{ "properties": { "actions": { "properties": { "has_errors": { "type": "boolean" }, "error_messages": { "type": "array", "items": { "type": "text" } }, "alert_history_connector_enabled": { "type": "boolean", "_meta": { "description": "Indicates if preconfigured alert history connector is enabled." } }, "count_total": { "type": "long" }, "count_by_type": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__email": { "type": "long" }, "__index": { "type": "long" }, "[__gen-ai]": { "type": "long" }, "__pagerduty": { "type": "long" }, "__swimlane": { "type": "long" }, "__server-log": { "type": "long" }, "__slack": { "type": "long" }, "__webhook": { "type": "long" }, "__servicenow": { "type": "long" }, "__jira": { "type": "long" }, "__resilient": { "type": "long" }, "__teams": { "type": "long" } } }, "count_gen_ai_provider_types": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "[Azure OpenAI]": { "type": "long" }, "[OpenAI]": { "type": "long" } } }, "count_active_total": { "type": "long" }, "count_active_alert_history_connectors": { "type": "long", "_meta": { "description": "The total number of preconfigured alert history connectors used by rules." } }, "count_active_by_type": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__email": { "type": "long" }, "__index": { "type": "long" }, "[__gen-ai]": { "type": "long" }, "__pagerduty": { "type": "long" }, "__swimlane": { "type": "long" }, "__server-log": { "type": "long" }, "__slack": { "type": "long" }, "__webhook": { "type": "long" }, "__servicenow": { "type": "long" }, "__jira": { "type": "long" }, "__resilient": { "type": "long" }, "__teams": { "type": "long" } } }, "count_actions_executions_per_day": { "type": "long" }, "count_actions_executions_by_type_per_day": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__email": { "type": "long" }, "__index": { "type": "long" }, "[__gen-ai]": { "type": "long" }, "__pagerduty": { "type": "long" }, "__swimlane": { "type": "long" }, "__server-log": { "type": "long" }, "__slack": { "type": "long" }, "__webhook": { "type": "long" }, "__servicenow": { "type": "long" }, "__jira": { "type": "long" }, "__resilient": { "type": "long" }, "__teams": { "type": "long" } } }, "count_active_email_connectors_by_service_type": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "exchange_server": { "type": "long" }, "gmail": { "type": "long" }, "outlook365": { "type": "long" }, "elastic_cloud": { "type": "long" }, "other": { "type": "long" }, "ses": { "type": "long" } } }, "count_actions_namespaces": { "type": "long" }, "count_actions_executions_failed_per_day": { "type": "long" }, "count_actions_executions_failed_by_type_per_day": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__email": { "type": "long" }, "__index": { "type": "long" }, "[__gen-ai]": { "type": "long" }, "__pagerduty": { "type": "long" }, "__swimlane": { "type": "long" }, "__server-log": { "type": "long" }, "__slack": { "type": "long" }, "__webhook": { "type": "long" }, "__servicenow": { "type": "long" }, "__jira": { "type": "long" }, "__resilient": { "type": "long" }, "__teams": { "type": "long" } } }, "avg_execution_time_per_day": { "type": "long" }, "avg_execution_time_by_type_per_day": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__email": { "type": "long" }, "__index": { "type": "long" }, "[__gen-ai]": { "type": "long" }, "__pagerduty": { "type": "long" }, "__swimlane": { "type": "long" }, "__server-log": { "type": "long" }, "__slack": { "type": "long" }, "__webhook": { "type": "long" }, "__servicenow": { "type": "long" }, "__jira": { "type": "long" }, "__resilient": { "type": "long" }, "__teams": { "type": "long" } } }, "count_connector_types_by_action_run_outcome_per_day": { "properties": { "DYNAMIC_KEY": { "properties": { "success": { "type": "long" }, "failure": { "type": "long" }, "unknown": { "type": "long" } } } } } } }, "alerts": { "properties": { "has_errors": { "type": "boolean" }, "error_messages": { "type": "array", "items": { "type": "text" } }, "count_total": { "type": "long" }, "count_active_total": { "type": "long" }, "count_disabled_total": { "type": "long" }, "throttle_time": { "properties": { "min": { "type": "keyword" }, "avg": { "type": "keyword" }, "max": { "type": "keyword" } } }, "schedule_time": { "properties": { "min": { "type": "keyword" }, "avg": { "type": "keyword" }, "max": { "type": "keyword" } } }, "throttle_time_number_s": { "properties": { "min": { "type": "long" }, "avg": { "type": "float" }, "max": { "type": "long" } } }, "schedule_time_number_s": { "properties": { "min": { "type": "long" }, "avg": { "type": "float" }, "max": { "type": "long" } } }, "connectors_per_alert": { "properties": { "min": { "type": "long" }, "avg": { "type": "float" }, "max": { "type": "long" } } }, "count_active_by_type": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } }, "count_by_type": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } }, "count_rules_namespaces": { "type": "long" }, "count_rules_executions_per_day": { "type": "long" }, "count_rules_executions_by_type_per_day": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } }, "count_rules_executions_failured_per_day": { "type": "long" }, "count_rules_executions_failured_by_reason_per_day": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "read": { "type": "long" }, "decrypt": { "type": "long" }, "license": { "type": "long" }, "unknown": { "type": "long" } } }, "count_rules_executions_failured_by_reason_by_type_per_day": { "properties": { "DYNAMIC_KEY": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } }, "read": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } }, "decrypt": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } }, "license": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } }, "unknown": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } } } }, "count_rules_executions_timeouts_per_day": { "type": "long" }, "count_rules_executions_timeouts_by_type_per_day": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } }, "count_failed_and_unrecognized_rule_tasks_per_day": { "type": "long" }, "count_failed_and_unrecognized_rule_tasks_by_status_per_day": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "failed": { "type": "long" }, "unrecognized": { "type": "long" } } }, "count_failed_and_unrecognized_rule_tasks_by_status_by_type_per_day": { "properties": { "DYNAMIC_KEY": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } }, "failed": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } }, "unrecognized": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } } } }, "count_rules_by_execution_status": { "properties": { "success": { "type": "long" }, "error": { "type": "long" }, "warning": { "type": "long" } } }, "count_rules_with_tags": { "type": "long" }, "count_rules_by_notify_when": { "properties": { "on_action_group_change": { "type": "long" }, "on_active_alert": { "type": "long" }, "on_throttle_interval": { "type": "long" } } }, "count_rules_snoozed": { "type": "long" }, "count_rules_muted": { "type": "long" }, "count_rules_with_muted_alerts": { "type": "long" }, "count_connector_types_by_consumers": { "properties": { "DYNAMIC_KEY": { "properties": { "DYNAMIC_KEY": { "type": "long" } } } } }, "count_rules_by_execution_status_per_day": { "properties": { "success": { "type": "long" }, "failure": { "type": "long" }, "unknown": { "type": "long" } } }, "avg_execution_time_per_day": { "type": "long" }, "avg_execution_time_by_type_per_day": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } }, "avg_es_search_duration_per_day": { "type": "long" }, "avg_es_search_duration_by_type_per_day": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } }, "avg_total_search_duration_per_day": { "type": "long" }, "avg_total_search_duration_by_type_per_day": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } }, "percentile_num_generated_actions_per_day": { "properties": { "p50": { "type": "long" }, "p90": { "type": "long" }, "p99": { "type": "long" } } }, "percentile_num_generated_actions_by_type_per_day": { "properties": { "p50": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } }, "p90": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } }, "p99": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } } } }, "percentile_num_alerts_per_day": { "properties": { "p50": { "type": "long" }, "p90": { "type": "long" }, "p99": { "type": "long" } } }, "percentile_num_alerts_by_type_per_day": { "properties": { "p50": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } }, "p90": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } }, "p99": { "properties": { "DYNAMIC_KEY": { "type": "long" }, "__index-threshold": { "type": "long" }, "__es-query