
|
},
|
|
"version": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"exception-list-agnostic": {
|
|
"properties": {
|
|
"_tags": {
|
|
"type": "keyword"
|
|
},
|
|
"comments": {
|
|
"properties": {
|
|
"comment": {
|
|
"type": "keyword"
|
|
},
|
|
"created_at": {
|
|
"type": "keyword"
|
|
},
|
|
"created_by": {
|
|
"type": "keyword"
|
|
},
|
|
"id": {
|
|
"type": "keyword"
|
|
},
|
|
"updated_at": {
|
|
"type": "keyword"
|
|
},
|
|
"updated_by": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"created_at": {
|
|
"type": "keyword"
|
|
},
|
|
"created_by": {
|
|
"type": "keyword"
|
|
},
|
|
"description": {
|
|
"type": "keyword"
|
|
},
|
|
"entries": {
|
|
"properties": {
|
|
"entries": {
|
|
"properties": {
|
|
"field": {
|
|
"type": "keyword"
|
|
},
|
|
"operator": {
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
},
|
|
"value": {
|
|
"fields": {
|
|
"text": {
|
|
"type": "text"
|
|
}
|
|
},
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"field": {
|
|
"type": "keyword"
|
|
},
|
|
"list": {
|
|
"properties": {
|
|
"id": {
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"operator": {
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
},
|
|
"value": {
|
|
"fields": {
|
|
"text": {
|
|
"type": "text"
|
|
}
|
|
},
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"expire_time": {
|
|
"type": "date"
|
|
},
|
|
"immutable": {
|
|
"type": "boolean"
|
|
},
|
|
"item_id": {
|
|
"type": "keyword"
|
|
},
|
|
"list_id": {
|
|
"type": "keyword"
|
|
},
|
|
"list_type": {
|
|
"type": "keyword"
|
|
},
|
|
"meta": {
|
|
"type": "keyword"
|
|
},
|
|
"name": {
|
|
"fields": {
|
|
"text": {
|
|
"type": "text"
|
|
}
|
|
},
|
|
"type": "keyword"
|
|
},
|
|
"os_types": {
|
|
"type": "keyword"
|
|
},
|
|
"tags": {
|
|
"fields": {
|
|
"text": {
|
|
"type": "text"
|
|
}
|
|
},
|
|
"type": "keyword"
|
|
},
|
|
"tie_breaker_id": {
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
},
|
|
"updated_by": {
|
|
"type": "keyword"
|
|
},
|
|
"version": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"favorites": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"favoriteIds": {
|
|
"type": "keyword"
|
|
},
|
|
"favoriteMetadata": {
|
|
"dynamic": false,
|
|
"type": "object"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
},
|
|
"userId": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"file": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"FileKind": {
|
|
"type": "keyword"
|
|
},
|
|
"Meta": {
|
|
"type": "flattened"
|
|
},
|
|
"Status": {
|
|
"type": "keyword"
|
|
},
|
|
"Updated": {
|
|
"type": "date"
|
|
},
|
|
"created": {
|
|
"type": "date"
|
|
},
|
|
"extension": {
|
|
"type": "keyword"
|
|
},
|
|
"hash": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"mime_type": {
|
|
"type": "keyword"
|
|
},
|
|
"name": {
|
|
"type": "text"
|
|
},
|
|
"size": {
|
|
"type": "long"
|
|
},
|
|
"user": {
|
|
"type": "flattened"
|
|
}
|
|
}
|
|
},
|
|
"file-upload-usage-collection-telemetry": {
|
|
"properties": {
|
|
"file_upload": {
|
|
"properties": {
|
|
"index_creation_count": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"fileShare": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"created": {
|
|
"type": "date"
|
|
},
|
|
"name": {
|
|
"type": "keyword"
|
|
},
|
|
"token": {
|
|
"type": "keyword"
|
|
},
|
|
"valid_until": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
},
|
|
"fleet-agent-policies": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"advanced_settings": {
|
|
"index": false,
|
|
"type": "flattened"
|
|
},
|
|
"agent_features": {
|
|
"properties": {
|
|
"enabled": {
|
|
"type": "boolean"
|
|
},
|
|
"name": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"agentless": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"data_output_id": {
|
|
"type": "keyword"
|
|
},
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"download_source_id": {
|
|
"type": "keyword"
|
|
},
|
|
"fleet_server_host_id": {
|
|
"type": "keyword"
|
|
},
|
|
"global_data_tags": {
|
|
"index": false,
|
|
"type": "flattened"
|
|
},
|
|
"inactivity_timeout": {
|
|
"type": "integer"
|
|
},
|
|
"is_default": {
|
|
"type": "boolean"
|
|
},
|
|
"is_default_fleet_server": {
|
|
"type": "boolean"
|
|
},
|
|
"is_managed": {
|
|
"type": "boolean"
|
|
},
|
|
"is_preconfigured": {
|
|
"type": "keyword"
|
|
},
|
|
"is_protected": {
|
|
"type": "boolean"
|
|
},
|
|
"keep_monitoring_alive": {
|
|
"type": "boolean"
|
|
},
|
|
"monitoring_enabled": {
|
|
"index": false,
|
|
"type": "keyword"
|
|
},
|
|
"monitoring_output_id": {
|
|
"type": "keyword"
|
|
},
|
|
"name": {
|
|
"type": "keyword"
|
|
},
|
|
"namespace": {
|
|
"type": "keyword"
|
|
},
|
|
"overrides": {
|
|
"index": false,
|
|
"type": "flattened"
|
|
},
|
|
"required_versions": {
|
|
"index": false,
|
|
"type": "flattened"
|
|
},
|
|
"revision": {
|
|
"type": "integer"
|
|
},
|
|
"schema_version": {
|
|
"type": "version"
|
|
},
|
|
"status": {
|
|
"type": "keyword"
|
|
},
|
|
"supports_agentless": {
|
|
"type": "boolean"
|
|
},
|
|
"unenroll_timeout": {