": { "type": "long" }, "transform_health": { "type": "long" }, "apm__error_rate": { "type": "long" }, "apm__transaction_error_rate": { "type": "long" }, "apm__transaction_duration": { "type": "long" }, "apm__transaction_duration_anomaly": { "type": "long" }, "metrics__alert__threshold": { "type": "long" }, "metrics__alert__inventory__threshold": { "type": "long" }, "logs__alert__document__count": { "type": "long" }, "monitoring_alert_cluster_health": { "type": "long" }, "monitoring_alert_cpu_usage": { "type": "long" }, "monitoring_alert_disk_usage": { "type": "long" }, "monitoring_alert_elasticsearch_version_mismatch": { "type": "long" }, "monitoring_alert_kibana_version_mismatch": { "type": "long" }, "monitoring_alert_license_expiration": { "type": "long" }, "monitoring_alert_logstash_version_mismatch": { "type": "long" }, "monitoring_alert_nodes_changed": { "type": "long" }, "siem__signals": { "type": "long" }, "siem__notifications": { "type": "long" }, "siem__eqlRule": { "type": "long" }, "siem__indicatorRule": { "type": "long" }, "siem__mlRule": { "type": "long" }, "siem__queryRule": { "type": "long" }, "siem__savedQueryRule": { "type": "long" }, "siem__thresholdRule": { "type": "long" }, "xpack__uptime__alerts__monitorStatus": { "type": "long" }, "xpack__uptime__alerts__tls": { "type": "long" }, "xpack__uptime__alerts__durationAnomaly": { "type": "long" }, "__geo-containment": { "type": "long" }, "xpack__ml__anomaly_detection_alert": { "type": "long" }, "xpack__ml__anomaly_detection_jobs_health": { "type": "long" } } } } } } }, "apm": { "properties": { "services_per_agent": { "properties": { "android/java": { "type": "long" }, "dotnet": { "type": "long" }, "iOS/swift": { "type": "long" }, "go": { "type": "long" }, "java": { "type": "long" }, "js-base": { "type": "long" }, "nodejs": { "type": "long" }, "php": { "type": "long" }, "python": { "type": "long" }, "ruby": { "type": "long" }, "rum-js": { "type": "long" }, "otlp": { "type": "long" }, "opentelemetry/cpp": { "type": "long" }, "opentelemetry/dotnet": { "type": "long" }, "opentelemetry/erlang": { "type": "long" }, "opentelemetry/go": { "type": "long" }, "opentelemetry/java": { "type": "long" }, "opentelemetry/nodejs": { "type": "long" }, "opentelemetry/php": { "type": "long" }, "opentelemetry/python": { "type": "long" }, "opentelemetry/ruby": { "type": "long" }, "opentelemetry/rust": { "type": "long" }, "opentelemetry/swift": { "type": "long" }, "opentelemetry/webjs": { "type": "long" } } }, "agents": { "properties": { "android/java": { "properties": { "agent": { "properties": { "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent versions within the last day" } } }, "activation_method": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent activation methods within the last day" } } } } }, "service": { "properties": { "framework": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service framework and version sorted by doc count" } } } } }, "language": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service language name and version sorted by doc count." } } } } }, "runtime": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service runtime name and version sorted by doc count." } } } } } } } } }, "dotnet": { "properties": { "agent": { "properties": { "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent versions within the last day" } } }, "activation_method": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent activation methods within the last day" } } } } }, "service": { "properties": { "framework": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service framework and version sorted by doc count" } } } } }, "language": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service language name and version sorted by doc count." } } } } }, "runtime": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service runtime name and version sorted by doc count." } } } } } } } } }, "iOS/swift": { "properties": { "agent": { "properties": { "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent versions within the last day" } } }, "activation_method": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent activation methods within the last day" } } } } }, "service": { "properties": { "framework": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service framework and version sorted by doc count" } } } } }, "language": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service language name and version sorted by doc count." } } } } }, "runtime": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service runtime name and version sorted by doc count." } } } } } } } } }, "go": { "properties": { "agent": { "properties": { "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent versions within the last day" } } }, "activation_method": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent activation methods within the last day" } } } } }, "service": { "properties": { "framework": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service framework and version sorted by doc count" } } } } }, "language": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service language name and version sorted by doc count." } } } } }, "runtime": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service runtime name and version sorted by doc count." } } } } } } } } }, "java": { "properties": { "agent": { "properties": { "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent versions within the last day" } } }, "activation_method": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent activation methods within the last day" } } } } }, "service": { "properties": { "framework": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service framework and version sorted by doc count" } } } } }, "language": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service language name and version sorted by doc count." } } } } }, "runtime": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service runtime name and version sorted by doc count." } } } } } } } } }, "js-base": { "properties": { "agent": { "properties": { "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent versions within the last day" } } }, "activation_method": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent activation methods within the last day" } } } } }, "service": { "properties": { "framework": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service framework and version sorted by doc count" } } } } }, "language": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service language name and version sorted by doc count." } } } } }, "runtime": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service runtime name and version sorted by doc count." } } } } } } } } }, "nodejs": { "properties": { "agent": { "properties": { "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent versions within the last day" } } }, "activation_method": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent activation methods within the last day" } } } } }, "service": { "properties": { "framework": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service framework and version sorted by doc count" } } } } }, "language": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service language name and version sorted by doc count." } } } } }, "runtime": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service runtime name and version sorted by doc count." } } } } } } } } }, "php": { "properties": { "agent": { "properties": { "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent versions within the last day" } } }, "activation_method": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent activation methods within the last day" } } } } }, "service": { "properties": { "framework": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service framework and version sorted by doc count" } } } } }, "language": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service language name and version sorted by doc count." } } } } }, "runtime": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service runtime name and version sorted by doc count." } } } } } } } } }, "python": { "properties": { "agent": { "properties": { "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent versions within the last day" } } }, "activation_method": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent activation methods within the last day" } } } } }, "service": { "properties": { "framework": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service framework and version sorted by doc count" } } } } }, "language": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service language name and