|
|
"type": "integer"
|
|
},
|
|
"updated_at": {
|
|
"type": "date"
|
|
},
|
|
"updated_by": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"fleet-fleet-server-host": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"host_urls": {
|
|
"index": false,
|
|
"type": "keyword"
|
|
},
|
|
"is_default": {
|
|
"type": "boolean"
|
|
},
|
|
"is_internal": {
|
|
"index": false,
|
|
"type": "boolean"
|
|
},
|
|
"is_preconfigured": {
|
|
"type": "boolean"
|
|
},
|
|
"name": {
|
|
"type": "keyword"
|
|
},
|
|
"proxy_id": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"fleet-message-signing-keys": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"fleet-package-policies": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"bump_agent_policy_revision": {
|
|
"type": "boolean"
|
|
},
|
|
"created_at": {
|
|
"type": "date"
|
|
},
|
|
"created_by": {
|
|
"type": "keyword"
|
|
},
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"elasticsearch": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"enabled": {
|
|
"type": "boolean"
|
|
},
|
|
"inputs": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"is_managed": {
|
|
"type": "boolean"
|
|
},
|
|
"name": {
|
|
"type": "keyword"
|
|
},
|
|
"namespace": {
|
|
"type": "keyword"
|
|
},
|
|
"output_id": {
|
|
"type": "keyword"
|
|
},
|
|
"overrides": {
|
|
"index": false,
|
|
"type": "flattened"
|
|
},
|
|
"package": {
|
|
"properties": {
|
|
"name": {
|
|
"type": "keyword"
|
|
},
|
|
"requires_root": {
|
|
"type": "boolean"
|
|
},
|
|
"title": {
|
|
"type": "keyword"
|
|
},
|
|
"version": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"policy_id": {
|
|
"type": "keyword"
|
|
},
|
|
"policy_ids": {
|
|
"type": "keyword"
|
|
},
|
|
"revision": {
|
|
"type": "integer"
|
|
},
|
|
"secret_references": {
|
|
"properties": {
|
|
"id": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"supports_agentless": {
|
|
"type": "boolean"
|
|
},
|
|
"updated_at": {
|
|
"type": "date"
|
|
},
|
|
"updated_by": {
|
|
"type": "keyword"
|
|
},
|
|
"vars": {
|
|
"type": "flattened"
|
|
}
|
|
}
|
|
},
|
|
"fleet-preconfiguration-deletion-record": {
|
|
"properties": {
|
|
"id": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"fleet-proxy": {
|
|
"properties": {
|
|
"certificate": {
|
|
"index": false,
|
|
"type": "keyword"
|
|
},
|
|
"certificate_authorities": {
|
|
"index": false,
|
|
"type": "keyword"
|
|
},
|
|
"certificate_key": {
|
|
"index": false,
|
|
"type": "keyword"
|
|
},
|
|
"is_preconfigured": {
|
|
"type": "boolean"
|
|
},
|
|
"name": {
|
|
"type": "keyword"
|
|
},
|
|
"proxy_headers": {
|
|
"index": false,
|
|
"type": "text"
|
|
},
|
|
"url": {
|
|
"index": false,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"fleet-setup-lock": {
|
|
"properties": {
|
|
"started_at": {
|
|
"type": "date"
|
|
},
|
|
"status": {
|
|
"type": "keyword"
|
|
},
|
|
"uuid": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"fleet-space-settings": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"fleet-uninstall-tokens": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"namespaces": {
|
|
"type": "keyword"
|
|
},
|
|
"policy_id": {
|
|
"type": "keyword"
|
|
},
|
|
"token_plain": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"graph-workspace": {
|
|
"properties": {
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"kibanaSavedObjectMeta": {
|
|
"properties": {
|
|
"searchSourceJSON": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"legacyIndexPatternRef": {
|
|
"index": false,
|
|
"type": "text"
|
|
},
|
|
"numLinks": {
|
|
"type": "integer"
|
|
},
|
|
"numVertices": {
|
|
"type": "integer"
|
|
},
|
|
"title": {
|
|
"type": "text"
|
|
},
|
|
"version": {
|
|
"type": "integer"
|
|
},
|
|
"wsState": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"guided-onboarding-guide-state": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"guideId": {
|
|
"type": "keyword"
|
|
},
|
|
"isActive": {
|
|
"type": "boolean"
|
|
}
|
|
}
|
|
},
|
|
"guided-onboarding-plugin-state": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"index-pattern": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"name": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
},
|
|
"title": {
|
|
"type": "text"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"infra-custom-dashboards": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"assetType": {
|
|
"type": "keyword"
|
|
},
|
|
"dashboardFilterAssetIdEnabled": {
|
|
"type": "boolean"
|
|
},
|
|
"dashboardSavedObjectId": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"infrastructure-monitoring-log-view": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"name": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"infrastructure-ui-source": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"ingest-agent-policies": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"advanced_settings": {
|
|
"index": false,
|
|
"type": "flattened"
|
|
},
|
|
"agent_features": {
|
|
"properties": {
|
|
"enabled": {
|
|
"type": "boolean"
|
|
},
|
|
"name": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"agentless": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"data_output_id": {
|
|
"type": "keyword"
|
|
},
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"download_source_id": {
|
|
"type": "keyword"
|
|
},
|
|
"fleet_server_host_id": {
|
|
"type": "keyword"
|
|
},
|
|
"global_data_tags": {
|
|
"index": false,
|
|
"type": "flattened"
|
|
},
|
|
"inactivity_timeout": {
|
|
"type": "integer"
|
|
},
|
|
"is_default": {
|
|
"type": "boolean"
|
|
},
|
|
"is_default_fleet_server": {
|
|
"type": "boolean"
|
|
},
|
|
"is_managed": {
|
|
"type": "boolean"
|
|
},
|
|
"is_preconfigured": {
|
|
"type": "keyword"
|
|
},
|
|
"is_protected": {
|
|
"type": "boolean"
|
|
},
|
|
"keep_monitoring_alive": {
|
|
"type": "boolean"
|
|
},
|
|
"monitoring_diagnostics": {
|
|
"index": false,
|
|
"type": "flattened"
|
|
},
|
|
"monitoring_enabled": {
|
|
"index": false,
|
|
"type": "keyword"
|
|
},
|
|
"monitoring_http": {
|
|
"index": false,
|
|
"type": "flattened"
|
|
},
|
|
"monitoring_output_id": {
|
|
"type": "keyword"
|
|
},
|
|
"monitoring_pprof_enabled": {
|
|
"index": false,
|
|
"type": "boolean"
|
|
},
|
|
"name": {
|
|
"type": "keyword"
|
|
},
|
|
"namespace": {
|
|
"type": "keyword"
|
|
},
|
|
"overrides": {
|
|
"index": false,
|
|
"type": "flattened"
|
|
},
|
|
"required_versions": {
|
|
"index": false,
|
|
"type": "flattened"
|
|
},
|
|
"revision": {
|
|
"type": "integer"
|
|
},
|
|
"schema_version": {
|
|
"type": "version"
|
|
},
|
|
"status": {
|
|
"type": "keyword"
|
|
},
|
|
"supports_agentless": {
|
|
"type": "boolean"
|
|
},
|
|
"unenroll_timeout": {
|
|
"type": "integer"
|
|
},
|
|
"updated_at": {
|
|
"type": "date"
|
|
},
|
|
"updated_by": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"ingest-download-sources": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"host": {
|
|
"type": "keyword"
|
|
},
|
|
"is_default": {
|
|
"type": "boolean"
|
|
},
|
|
"name": {
|
|
"type": "keyword"
|
|
},
|
|
"proxy_id": {
|
|
"type": "keyword"
|
|
},
|
|
"source_id": {
|
|
"index": false,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"ingest-outputs": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"allow_edit": {
|
|
"enabled": false
|
|
},
|
|
"auth_type": {
|
|
"type": "keyword"
|
|
},
|
|
"broker_ack_reliability": {
|
|
"type": "text"
|
|
},
|
|
"broker_buffer_size": {
|
|
"type": "integer"
|
|
},
|
|
"broker_timeout": {
|
|
"type": "integer"
|
|
},
|
|
"ca_sha256": {
|
|
"index": false,
|
|
"type": "keyword"
|
|
},
|
|
"ca_trusted_fingerprint": {
|
|
"index": false,
|
|
"type": "keyword"
|
|
},
|
|
"channel_buffer_size": {
|
|
"type": "integer"
|
|
},
|
|
"client_id": {
|
|
"type": "keyword"
|
|
},
|
|
"compression": {
|
|
"type": "keyword"
|
|
},
|
|
"compression_level": {
|
|
"type": "integer"
|
|
},
|
|
"config": {
|
|
"type": "flattened"
|
|
},
|
|
"config_yaml": {
|
|
"type": "text"
|
|
},
|
|
"connection_type": {
|
|
"type": "keyword"
|
|
},
|
|
"hash": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"hash": {
|
|
"type": "text"
|
|
},
|
|
"random": {
|
|
"type": "boolean"
|
|
}
|
|
}
|
|
},
|
|
"headers": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"key": {
|
|
"type": "text"
|
|
},
|
|
"value": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"hosts": {
|
|
"type": "keyword"
|
|
},
|
|
"is_default": {
|
|
"type": "boolean"
|
|
},
|
|
"is_default_monitoring": {
|
|
"type": "boolean"
|
|
},
|
|
"is_internal": {
|
|
"index": false,
|
|
"type": "boolean"
|
|
},
|
|
"is_preconfigured": {
|
|
"index": false,
|
|
"type": "boolean"
|
|
},
|
|
"key": {
|
|
"type": "keyword"
|
|
},
|
|
"name": {
|
|
"type": "keyword"
|
|
},
|
|
"output_id": {
|
|
"index": false,
|
|
"type": "keyword"
|
|
},
|
|
"partition": {
|
|
"type": "keyword"
|
|
},
|
|
"password": {
|
|
"index": false,
|
|
"type": "text"
|
|
},
|
|
"preset": {
|
|
"index": false,
|
|
"type": "keyword"
|
|
},
|
|
"proxy_id": {
|
|
"type": "keyword"
|
|
},
|
|
"random": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"group_events": {
|
|
"type": "integer"
|
|
}
|
|
}
|
|
},
|
|
"required_acks": {
|
|
"type": "integer"
|
|
},
|
|
"round_robin": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"group_events": {
|
|
"type": "integer"
|
|
}
|
|
}
|
|
},
|
|
"sasl": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"mechanism": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"secrets": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"password": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"id": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"service_token": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"id": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"ssl": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"key": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"id": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"service_token": {
|
|
"index": false,
|
|
"type": "keyword"
|
|
},
|
|
"shipper": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"ssl": {