version sorted by doc count." } } } } }, "runtime": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service runtime name and version sorted by doc count." } } } } } } } } }, "ruby": { "properties": { "agent": { "properties": { "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent versions within the last day" } } }, "activation_method": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent activation methods within the last day" } } } } }, "service": { "properties": { "framework": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service framework and version sorted by doc count" } } } } }, "language": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service language name and version sorted by doc count." } } } } }, "runtime": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service runtime name and version sorted by doc count." } } } } } } } } }, "rum-js": { "properties": { "agent": { "properties": { "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent versions within the last day" } } }, "activation_method": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 agent activation methods within the last day" } } } } }, "service": { "properties": { "framework": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service framework version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service framework and version sorted by doc count" } } } } }, "language": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service language version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service language name and version sorted by doc count." } } } } }, "runtime": { "properties": { "name": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime name within the last day" } } }, "version": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 service runtime version within the last day" } } }, "composite": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Composite field containing service runtime name and version sorted by doc count." } } } } } } } } } } }, "has_any_services": { "type": "boolean", "_meta": { "description": "Indicates whether any service is being monitored. This is determined by checking all agents within the last day" } }, "version": { "properties": { "apm_server": { "properties": { "major": { "type": "long", "_meta": { "description": "The major version of the APM server. Example: 7" } }, "minor": { "type": "long", "_meta": { "description": "The minor version of the APM server. Example: 17" } }, "patch": { "type": "long", "_meta": { "description": "The patch version of the APM server. Example 3" } } } } } }, "environments": { "properties": { "services_without_environment": { "type": "long", "_meta": { "description": "Number of services without an assigned environment within the last day. This is determined by checking the \"service.environment\" field and counting instances where it is null" } }, "services_with_multiple_environments": { "type": "long", "_meta": { "description": "Number of services with more than one assigned environment within the last day" } }, "top_environments": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 5 environments in terms of document count within tha last day" } } } } }, "aggregated_transactions": { "properties": { "current_implementation": { "properties": { "expected_metric_document_count": { "type": "long" }, "transaction_count": { "type": "long" } } }, "no_observer_name": { "properties": { "expected_metric_document_count": { "type": "long" }, "transaction_count": { "type": "long" } } }, "no_rum": { "properties": { "expected_metric_document_count": { "type": "long" }, "transaction_count": { "type": "long" } } }, "no_rum_no_observer_name": { "properties": { "expected_metric_document_count": { "type": "long" }, "transaction_count": { "type": "long" } } }, "only_rum": { "properties": { "expected_metric_document_count": { "type": "long" }, "transaction_count": { "type": "long" } } }, "only_rum_no_observer_name": { "properties": { "expected_metric_document_count": { "type": "long" }, "transaction_count": { "type": "long" } } } } }, "cloud": { "properties": { "availability_zone": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 10 cloud availability zones in terms of document count overall. Example: [us-east1-c, us-east1-b]" } } }, "provider": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 10 cloud providers in terms of document count overall. Example: [azure]" } } }, "region": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 10 cloud regions in terms of document count overall. Example: [us-west1, us-central1]" } } } } }, "host": { "properties": { "os": { "properties": { "platform": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 10 operating system platforms in terms of document count within an hour. Example: [linux, win32]" } } } } } } }, "counts": { "properties": { "transaction": { "properties": { "1d": { "type": "long", "_meta": { "description": "Total number of transaction documents within the last day" } }, "all": { "type": "long", "_meta": { "description": "Total number of transaction documents overall" } } } }, "span": { "properties": { "1d": { "type": "long", "_meta": { "description": "Total number of span documents within the last day" } }, "all": { "type": "long", "_meta": { "description": "Total number of span documents overall" } } } }, "error": { "properties": { "1d": { "type": "long", "_meta": { "description": "Total number of error documents within the last day" } }, "all": { "type": "long", "_meta": { "description": "Total number of error documents overall" } } } }, "metric": { "properties": { "1d": { "type": "long", "_meta": { "description": "Total number of metric documents within the last day" } }, "all": { "type": "long", "_meta": { "description": "Total number of metric documents overall" } } } }, "onboarding": { "properties": { "1d": { "type": "long", "_meta": { "description": "Total number of onboarding documents within the last day" } }, "all": { "type": "long", "_meta": { "description": "Total number of onboarding documents overall" } } } }, "agent_configuration": { "properties": { "all": { "type": "long", "_meta": { "description": "Total number of apm-agent-configuration documents overall" } } } }, "max_transaction_groups_per_service": { "properties": { "1d": { "type": "long", "_meta": { "description": "Total number of distinct transaction groups for the top service for the last 24 hours" } } } }, "max_error_groups_per_service": { "properties": { "1d": { "type": "long", "_meta": { "description": "Total number of distinct error groups for the top service for the last 24 hours" } } } }, "traces": { "properties": { "1d": { "type": "long", "_meta": { "description": "Total number of trace documents within the last day" } }, "all": { "type": "long", "_meta": { "description": "Total number of trace documents overall" } } } }, "services": { "properties": { "1d": { "type": "long" }, "all": { "type": "long" } } }, "environments": { "properties": { "1d": { "type": "long", "_meta": { "description": "Total number of unique environments within the last day" } } } }, "span_destination_service_resource": { "properties": { "1d": { "type": "long", "_meta": { "description": "Total number of unique values of span.destination.service.resource within the last day" } } } } } }, "cardinality": { "properties": { "client": { "properties": { "geo": { "properties": { "country_iso_code": { "properties": { "rum": { "properties": { "1d": { "type": "long", "_meta": { "description": "Unique country iso code captured for the agents js-base, rum-js and opentelemetry/webjs within the last day" } } } } } } } } } }, "user_agent": { "properties": { "original": { "properties": { "all_agents": { "properties": { "1d": { "type": "long", "_meta": { "description": "Unique user agent for all agents within the last day" } } } }, "rum": { "properties": { "1d": { "type": "long", "_meta": { "description": "Unique user agent for rum agent within the last day" } } } } } } } }, "transaction": { "properties": { "name": { "properties": { "all_agents": { "properties": { "1d": { "type": "long", "_meta": { "description": "Unique transaction names for all agents within the last day" } } } }, "rum": { "properties": { "1d": { "type": "long", "_meta": { "description": "Unique transaction names for rum agent within the last day" } } } } } } } } } }, "retainment": { "properties": { "span": { "properties": { "ms": { "type": "long", "_meta": { "description": "Represent the time difference in milliseconds between the current date and the date when the span document was recorded" } } } }, "transaction": { "properties": { "ms": { "type": "long", "_meta": { "description": "Represent