|
|
"type": "binary"
|
|
},
|
|
"timeout": {
|
|
"type": "integer"
|
|
},
|
|
"topic": {
|
|
"index": false,
|
|
"type": "text"
|
|
},
|
|
"topics": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"topic": {
|
|
"type": "keyword"
|
|
},
|
|
"when": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"condition": {
|
|
"type": "text"
|
|
},
|
|
"type": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
},
|
|
"username": {
|
|
"type": "keyword"
|
|
},
|
|
"version": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"ingest-package-policies": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"bump_agent_policy_revision": {
|
|
"type": "boolean"
|
|
},
|
|
"created_at": {
|
|
"type": "date"
|
|
},
|
|
"created_by": {
|
|
"type": "keyword"
|
|
},
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"elasticsearch": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"enabled": {
|
|
"type": "boolean"
|
|
},
|
|
"inputs": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"is_managed": {
|
|
"type": "boolean"
|
|
},
|
|
"name": {
|
|
"type": "keyword"
|
|
},
|
|
"namespace": {
|
|
"type": "keyword"
|
|
},
|
|
"output_id": {
|
|
"type": "keyword"
|
|
},
|
|
"overrides": {
|
|
"index": false,
|
|
"type": "flattened"
|
|
},
|
|
"package": {
|
|
"properties": {
|
|
"name": {
|
|
"type": "keyword"
|
|
},
|
|
"requires_root": {
|
|
"type": "boolean"
|
|
},
|
|
"title": {
|
|
"type": "keyword"
|
|
},
|
|
"version": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"policy_id": {
|
|
"type": "keyword"
|
|
},
|
|
"policy_ids": {
|
|
"type": "keyword"
|
|
},
|
|
"revision": {
|
|
"type": "integer"
|
|
},
|
|
"secret_references": {
|
|
"properties": {
|
|
"id": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"supports_agentless": {
|
|
"type": "boolean"
|
|
},
|
|
"updated_at": {
|
|
"type": "date"
|
|
},
|
|
"updated_by": {
|
|
"type": "keyword"
|
|
},
|
|
"vars": {
|
|
"type": "flattened"
|
|
}
|
|
}
|
|
},
|
|
"ingest_manager_settings": {
|
|
"properties": {
|
|
"delete_unenrolled_agents": {
|
|
"properties": {
|
|
"enabled": {
|
|
"index": false,
|
|
"type": "boolean"
|
|
},
|
|
"is_preconfigured": {
|
|
"index": false,
|
|
"type": "boolean"
|
|
}
|
|
}
|
|
},
|
|
"fleet_server_hosts": {
|
|
"type": "keyword"
|
|
},
|
|
"has_seen_add_data_notice": {
|
|
"index": false,
|
|
"type": "boolean"
|
|
},
|
|
"output_secret_storage_requirements_met": {
|
|
"type": "boolean"
|
|
},
|
|
"prerelease_integrations_enabled": {
|
|
"type": "boolean"
|
|
},
|
|
"secret_storage_requirements_met": {
|
|
"type": "boolean"
|
|
},
|
|
"use_space_awareness_migration_started_at": {
|
|
"index": false,
|
|
"type": "date"
|
|
},
|
|
"use_space_awareness_migration_status": {
|
|
"index": false,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"inventory-view": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"kql-telemetry": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"legacy-url-alias": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"disabled": {
|
|
"type": "boolean"
|
|
},
|
|
"resolveCounter": {
|
|
"type": "long"
|
|
},
|
|
"sourceId": {
|
|
"type": "keyword"
|
|
},
|
|
"targetId": {
|
|
"type": "keyword"
|
|
},
|
|
"targetNamespace": {
|
|
"type": "keyword"
|
|
},
|
|
"targetType": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"lens": {
|
|
"properties": {
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"state": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"title": {
|
|
"type": "text"
|
|
},
|
|
"visualizationType": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"lens-ui-telemetry": {
|
|
"properties": {
|
|
"count": {
|
|
"type": "integer"
|
|
},
|
|
"date": {
|
|
"type": "date"
|
|
},
|
|
"name": {
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"links": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"links": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"title": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"maintenance-window": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"enabled": {
|
|
"type": "boolean"
|
|
},
|
|
"events": {
|
|
"format": "epoch_millis||strict_date_optional_time",
|
|
"type": "date_range"
|
|
},
|
|
"expirationDate": {
|
|
"type": "date"
|
|
},
|
|
"title": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
},
|
|
"updatedAt": {
|
|
"type": "date"
|
|
}
|
|
}
|
|
},
|
|
"map": {
|
|
"properties": {
|
|
"bounds": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"layerListJSON": {
|
|
"type": "text"
|
|
},
|
|
"mapStateJSON": {
|
|
"type": "text"
|
|
},
|
|
"title": {
|
|
"type": "text"
|
|
},
|
|
"uiStateJSON": {
|
|
"type": "text"
|
|
},
|
|
"version": {
|
|
"type": "integer"
|
|
}
|
|
}
|
|
},
|
|
"metrics-data-source": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"metrics-explorer-view": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"ml-job": {
|
|
"properties": {
|
|
"datafeed_id": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
},
|
|