the time difference in milliseconds between the current date and the date when the transaction document was recorded" } } } }, "error": { "properties": { "ms": { "type": "long", "_meta": { "description": "Represent the time difference in milliseconds between the current date and the date when the error document was recorded" } } } }, "metric": { "properties": { "ms": { "type": "long", "_meta": { "description": "Represent the time difference in milliseconds between the current date and the date when the metric document was recorded" } } } }, "onboarding": { "properties": { "ms": { "type": "long", "_meta": { "description": "Represent the time difference in milliseconds between the current date and the date when the onboarding document was recorded" } } } } } }, "integrations": { "properties": { "ml": { "properties": { "all_jobs_count": { "type": "long", "_meta": { "description": "Total number of anomaly detection jobs associated with the jobs apm-*, *-high_mean_response_time" } } } } } }, "indices": { "properties": { "metric": { "properties": { "shards": { "properties": { "total": { "type": "long" } } }, "all": { "properties": { "total": { "properties": { "docs": { "properties": { "count": { "type": "long" } } }, "store": { "properties": { "size_in_bytes": { "type": "long" } } } } } } } } }, "traces": { "properties": { "shards": { "properties": { "total": { "type": "long", "_meta": { "description": "Total number of shards overall" } } } }, "all": { "properties": { "total": { "properties": { "docs": { "properties": { "count": { "type": "long", "_meta": { "description": "Total number of transaction and span documents overall" } } } }, "store": { "properties": { "size_in_bytes": { "type": "long", "_meta": { "description": "Size of the index in byte units overall." } } } } } } } } } }, "shards": { "properties": { "total": { "type": "long", "_meta": { "description": "Total number of shards overall" } } } }, "all": { "properties": { "total": { "properties": { "docs": { "properties": { "count": { "type": "long", "_meta": { "description": "Total number of all documents overall" } } } }, "store": { "properties": { "size_in_bytes": { "type": "long", "_meta": { "description": "Size of the index in byte units overall." } } } } } } } } } }, "service_groups": { "properties": { "kuery_fields": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of up to 500 unique fields used to create the service groups across all spaces. Example [service.language.name, service.name] " } } }, "total": { "type": "long", "_meta": { "description": "Total number of service groups retrived from the saved object across all spaces" } } } }, "per_service": { "type": "array", "items": { "properties": { "service_id": { "type": "keyword", "_meta": { "description": "Unique identifier that combines the SHA256 hashed representation of the service name and environment" } }, "num_service_nodes": { "type": "long", "_meta": { "description": "Total number of the unique service instances that served the transaction within an hour" } }, "num_transaction_types": { "type": "long", "_meta": { "description": "Total number of the unique transaction types within an hour" } }, "timed_out": { "type": "boolean", "_meta": { "description": "Indicates whether the request timed out before completion" } }, "cloud": { "properties": { "availability_zones": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 5 cloud availability zones within an hour. Example [ca-central-1a, ca-central-1b]" } } }, "regions": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 5 cloud regions within an hour. Example [ca-central-1]" } } }, "providers": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 3 cloud provider within an hour. Example [aws]" } } } } }, "faas": { "properties": { "trigger": { "properties": { "type": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "An array of the top 5 faas trigger types within an hour. Example [http, timer, pubsub]" } } } } } } }, "agent": { "properties": { "name": { "type": "keyword", "_meta": { "description": "The top value of agent name for the service from transaction documents within an hour. Sorted by _score" } }, "version": { "type": "keyword", "_meta": { "description": "The top value of agent version for the service from transaction documents within an hour. Sorted by _score" } }, "activation_method": { "type": "keyword", "_meta": { "description": "The top value of agent activation method for the service from transaction documents within an hour. Sorted by _score" } } } }, "service": { "properties": { "language": { "properties": { "name": { "type": "keyword", "_meta": { "description": "The top value of language name for the service from transaction documents within an hour. Sorted by _score" } }, "version": { "type": "keyword", "_meta": { "description": "The top value of language version for the service from transaction documents within an hour. Sorted by _score" } } } }, "framework": { "properties": { "name": { "type": "keyword", "_meta": { "description": "The top value of service framework name from transaction documents within an hour. Sorted by _score. Example AWS Lambda" } }, "version": { "type": "keyword", "_meta": { "description": "The top value of service framework version from transaction documents within an hour. Sorted by _score" } } } }, "runtime": { "properties": { "name": { "type": "keyword", "_meta": { "description": "The top value of service runtime name from transaction documents within an hour. Sorted by _score" } }, "version": { "type": "keyword", "_meta": { "description": "The top value of service runtime version version from transaction documents within an hour. Sorted by _score" } } } } } }, "kubernetes": { "properties": { "pod": { "properties": { "name": { "type": "keyword" } } } } }, "container": { "properties": { "id": { "type": "keyword" } } } } } }, "tasks": { "properties": { "aggregated_transactions": { "properties": { "took": { "properties": { "ms": { "type": "long", "_meta": { "description": "Execution time in milliseconds for the \"aggregated_transactions\" task" } } } } } }, "cloud": { "properties": { "took": { "properties": { "ms": { "type": "long", "_meta": { "description": "Execution time in milliseconds for the \"cloud\" task" } } } } } }, "host": { "properties": { "took": { "properties": { "ms": { "type": "long", "_meta": { "description": "Execution time in milliseconds for the \"host\" task" } } } } } }, "processor_events": { "properties": { "took": { "properties": { "ms": { "type": "long", "_meta": { "description": "Execution time in milliseconds for the \"processor_events\" task" } } } } } }, "agent_configuration": { "properties": { "took": { "properties": { "ms": { "type": "long", "_meta": { "description": "Execution time in milliseconds for the \"agent_configuration\" task" } } } } } }, "services": { "properties": { "took": { "properties": { "ms": { "type": "long", "_meta": { "description": "Execution time in milliseconds for the \"services\" task" } } } } } }, "versions": { "properties": { "took": { "properties": { "ms": { "type": "long", "_meta": { "description": "Execution time in milliseconds for the \"versions\" task" } } } } } }, "groupings": { "properties": { "took": { "properties": { "ms": { "type": "long", "_meta": { "description": "Execution time in milliseconds for the \"groupings\" task" } } } } } }, "integrations": { "properties": { "took": { "properties": { "ms": { "type": "long", "_meta": { "description": "Execution time in milliseconds for the \"integrations\" task" } } } } } }, "agents": { "properties": { "took": { "properties": { "ms": { "type": "long", "_meta": { "description": "Execution time in milliseconds for the \"agents\" task" } } } } } }, "indices_stats": { "properties": { "took": { "properties": { "ms": { "type": "long", "_meta": { "description": "Execution time in milliseconds for the \"indices_stats\" task" } } } } } }, "cardinality": { "properties": { "took": { "properties": { "ms": { "type": "long", "_meta": { "description": "Execution time in milliseconds for the \"cardinality\" task" } } } } } }, "environments": { "properties": { "took": { "properties": { "ms": { "type": "long", "_meta": { "description": "Execution time in milliseconds for the \"environments\" task" } } } } } }, "service_groups": { "properties": { "took": { "properties": { "ms": { "type": "long", "_meta": { "description": "Execution time in milliseconds for the \"service_groups\" task" } } } } } }, "per_service": { "properties": { "took": { "properties": { "ms": { "type": "long", "_meta": { "description": "Execution time in milliseconds for the \"per_service\" task" } } } } } } } } } }, "app_search": { "properties": { "ui_viewed": { "properties": { "setup_guide": { "type": "long" }, "engines_overview": { "type": "long" } } }, "ui_error": { "properties": { "cannot_connect": { "type": "long" }, "not_found": { "type": "long" } } }, "ui_clicked": { "properties": { "create_first_engine_button": { "type": "long" }, "engine_table_link": { "type": "long" } } } } }, "canvas": { "properties": { "workpads": { "properties": { "total": { "type": "long", "_meta": { "description": "The total number of Canvas Workpads in the cluster" } } } }, "pages": { "properties": { "total": { "type": "long", "_meta": { "description": "The total number of pages across all Canvas Workpads" } }, "per_workpad": { "properties": { "avg": { "type": "float", "_meta": { "description": "The average number of pages across all Canvas Workpads" } }, "min": { "type": "long", "_meta": { "description": "The minimum number of pages found in a Canvas Workpad" } }, "max": { "type": "long", "_meta": { "description": "The maximum number of pages found in a Canvas Workpad" } } } } } }, "elements": { "properties": { "total": { "type": "long", "_meta": { "description": "The total number of elements across all Canvas Workpads" } }, "per_page": { "properties": { "avg": { "type": "float", "_meta": { "description": "The average number of elements per page across all Canvas Workpads" } }, "min": { "type": "long", "_meta": { "description": "The minimum number of elements on a page across all Canvas Workpads" } }, "max": { "type": "long", "_meta": { "description": "The maximum number of elements on a page across all Canvas Workpads" } } } } } }, "functions": { "properties": { "total": { "type": "long", "_meta": { "description": "The total number of functions in use across all Canvas Workpads" } }, "in_use": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "A function in use in any Canvas Workpad" } } }, "in_use_30d": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "A function in use in a Canvas Workpad that has been modified in the last 30 days" } } }, "in_use_90d": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "A function in use in a Canvas Workpad that has been modified in the last 90 days" } } }, "per_element": { "properties": { "avg": { "type": "float", "_meta": { "description": "Average number of functions used per element across all Canvas Workpads" } }, "min": { "type": "long", "_meta": { "description": "The minimum number of functions used in an element across all Canvas Workpads" } }, "max": { "type": "long", "_meta": { "description": "The maximum number of functions used in an element across all Canvas Workpads" } } } } } }, "variables": { "properties": { "total": { "type": "long", "_meta": { "description": "The total number of variables defined across all Canvas Workpads" } }, "per_workpad": { "properties": { "avg": { "type": "float", "_meta": { "description": "The average number of variables set per Canvas Workpad" } }, "min": { "type": "long", "_meta": { "description": "The minimum number variables set across all Canvas Workpads" } }, "max": { "type": "long", "_meta": { "description": "The maximum number of variables set across all Canvas Workpads" } } } } } }, "custom_elements": { "properties": { "count": { "type": "long", "_meta": { "description": "The total number of custom Canvas elements" } }, "elements": { "properties": { "min": { "type": "long", "_meta": { "description": "The minimum number of elements used across all Canvas Custom Elements" } }, "max": { "type": "long", "_meta": { "description": "The maximum number of elements used across all Canvas Custom Elements" } }, "avg": { "type": "float", "_meta": { "description": "The average number of elements used in Canvas Custom Element" } } } }, "functions_in_use": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "The functions in use by Canvas Custom Elements" } } } } } } }, "cases": { "properties": { "cases": { "properties": { "all": { "properties": { "total": { "type": "long" }, "monthly": { "type": "long" }, "weekly": { "type": "long" }, "daily": { "type": "long" }, "attachmentFramework": { "properties": { "persistableAttachments": { "type": "array", "items": { "properties": { "average": { "type": "long" }, "maxOnACase": { "type": "long" }, "total": { "type": "long" }, "type": { "type": "keyword" } } } }, "externalAttachments": { "type": "array", "items": { "properties": { "average": { "type": "long" }, "maxOnACase": { "type": "long" }, "total": { "type": "long" }, "type": { "type": "keyword" } } } }, "files": { "properties": { "average": { "type": "long" }, "averageSize": { "type": "long" }, "maxOnACase": { "type": "long" }, "total": { "type": "long" }, "topMimeTypes": { "type": "array", "items": { "properties": { "count": { "type": "long" }, "name": { "type": "keyword" } } } } } } } }, "assignees": { "properties": { "total": { "type": "long" }, "totalWithZero": { "type": "long" }, "totalWithAtLeastOne": { "type": "long" } } }, "status": { "properties": { "open": { "type": "long" }, "inProgress": { "type": "long" }, "closed": { "type": "long" } } }, "syncAlertsOn": { "type": "long" }, "syncAlertsOff": { "type": "long" }, "totalUsers": { "type": "long" }, "totalParticipants": { "type": "long" }, "totalTags": { "type": "long" }, "totalWithAlerts": { "type": "long" }, "totalWithConnectors": { "type": "long" }, "latestDates": { "properties": { "createdAt": { "type": "keyword" }, "updatedAt": { "type": "keyword" }, "closedAt": { "type": "keyword" } } } } }, "sec": { "properties": { "total": { "type": "long" }, "monthly": { "type": "long" }, "weekly": { "type": "long" }, "daily": { "type": "long" }, "assignees": { "properties": { "total": { "type": "long" }, "totalWithZero": { "type": "long" }, "totalWithAtLeastOne": { "type": "long" } } }, "attachmentFramework": { "properties": { "persistableAttachments": { "type": "array", "items": { "properties": { "average": { "type": "long" }, "maxOnACase": { "type": "long" }, "total": { "type": "long" }, "type": { "type": "keyword" } } } }, "externalAttachments": { "type": "array", "items": { "properties": { "average": { "type": "long" }, "maxOnACase": { "type": "long" }, "total": { "type": "long" }, "type": { "type": "keyword" } } } }, "files": { "properties": { "average": { "type": "long" }, "averageSize": { "type": "long" }, "maxOnACase": { "type": "long" }, "total": { "type": "long" }, "topMimeTypes": { "type": "array", "items": { "properties": { "count": { "type": "long" }, "name": { "type": "keyword" } } } } } } } } } }, "obs": { "properties": { "total": { "type": "long" }, "monthly": { "type": "long" }, "weekly": { "type": "long" }, "daily": { "type": "long" }, "assignees": { "properties": { "total": { "type": "long" }, "totalWithZero": { "type": "long" }, "totalWithAtLeastOne": { "type": "long" } } }, "attachmentFramework": { "properties": { "persistableAttachments": { "type": "array", "items": { "properties": { "average": { "type": "long" }, "maxOnACase": { "type": "long" }, "total": { "type": "long" }, "type": { "type": "keyword" } } } }, "externalAttachments": { "type": "array", "items": { "properties": { "average": { "type": "long" }, "maxOnACase": { "type": "long" }, "total": { "type": "long" }, "type": { "type": "keyword" } } } }, "files": { "properties": { "average": { "type": "long" }, "averageSize": { "type": "long" }, "maxOnACase": { "type": "long" }, "total": { "type": "long" }, "topMimeTypes": { "type": "array", "items": { "properties": { "count": { "type": "long" }, "name": { "type": "keyword" } } } } } } } } } }, "main": { "properties": { "total": { "type": "long" }, "monthly": { "type": "long" }, "weekly": { "type": "long" }, "daily": { "type": "long" }, "assignees": { "properties": { "total": { "type": "long" }, "totalWithZero": { "type": "long" }, "totalWithAtLeastOne": { "type": "long" } } }, "attachmentFramework": { "properties": { "persistableAttachments": { "type": "array", "items": { "properties": { "average": { "type": "long" }, "maxOnACase": { "type": "long" }, "total": { "type": "long" }, "type": { "type": "keyword" } } } }, "externalAttachments": { "type": "array", "items": { "properties": { "average": { "type": "long" }, "maxOnACase": { "type": "long" }, "total": { "type": "long" }, "type": { "type": "keyword" } } } }, "files": { "properties": { "average": { "type": "long" }, "averageSize": { "type": "long" }, "maxOnACase": { "type": "long" }, "total": { "type": "long" }, "topMimeTypes": { "type": "array", "items": { "properties": { "count": { "type": "long" }, "name": { "type": "keyword" } } } } } } } } } } } }, "userActions": { "properties": { "all": { "properties": { "total": { "type": "long" }, "monthly": { "type": "long" }, "weekly": { "type": "long" }, "daily": { "type": "long" }, "maxOnACase": { "type": "long" } } } } }, "comments": { "properties": { "all": { "properties": { "total": { "type": "long" }, "monthly": { "type": "long" }, "weekly": { "type": "long" }, "daily": { "type": "long" }, "maxOnACase": { "type": "long" } } } } }, "alerts": { "properties": { "all": { "properties": { "total": { "type": "long" }, "monthly": { "type": "long" }, "weekly": { "type": "long" }, "daily": { "type": "long" }, "maxOnACase": { "type": "long" } } } } }, "connectors": { "properties": { "all": { "properties": { "all": { "properties": { "totalAttached": { "type": "long" } } }, "itsm": { "properties": { "totalAttached": { "type": "long" } } }, "sir": { "properties": { "totalAttached": { "type": "long" } } }, "jira": { "properties": { "totalAttached": { "type": "long" } } }, "resilient": { "properties": { "totalAttached": { "type": "long" } } }, "swimlane": { "properties": { "totalAttached": { "type": "long" } } }, "maxAttachedToACase": { "type": "long" } } } } }, "pushes": { "properties": { "all": { "properties": { "total": { "type": "long" }, "maxOnACase": { "type": "long" } } } } }, "configuration": { "properties": { "all": { "properties": { "closure": { "properties": { "manually": { "type": "long" }, "automatic": { "type": "long" } } } } } } } } }, "cloud": { "properties": { "isCloudEnabled": { "type": "boolean" }, "trialEndDate": { "type": "date" }, "inTrial": { "type": "boolean" }, "isElasticStaffOwned": { "type": "boolean" } } }, "cloudExperiments": { "properties": { "initialized": { "type": "boolean", "_meta": { "description": "Whether the A/B testing client is correctly initialized (identify has been called)" } }, "flags": { "type": "pass_through", "_meta": { "description": "Flags received by the client" } }, "flagNames": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "Names of the flags received by the client" } } } } }, "cloud_defend": { "properties": { "indices": { "properties": { "alerts": { "properties": { "doc_count": { "type": "long" }, "deleted": { "type": "long" }, "size_in_bytes": { "type": "long" }, "last_doc_timestamp": { "type": "date" } } }, "file": { "properties": { "doc_count": { "type": "long" }, "deleted": { "type": "long" }, "size_in_bytes": { "type": "long" }, "last_doc_timestamp": { "type": "date" } } }, "process": { "properties": { "doc_count": { "type": "long" }, "deleted": { "type": "long" }, "size_in_bytes": { "type": "long" }, "last_doc_timestamp": { "type": "date" } } }, "latestPackageVersion": { "type": "keyword" }, "packageStatus": { "properties": { "status": { "type": "keyword" }, "installedPackagePolicies": { "type": "long" }, "healthyAgents": { "type": "long" } } } } }, "pods_stats": { "type": "array", "items": { "properties": { "account_id": { "type": "keyword" }, "container_image_name": { "type": "keyword" }, "container_image_tag": { "type": "keyword" }, "pod_name": { "type": "keyword" }, "total_doc_count": { "type": "long" }, "process_doc_count": { "type": "long" }, "file_doc_count": { "type": "long" }, "alert_doc_count": { "type": "long" } } } }, "accounts_stats": { "type": "array", "items": { "properties": { "account_id": { "type": "keyword" }, "cloud_provider": { "type": "keyword" }, "kubernetes_version": { "type": "keyword" }, "total_doc_count": { "type": "long" }, "file_doc_count": { "type": "long" }, "process_doc_count": { "type": "long" }, "alert_doc_count": { "type": "long" }, "agents_count": { "type": "short" }, "nodes_count": { "type": "short" }, "pods_count": { "type": "short" } } } }, "installation_stats": { "type": "array", "items": { "properties": { "package_policy_id": { "type": "keyword" }, "package_version": { "type": "keyword" }, "agent_policy_id": { "type": "keyword" }, "created_at": { "type": "date" }, "agent_count": { "type": "long" }, "policy_yaml": { "type": "keyword" }, "selectors": { "type": "array", "items": { "properties": { "type": { "type": "keyword" }, "name": { "type": "keyword" }, "operation": { "type": "array", "items": { "type": "keyword" } }, "containerImageFullName": { "type": "array", "items": { "type": "keyword" } }, "containerImageName": { "type": "array", "items": { "type": "keyword" } }, "containerImageTag": { "type": "array", "items": { "type": "keyword" } }, "kubernetesClusterId": { "type": "array", "items": { "type": "keyword" } }, "kubernetesClusterName": { "type": "array", "items": { "type": "keyword" } }, "kubernetesNamespace": { "type": "array", "items": { "type": "keyword" } }, "kubernetesPodLabel": { "type": "array", "items": { "type": "keyword" } }, "kubernetesPodName": { "type": "array", "items": { "type": "keyword" } }, "targetFilePath": { "type": "array", "items": { "type": "keyword" } }, "ignoreVolumeFiles": { "type": "boolean" }, "ignoreVolumeMounts": { "type": "boolean" }, "processExecutable": { "type": "array", "items": { "type": "keyword" } }, "processName": { "type": "array", "items": { "type": "keyword" } }, "sessionLeaderInteractive": { "type": "boolean" } } } }, "responses": { "type": "array", "items": { "properties": { "type": { "type": "keyword" }, "match": { "type": "array", "items": { "type": "keyword" } }, "exclude": { "type": "array", "items": { "type": "keyword" } }, "actions": { "type": "array", "items": { "type": "keyword" } } } } } } } } } }, "cloud_security_posture": { "properties": { "indices": { "properties": { "findings": { "properties": { "doc_count": { "type": "long" }, "deleted": { "type": "long" }, "size_in_bytes": { "type": "long" }, "last_doc_timestamp": { "type": "date" } } }, "latest_findings": { "properties": { "doc_count": { "type": "long" }, "deleted": { "type": "long" }, "size_in_bytes": { "type": "long" }, "last_doc_timestamp": { "type": "date" } } }, "vulnerabilities": { "properties": { "doc_count": { "type": "long" }, "deleted": { "type": "long" }, "size_in_bytes": { "type": "long" }, "last_doc_timestamp": { "type": "date" } } }, "latest_vulnerabilities": { "properties": { "doc_count": { "type": "long" }, "deleted": { "type": "long" }, "size_in_bytes": { "type": "long" }, "last_doc_timestamp": { "type": "date" } } }, "score": { "properties": { "doc_count": { "type": "long" }, "deleted": { "type": "long" }, "size_in_bytes": { "type": "long" }, "last_doc_timestamp": { "type": "date" } } }, "latestPackageVersion": { "type": "keyword" }, "cspm": { "properties": { "status": { "type": "keyword" }, "installedPackagePolicies": { "type": "long" }, "healthyAgents": { "type": "long" } } }, "kspm": { "properties": { "status": { "type": "keyword" }, "installedPackagePolicies": { "type": "long" }, "healthyAgents": { "type": "long" } } }, "vuln_mgmt": { "properties": { "status": { "type": "keyword" }, "installedPackagePolicies": { "type": "long" }, "healthyAgents": { "type": "long" } } } } }, "resources_stats": { "type": "array", "items": { "properties": { "account_id": { "type": "keyword" }, "resource_type": { "type": "keyword" }, "resource_type_doc_count": { "type": "long" }, "resource_sub_type": { "type": "keyword" }, "resource_sub_type_doc_count": { "type": "long" }, "passed_findings_count": { "type": "long" }, "failed_findings_count": { "type": "long" } } } }, "accounts_stats": { "type": "array", "items": { "properties": { "account_id": { "type": "keyword" }, "posture_score": { "type": "long" }, "latest_findings_doc_count": { "type": "long" }, "benchmark_id": { "type": "keyword" }, "benchmark_name": { "type": "keyword" }, "benchmark_version": { "type": "keyword" }, "kubernetes_version": { "type": "keyword" }, "passed_findings_count": { "type": "long" }, "failed_findings_count": { "type": "long" }, "agents_count": { "type": "short" }, "nodes_count": { "type": "short" }, "pods_count": { "type": "short" } } } }, "rules_stats": { "type": "array", "items": { "properties": { "account_id": { "type": "keyword" }, "rule_id": { "type": "keyword" }, "rule_name": { "type": "keyword" }, "rule_section": { "type": "keyword" }, "rule_version": { "type": "keyword" }, "rule_number": { "type": "keyword" }, "posture_type": { "type": "keyword" }, "benchmark_id": { "type": "keyword" }, "benchmark_name": { "type": "keyword" }, "benchmark_version": { "type": "keyword" }, "passed_findings_count": { "type": "long" }, "failed_findings_count": { "type": "long" } } } }, "installation_stats": { "type": "array", "items": { "properties": { "package_policy_id": { "type": "keyword" }, "feature": { "type": "keyword" }, "package_version": { "type": "keyword" }, "agent_policy_id": { "type": "keyword" }, "deployment_mode": { "type": "keyword" }, "created_at": { "type": "date" }, "agent_count": { "type": "long" }, "account_type": { "type": "keyword" } } } }, "alerts_stats": { "type": "array", "items": { "properties": { "posture_type": { "type": "keyword" }, "rules_count": { "type": "long" }, "alerts_count": { "type": "long" }, "alerts_open_count": { "type": "long" }, "alerts_closed_count": { "type": "long" }, "alerts_acknowledged_count": { "type": "long" } } } } } }, "discoverEnhanced": { "properties": { "exploreDataInChartActionEnabled": { "type": "boolean" } } }, "enterprise_search": { "properties": { "ui_viewed": { "properties": { "overview": { "type": "long" }, "setup_guide": { "type": "long" } } }, "ui_error": { "properties": { "cannot_connect": { "type": "long" } } }, "ui_clicked": { "properties": { "app_search": { "type": "long" }, "workplace_search": { "type": "long" } } } } }, "fileUpload": { "properties": { "file_upload": { "properties": { "index_creation_count": { "type": "long" } } } } }, "fleet": { "properties": { "agents_enabled": { "type": "boolean" }, "agents": { "properties": { "total_enrolled": { "type": "long", "_meta": { "description": "The