"job_id": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"ml-module": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"datafeeds": {
|
|
"type": "object"
|
|
},
|
|
"defaultIndexPattern": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
},
|
|
"description": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
},
|
|
"id": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
},
|
|
"jobs": {
|
|
"type": "object"
|
|
},
|
|
"logo": {
|
|
"type": "object"
|
|
},
|
|
"query": {
|
|
"type": "object"
|
|
},
|
|
"tags": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
},
|
|
"title": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
},
|
|
"type": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"ml-trained-model": {
|
|
"properties": {
|
|
"job": {
|
|
"properties": {
|
|
"create_time": {
|
|
"type": "date"
|
|
},
|
|
"job_id": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"model_id": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"monitoring-telemetry": {
|
|
"properties": {
|
|
"reportedClusterUuids": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"observability-onboarding-state": {
|
|
"properties": {
|
|
"progress": {
|
|
"dynamic": false,
|
|
"type": "object"
|
|
},
|
|
"state": {
|
|
"dynamic": false,
|
|
"type": "object"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"osquery-manager-usage-metric": {
|
|
"properties": {
|
|
"count": {
|
|
"type": "long"
|
|
},
|
|
"errors": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
},
|
|
"osquery-pack": {
|
|
"properties": {
|
|
"created_at": {
|
|
"type": "date"
|
|
},
|
|
"created_by": {
|
|
"type": "keyword"
|
|
},
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"enabled": {
|
|
"type": "boolean"
|
|
},
|
|
"name": {
|
|
"type": "text"
|
|
},
|
|
"queries": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"ecs_mapping": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"id": {
|
|
"type": "keyword"
|
|
},
|
|
"interval": {
|
|
"type": "text"
|
|
},
|
|
"platform": {
|
|
"type": "keyword"
|
|
},
|
|
"query": {
|
|
"type": "text"
|
|
},
|
|
"timeout": {
|
|
"type": "short"
|
|
},
|
|
"version": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"shards": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"updated_at": {
|
|
"type": "date"
|
|
},
|
|
"updated_by": {
|
|
"type": "keyword"
|
|
},
|
|
"version": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
},
|
|
"osquery-pack-asset": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"name": {
|
|
"type": "text"
|
|
},
|
|
"queries": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"ecs_mapping": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"id": {
|
|
"type": "keyword"
|
|
},
|
|
"interval": {
|
|
"type": "text"
|
|
},
|
|
"platform": {
|
|
"type": "keyword"
|
|
},
|
|
"query": {
|
|
"type": "text"
|
|
},
|
|
"timeout": {
|
|
"type": "short"
|
|
},
|
|
"version": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"shards": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"version": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
},
|
|
"osquery-saved-query": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"created_at": {
|
|
"type": "date"
|
|
},
|
|
"created_by": {
|
|
"type": "text"
|
|
},
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"ecs_mapping": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"id": {
|
|
"type": "keyword"
|
|
},
|
|
"interval": {
|
|
"type": "keyword"
|
|
},
|
|
"platform": {
|
|
"type": "keyword"
|
|
},
|
|
"query": {
|
|
"type": "text"
|
|
},
|
|
"timeout": {
|
|
"type": "short"
|
|
},
|
|
"updated_at": {
|
|
"type": "date"
|
|
},
|
|
"updated_by": {
|
|
"type": "text"
|
|
},
|
|
"version": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"policy-settings-protection-updates-note": {
|
|
"properties": {
|
|
"note": {
|
|
"index": false,
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"product-doc-install-status": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"index_name": {
|
|
"type": "keyword"
|
|
},
|
|
"installation_status": {
|
|
"type": "keyword"
|
|
},
|
|
"last_installation_date": {
|
|
"type": "date"
|
|
},
|
|
"product_name": {
|
|
"type": "keyword"
|
|
},
|
|
"product_version": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"query": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"title": {
|
|
"type": "text"
|
|
},
|
|
"titleKeyword": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"risk-engine-configuration": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"alertSampleSizePerShard": {
|
|
"type": "integer"
|
|
},
|
|
"dataViewId": {
|
|
"type": "keyword"
|
|
},
|
|
"enabled": {
|
|
"type": "boolean"
|
|
},
|
|
"excludeAlertStatuses": {
|
|
"type": "keyword"
|
|
},
|
|
"filter": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"identifierType": {
|
|
"type": "keyword"
|
|
},
|
|
"interval": {
|
|
"type": "keyword"
|
|
},
|
|
"pageSize": {
|
|
"type": "integer"
|
|
},
|
|
"range": {
|
|
"properties": {
|
|
"end": {
|
|
"type": "keyword"
|
|
},
|
|
"start": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"rules-settings": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"flapping": {
|
|
"properties": {}
|
|
}
|
|
}
|
|
},
|
|
"sample-data-telemetry": {
|
|
"properties": {
|
|
"installCount": {
|
|
"type": "long"
|
|
},
|
|
"unInstallCount": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
},
|
|
"search": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"title": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"search-session": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"created": {
|
|
"type": "date"
|
|
},
|
|
"realmName": {
|
|
"type": "keyword"
|
|
},
|
|
"realmType": {
|
|
"type": "keyword"
|
|
},
|
|
"sessionId": {
|
|
"type": "keyword"
|
|
},
|
|
"username": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"search-telemetry": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"security-ai-prompt": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"model": {
|
|
"type": "keyword"
|
|
},
|
|
"prompt": {
|
|
"properties": {
|
|
"default": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"promptGroupId": {
|
|
"type": "keyword"
|
|
},
|
|
"promptId": {
|
|
"type": "keyword"
|
|
},
|
|
"provider": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"security-rule": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"rule_id": {
|
|
"type": "keyword"
|
|
},
|
|
"version": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
},
|
|
"security-solution-signals-migration": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"sourceIndex": {
|
|
"type": "keyword"
|
|
},
|
|
"updated": {
|
|
"type": "date"
|
|
},
|
|
"version": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
},
|
|
"siem-detection-engine-rule-actions": {
|
|
"properties": {
|
|
"actions": {
|
|
"properties": {
|
|
"actionRef": {
|
|
"type": "keyword"
|
|
},
|
|
"action_type_id": {
|
|
"type": "keyword"
|
|
},
|
|
"group": {
|
|
"type": "keyword"
|
|
},
|
|
"id": {
|
|
"type": "keyword"
|
|
},
|
|
"params": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
}
|
|
}
|
|
},
|
|
"alertThrottle": {
|
|
"type": "keyword"
|
|
},
|
|
"ruleAlertId": {
|
|
"type": "keyword"
|
|
},
|
|
"ruleThrottle": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"siem-ui-timeline": {
|
|
"properties": {
|
|
"columns": {
|
|
"properties": {
|
|
"aggregatable": {
|
|
"type": "boolean"
|
|
},
|
|
"category": {
|
|
"type": "keyword"
|
|
},
|
|
"columnHeaderType": {
|
|
"type": "keyword"
|
|
},
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"example": {
|
|
"type": "text"
|
|
},
|
|
"id": {
|
|
"type": "keyword"
|
|
},
|
|
"indexes": {
|
|
"type": "keyword"
|
|
},
|
|
"name": {
|
|
"type": "text"
|
|
},
|
|
"placeholder": {
|
|
"type": "text"
|
|
},
|
|
"searchable": {
|
|
"type": "boolean"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"created": {
|
|
"type": "date"
|
|
},
|
|
"createdBy": {
|
|
"type": "text"
|
|
},
|
|
"dataProviders": {
|
|
"properties": {
|
|
"and": {
|
|
"properties": {
|
|
"enabled": {
|
|
"type": "boolean"
|
|
},
|
|
"excluded": {
|
|
"type": "boolean"
|
|
},
|
|
"id": {
|
|
"type": "keyword"
|
|
},
|
|
"kqlQuery": {
|
|
"type": "text"
|
|
},
|
|
"name": {
|
|
"type": "text"
|
|
},
|
|
"queryMatch": {
|
|
"properties": {
|
|
"displayField": {
|
|
"type": "text"
|
|
},
|
|
"displayValue": {
|
|
"type": "text"
|
|
},
|
|
"field": {
|
|
"type": "text"
|
|
},
|
|
"operator": {
|
|
"type": "text"
|
|
},
|
|
"value": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"type": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"enabled": {
|
|
"type": "boolean"
|
|
},
|
|
"excluded": {
|
|
"type": "boolean"
|
|
},
|
|
"id": {
|
|
"type": "keyword"
|
|
},
|
|
"kqlQuery": {
|
|
"type": "text"
|
|
},
|
|
"name": {
|
|
"type": "text"
|
|
},
|
|
"queryMatch": {
|
|
"properties": {
|
|
"displayField": {
|
|
"type": "text"
|
|
},
|
|
"displayValue": {
|
|
"type": "text"
|
|
},
|
|
"field": {
|
|
"type": "text"
|
|
},
|
|
"operator": {
|
|
"type": "text"
|
|
},
|
|
"value": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"type": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"dateRange": {
|
|
"properties": {
|
|
"end": {
|
|
"type": "date"
|
|
},
|
|
"start": {
|
|
"type": "date"
|
|
}
|
|
}
|
|
},
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"eqlOptions": {
|
|
"properties": {
|
|
"eventCategoryField": {
|
|
"type": "text"
|
|
},
|
|
"query": {
|
|
"type": "text"
|
|
},
|
|
"size": {
|
|
"type": "text"
|
|
},
|
|
"tiebreakerField": {
|
|
"type": "text"
|
|
},
|
|
"timestampField": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"eventType": {
|
|
"type": "keyword"
|
|
},
|
|
"excludedRowRendererIds": {
|
|
"type": "text"
|
|
},
|
|
"favorite": {
|
|
"properties": {
|
|
"favoriteDate": {
|
|
"type": "date"
|
|
},
|
|
"fullName": {
|
|
"type": "text"
|
|
},
|
|
"keySearch": {
|
|
"type": "text"
|
|
},
|
|
"userName": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"filters": {
|
|
"properties": {
|
|
"exists": {
|
|
"type": "text"
|
|
},
|
|
"match_all": {
|
|
"type": "text"
|
|
},
|
|
"meta": {
|
|
"properties": {
|