total number of enrolled agents, in any state" } }, "healthy": { "type": "long", "_meta": { "description": "The total number of enrolled agents in a healthy state" } }, "unhealthy": { "type": "long", "_meta": { "description": "The total number of enrolled agents in an unhealthy state" } }, "updating": { "type": "long", "_meta": { "description": "The total number of enrolled agents in an updating state" } }, "offline": { "type": "long", "_meta": { "description": "The total number of enrolled agents currently offline" } }, "inactive": { "type": "long", "_meta": { "description": "The total number of of enrolled agents currently inactive" } }, "unenrolled": { "type": "long", "_meta": { "description": "The total number of agents currently unenrolled" } }, "total_all_statuses": { "type": "long", "_meta": { "description": "The total number of agents in any state, both enrolled and inactive" } } } }, "fleet_server": { "properties": { "total_enrolled": { "type": "long", "_meta": { "description": "The total number of enrolled Fleet Server agents, in any state" } }, "total_all_statuses": { "type": "long", "_meta": { "description": "The total number of Fleet Server agents in any state, both enrolled and inactive." } }, "healthy": { "type": "long", "_meta": { "description": "The total number of enrolled Fleet Server agents in a healthy state." } }, "unhealthy": { "type": "long", "_meta": { "description": "The total number of enrolled Fleet Server agents in an unhealthy state" } }, "updating": { "type": "long", "_meta": { "description": "The total number of enrolled Fleet Server agents in an updating state" } }, "offline": { "type": "long", "_meta": { "description": "The total number of enrolled Fleet Server agents currently offline" } }, "num_host_urls": { "type": "long", "_meta": { "description": "The number of Fleet Server hosts configured in Fleet settings." } } } }, "packages": { "type": "array", "items": { "properties": { "name": { "type": "keyword" }, "version": { "type": "keyword" }, "enabled": { "type": "boolean" } } } } } }, "infraops": { "properties": { "last_24_hours": { "properties": { "hits": { "properties": { "infraops_hosts": { "type": "long" }, "infraops_docker": { "type": "long" }, "infraops_kubernetes": { "type": "long" }, "logs": { "type": "long" } } } } } } }, "kibana_settings": { "properties": { "xpack": { "properties": { "default_admin_email": { "type": "text" } } } } }, "maps": { "properties": { "mapsTotalCount": { "type": "long" }, "timeCaptured": { "type": "date" }, "layerTypes": { "properties": { "ems_basemap": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of ems basemap layers per map" } }, "max": { "type": "long", "_meta": { "description": "max number of ems basemap layers per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of ems basemap layers per map" } }, "total": { "type": "long", "_meta": { "description": "total number of ems basemap layers in cluster" } } } }, "ems_region": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of ems file layers per map" } }, "max": { "type": "long", "_meta": { "description": "max number of ems file layers per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of ems file layers per map" } }, "total": { "type": "long", "_meta": { "description": "total number of file layers in cluster" } } } }, "es_agg_clusters": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of es cluster layers per map" } }, "max": { "type": "long", "_meta": { "description": "max number of es cluster layers per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of es cluster layers per map" } }, "total": { "type": "long", "_meta": { "description": "total number of es cluster layers in cluster" } } } }, "es_agg_grids": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of es grid layers per map" } }, "max": { "type": "long", "_meta": { "description": "max number of es grid layers per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of es grid layers per map" } }, "total": { "type": "long", "_meta": { "description": "total number of es grid layers in cluster" } } } }, "es_agg_hexagons": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of es hexagon layers per map" } }, "max": { "type": "long", "_meta": { "description": "max number of es hexagon layers per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of es hexagon layers per map" } }, "total": { "type": "long", "_meta": { "description": "total number of es hexagon layers in cluster" } } } }, "es_agg_heatmap": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of es heatmap layers per map" } }, "max": { "type": "long", "_meta": { "description": "max number of es heatmap layers per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of es heatmap layers per map" } }, "total": { "type": "long", "_meta": { "description": "total number of es heatmap layers in cluster" } } } }, "es_top_hits": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of es top hits layers per map" } }, "max": { "type": "long", "_meta": { "description": "max number of es top hits layers per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of es top hits layers per map" } }, "total": { "type": "long", "_meta": { "description": "total number of es top hits layers in cluster" } } } }, "es_docs": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of es document layers per map" } }, "max": { "type": "long", "_meta": { "description": "max number of es document layers per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of es document layers per map" } }, "total": { "type": "long", "_meta": { "description": "total number of es document layers in cluster" } } } }, "es_ml_anomalies": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of es machine learning anomaly layers per map" } }, "max": { "type": "long", "_meta": { "description": "max number of es machine learning anomaly layers per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of es machine learning anomaly layers per map" } }, "total": { "type": "long", "_meta": { "description": "total number of es machine learning anomaly layers in cluster" } } } }, "es_point_to_point": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of es point-to-point layers per map" } }, "max": { "type": "long", "_meta": { "description": "max number of es point-to-point layers per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of es point-to-point layers per map" } }, "total": { "type": "long", "_meta": { "description": "total number of es point-to-point layers in cluster" } } } }, "es_tracks": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of es track layers per map" } }, "max": { "type": "long", "_meta": { "description": "max number of es track layers per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of es track layers per map" } }, "total": { "type": "long", "_meta": { "description": "total number of es track layers in cluster" } } } }, "kbn_tms_raster": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of kbn tms layers per map" } }, "max": { "type": "long", "_meta": { "description": "max number of kbn tms layers per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of kbn tms layers per map" } }, "total": { "type": "long", "_meta": { "description": "total number of kbn tms layers in cluster" } } } }, "layer_group": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of layer groups per map" } }, "max": { "type": "long", "_meta": { "description": "max number of layer groups per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of layer groups per map" } }, "total": { "type": "long", "_meta": { "description": "total