|
"alias": {
|
|
"type": "text"
|
|
},
|
|
"controlledBy": {
|
|
"type": "text"
|
|
},
|
|
"disabled": {
|
|
"type": "boolean"
|
|
},
|
|
"field": {
|
|
"type": "text"
|
|
},
|
|
"formattedValue": {
|
|
"type": "text"
|
|
},
|
|
"index": {
|
|
"type": "keyword"
|
|
},
|
|
"key": {
|
|
"type": "keyword"
|
|
},
|
|
"negate": {
|
|
"type": "boolean"
|
|
},
|
|
"params": {
|
|
"type": "text"
|
|
},
|
|
"relation": {
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
},
|
|
"value": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"missing": {
|
|
"type": "text"
|
|
},
|
|
"query": {
|
|
"type": "text"
|
|
},
|
|
"range": {
|
|
"type": "text"
|
|
},
|
|
"script": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"indexNames": {
|
|
"type": "text"
|
|
},
|
|
"kqlMode": {
|
|
"type": "keyword"
|
|
},
|
|
"kqlQuery": {
|
|
"properties": {
|
|
"filterQuery": {
|
|
"properties": {
|
|
"kuery": {
|
|
"properties": {
|
|
"expression": {
|
|
"type": "text"
|
|
},
|
|
"kind": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"serializedQuery": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"savedSearchId": {
|
|
"type": "text"
|
|
},
|
|
"sort": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"columnId": {
|
|
"type": "keyword"
|
|
},
|
|
"columnType": {
|
|
"type": "keyword"
|
|
},
|
|
"sortDirection": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"status": {
|
|
"type": "keyword"
|
|
},
|
|
"templateTimelineId": {
|
|
"type": "text"
|
|
},
|
|
"templateTimelineVersion": {
|
|
"type": "integer"
|
|
},
|
|
"timelineType": {
|
|
"type": "keyword"
|
|
},
|
|
"title": {
|
|
"type": "text"
|
|
},
|
|
"updated": {
|
|
"type": "date"
|
|
},
|
|
"updatedBy": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"siem-ui-timeline-note": {
|
|
"properties": {
|
|
"created": {
|
|
"type": "date"
|
|
},
|
|
"createdBy": {
|
|
"type": "text"
|
|
},
|
|
"eventId": {
|
|
"type": "keyword"
|
|
},
|
|
"note": {
|
|
"type": "text"
|
|
},
|
|
"updated": {
|
|
"type": "date"
|
|
},
|
|
"updatedBy": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"siem-ui-timeline-pinned-event": {
|
|
"properties": {
|
|
"created": {
|
|
"type": "date"
|
|
},
|
|
"createdBy": {
|
|
"type": "text"
|
|
},
|
|
"eventId": {
|
|
"type": "keyword"
|
|
},
|
|
"updated": {
|
|
"type": "date"
|
|
},
|
|
"updatedBy": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"slo": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"budgetingMethod": {
|
|
"type": "keyword"
|
|
},
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"enabled": {
|
|
"type": "boolean"
|
|
},
|
|
"id": {
|
|
"type": "keyword"
|
|
},
|
|
"indicator": {
|
|
"properties": {
|
|
"params": {
|
|
"type": "flattened"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"name": {
|
|
"type": "text"
|
|
},
|
|
"tags": {
|
|
"type": "keyword"
|
|
},
|
|
"version": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
},
|
|
"slo-settings": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"space": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"disabledFeatures": {
|
|
"type": "keyword"
|
|
},
|
|
"name": {
|
|
"fields": {
|
|
"keyword": {
|
|
"ignore_above": 2048,
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
},
|
|
"solution": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"spaces-usage-stats": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"synthetics-dynamic-settings": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"synthetics-monitor": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"alert": {
|
|
"properties": {
|
|
"status": {
|
|
"properties": {
|
|
"enabled": {
|
|
"type": "boolean"
|
|
}
|
|
}
|
|
},
|
|
"tls": {
|
|
"properties": {
|
|
"enabled": {
|
|
"type": "boolean"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"config_id": {
|
|
"type": "keyword"
|
|
},
|
|
"custom_heartbeat_id": {
|
|
"type": "keyword"
|
|
},
|
|
"enabled": {
|
|
"type": "boolean"
|
|
},
|
|
"hash": {
|
|
"type": "keyword"
|
|
},
|
|
"hosts": {
|
|
"fields": {
|
|
"keyword": {
|
|
"ignore_above": 256,
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
},
|
|
"id": {
|
|
"type": "keyword"
|
|
},
|
|
"journey_id": {
|
|
"type": "keyword"
|
|
},
|
|
"locations": {
|
|
"properties": {
|
|
"id": {
|
|
"fields": {
|
|
"text": {
|
|
"type": "text"
|
|
}
|
|
},
|
|
"ignore_above": 256,
|
|
"type": "keyword"
|
|
},
|
|
"label": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"name": {
|
|
"fields": {
|
|
"keyword": {
|
|
"ignore_above": 256,
|
|
"normalizer": "lowercase",
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
},
|
|
"origin": {
|
|
"type": "keyword"
|
|
},
|
|
"project_id": {
|
|
"fields": {
|
|
"text": {
|
|
"type": "text"
|
|
}
|
|
},
|
|
"type": "keyword"
|
|
},
|
|
"schedule": {
|
|
"properties": {
|
|
"number": {
|
|
"type": "integer"
|
|
}
|
|
}
|
|
},
|
|
"tags": {
|
|
"fields": {
|
|
"text": {
|
|
"type": "text"
|
|
}
|
|
},
|
|
"type": "keyword"
|
|
},
|
|
"throttling": {
|
|
"properties": {
|
|
"label": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"type": {
|
|
"fields": {
|
|
"keyword": {
|
|
"ignore_above": 256,
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
},
|
|
"urls": {
|
|
"fields": {
|
|
"keyword": {
|
|
"ignore_above": 256,
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"synthetics-param": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"synthetics-private-location": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"synthetics-privates-locations": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"tag": {
|
|
"properties": {
|
|
"color": {
|
|
"type": "text"
|
|
},
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"name": {
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"task": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"attempts": {
|
|
"type": "integer"
|
|
},
|
|
"enabled": {
|
|
"type": "boolean"
|
|
},
|
|
"ownerId": {
|
|
"type": "keyword"
|
|
},
|
|
"partition": {
|
|
"type": "integer"
|
|
},
|
|
"priority": {
|
|
"type": "integer"
|
|
},
|
|
"retryAt": {
|
|
"type": "date"
|
|
},
|
|
"runAt": {
|
|
"type": "date"
|
|
},
|
|
"schedule": {
|
|
"properties": {
|
|
"interval": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"scheduledAt": {
|
|
"type": "date"
|
|
},
|
|
"scope": {
|
|
"type": "keyword"
|
|
},
|
|
"status": {
|
|
"type": "keyword"
|
|
},
|
|
"taskType": {
|
|
"type": "keyword"
|
|
},
|
|
"userScope": {
|
|
"properties": {
|
|
"apiKeyId": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"telemetry": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"threshold-explorer-view": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"ui-metric": {
|
|
"properties": {
|
|
"count": {
|
|
"type": "integer"
|
|
}
|
|
}
|
|
},
|
|
"upgrade-assistant-ml-upgrade-operation": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"snapshotId": {
|
|
"fields": {
|
|
"keyword": {
|
|
"ignore_above": 256,
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"upgrade-assistant-reindex-operation": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"indexName": {
|
|
"type": "keyword"
|
|
},
|
|
"status": {
|
|
"type": "integer"
|
|
}
|
|
}
|
|
},
|
|
"uptime-dynamic-settings": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
},
|
|
"uptime-synthetics-api-key": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"apiKey": {
|
|
"type": "binary"
|
|
}
|
|
}
|
|
},
|
|
"url": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"accessDate": {
|
|
"type": "date"
|
|
},
|
|
"createDate": {
|
|
"type": "date"
|
|
},
|
|
"slug": {
|
|
"fields": {
|
|
"keyword": {
|
|
"type": "keyword"
|
|
}
|
|
},
|
|
"type": "text"
|
|
}
|
|
}
|
|
},
|
|
"usage-counter": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"count": {
|
|
"type": "integer"
|
|
},
|
|
"counterName": {
|
|
"type": "keyword"
|
|
},
|
|
"counterType": {
|
|
"type": "keyword"
|
|
},
|
|
"domainId": {
|
|
"type": "keyword"
|
|
},
|
|
"source": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"usage-counters": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"domainId": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"visualization": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"kibanaSavedObjectMeta": {
|
|
"properties": {}
|
|
},
|
|
"title": {
|
|
"type": "text"
|
|
},
|
|
"version": {
|
|
"type": "integer"
|
|
}
|
|
}
|
|
},
|
|
"workchat_agent": {
|
|
"dynamic": "strict",
|
|
"properties": {
|
|
"access_control": {
|
|
"properties": {
|
|
"public": {
|
|
"type": "boolean"
|
|
}
|
|
}
|
|
},
|
|
"agent_id": {
|
|
"type": "keyword"
|
|
},
|
|
"agent_name": {
|
|
"type": "text"
|
|
},
|
|
"configuration": {
|
|
"dynamic": false,
|
|
"properties": {},
|
|
"type": "object"
|
|
},
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"last_updated": {
|
|
"type": "date"
|
|
},
|
|
"user_id": {
|
|
"type": "keyword"
|
|
},
|
|
"user_name": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"workchat_conversation": {
|
|
"dynamic": "strict",
|
|
"properties": {
|
|
"access_control": {
|
|
"properties": {
|
|
"public": {
|
|
"type": "boolean"
|
|
}
|
|
}
|
|
},
|
|
"agent_id": {
|
|
"type": "keyword"
|
|
},
|
|
"conversation_id": {
|
|
"type": "keyword"
|
|
},
|
|
"events": {
|
|
"dynamic": false,
|
|
"properties": {},
|
|
"type": "object"
|
|
},
|
|
"last_updated": {
|
|
"type": "date"
|
|
},
|
|
"title": {
|
|
"type": "text"
|
|
},
|
|
"user_id": {
|
|
"type": "keyword"
|
|
},
|
|
"user_name": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"workchat_integration": {
|
|
"dynamic": "strict",
|
|
"properties": {
|
|
"configuration": {
|
|
"dynamic": false,
|
|
"properties": {},
|
|
"type": "object"
|
|
},
|
|
"created_at": {
|
|
"type": "date"
|
|
},
|
|
"created_by": {
|
|
"type": "keyword"
|
|
},
|
|
"description": {
|
|
"type": "text"
|
|
},
|
|
"integration_id": {
|
|
"type": "keyword"
|
|
},
|
|
"name": {
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"type": "keyword"
|
|
},
|
|
"updated_at": {
|
|
"type": "date"
|
|
}
|
|
}
|
|
},
|
|
"workplace_search_telemetry": {
|
|
"dynamic": false,
|
|
"properties": {}
|
|
}
|
|
}
|