number of layer groups in cluster" } } } }, "ux_tms_mvt": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of ux tms-mvt layers per map" } }, "max": { "type": "long", "_meta": { "description": "max number of ux tms-mvt layers per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of ux tms-mvt layers per map" } }, "total": { "type": "long", "_meta": { "description": "total number of ux tms-mvt layers in cluster" } } } }, "ux_tms_raster": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of ux tms-raster layers per map" } }, "max": { "type": "long", "_meta": { "description": "max number of ux tms-raster layers per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of ux tms-raster layers per map" } }, "total": { "type": "long", "_meta": { "description": "total number of ux-tms raster layers in cluster" } } } }, "ux_wms": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of ux wms layers per map" } }, "max": { "type": "long", "_meta": { "description": "max number of ux wms layers per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of ux wms layers per map" } }, "total": { "type": "long", "_meta": { "description": "total number of ux wms layers in cluster" } } } } } }, "scalingOptions": { "properties": { "limit": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of es doc layers with limit scaling option per map" } }, "max": { "type": "long", "_meta": { "description": "max number of es doc layers with limit scaling option per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of es doc layers with limit scaling option per map" } }, "total": { "type": "long", "_meta": { "description": "total number of es doc layers with limit scaling option in cluster" } } } }, "clusters": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of es doc layers with blended scaling option per map" } }, "max": { "type": "long", "_meta": { "description": "max number of es doc layers with blended scaling option per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of es doc layers with blended scaling option per map" } }, "total": { "type": "long", "_meta": { "description": "total number of es doc layers with blended scaling option in cluster" } } } }, "mvt": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of es doc layers with mvt scaling option per map" } }, "max": { "type": "long", "_meta": { "description": "max number of es doc layers with mvt scaling option per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of es doc layers with mvt scaling option per map" } }, "total": { "type": "long", "_meta": { "description": "total number of es doc layers with mvt scaling option in cluster" } } } } } }, "resolutions": { "properties": { "coarse": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of grid-agg layers with coarse resolution" } }, "max": { "type": "long", "_meta": { "description": "max number of grid-agg layers with coarse resolution" } }, "avg": { "type": "float", "_meta": { "description": "avg number of grid-agg layers with coarse resolution" } }, "total": { "type": "long", "_meta": { "description": "total number of grid-agg layers with coarse resolution" } } } }, "fine": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of grid-agg layers with fine resolution" } }, "max": { "type": "long", "_meta": { "description": "max number of grid-agg layers with fine resolution" } }, "avg": { "type": "float", "_meta": { "description": "avg number of grid-agg layers with fine resolution" } }, "total": { "type": "long", "_meta": { "description": "total number of grid-agg layers with fine resolution" } } } }, "most_fine": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of grid-agg layers with most_fine resolution" } }, "max": { "type": "long", "_meta": { "description": "max number of grid-agg layers with most_fine resolution" } }, "avg": { "type": "float", "_meta": { "description": "avg number of grid-agg layers with most_fine resolution" } }, "total": { "type": "long", "_meta": { "description": "total number of grid-agg layers with most_fine resolution" } } } }, "super_fine": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of grid-agg layers with super_fine resolution" } }, "max": { "type": "long", "_meta": { "description": "max number of grid-agg layers with super_fine resolution" } }, "avg": { "type": "float", "_meta": { "description": "avg number of grid-agg layers with super_fine resolution" } }, "total": { "type": "long", "_meta": { "description": "total number of grid-agg layers with super_fine resolution" } } } } } }, "joins": { "properties": { "distance": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of distance joins per map" } }, "max": { "type": "long", "_meta": { "description": "max number of distance joins per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of distance joins per map" } }, "total": { "type": "long", "_meta": { "description": "total number of distance joins in cluster" } } } }, "term": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of layers with term joins per map" } }, "max": { "type": "long", "_meta": { "description": "max number of layers with term joins per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of layers with term joins per map" } }, "total": { "type": "long", "_meta": { "description": "total number of layers with term joins in cluster" } } } } } }, "basemaps": { "properties": { "auto": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of ems basemap layers with auto-style per map" } }, "max": { "type": "long", "_meta": { "description": "max number of ems basemap layers with auto-style per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of ems basemap layers with auto-style per map" } }, "total": { "type": "long", "_meta": { "description": "total number of ems basemap layers with auto-style in cluster" } } } }, "dark": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of ems basemap layers with dark-style per map" } }, "max": { "type": "long", "_meta": { "description": "max number of ems basemap layers with dark-style per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of ems basemap layers with dark-style per map" } }, "total": { "type": "long", "_meta": { "description": "total number of ems basemap layers with dark-style in cluster" } } } }, "roadmap": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of ems basemap layers with roadmap-style per map" } }, "max": { "type": "long", "_meta": { "description": "max number of ems basemap layers with roadmap-style per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of ems basemap layers with roadmap-style per map" } }, "total": { "type": "long", "_meta": { "description": "total number of ems basemap layers with roadmap-style in cluster" } } } }, "roadmap_desaturated": { "properties": { "min": { "type": "long", "_meta": { "description": "min number of ems basemap layers with desaturated-style per map" } }, "max": { "type": "long", "_meta": { "description": "max number of ems basemap layers with desaturated-style per map" } }, "avg": { "type": "float", "_meta": { "description": "avg number of ems basemap layers with desaturated-style per map" } }, "total": { "type": "long", "_meta": { "description": "total number of ems basemap layers with desaturated-style in cluster" } } } } } }, "attributesPerMap": { "properties": { "dataSourcesCount": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } }, "layersCount": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } }, "layerTypesCount": { "properties": { "DYNAMIC_KEY": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } } } }, "emsVectorLayersCount": { "properties": { "DYNAMIC_KEY": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } } } }, "customIconsCount": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } } } } } }, "ml": { "properties": { "alertRules": { "properties": { "xpack.ml.anomaly_detection_alert": { "properties": { "count_by_result_type": { "properties": { "record": { "type": "long", "_meta": { "description": "total number of alerting rules using record result type" } }, "influencer": { "type": "long", "_meta": { "description": "total number of alerting rules using influencer result type" } }, "bucket": { "type": "long", "_meta": { "description": "total number of alerting rules using bucket result type" } } } } } }, "xpack.ml.anomaly_detection_jobs_health": { "properties": { "count_by_check_type": { "properties": { "datafeed": { "type": "long", "_meta": { "description": "total number of alerting rules performing the not started datafeed health check" } }, "mml": { "type": "long", "_meta": { "description": "total number of alerting rules performing the model memory limit health check" } }, "delayedData": { "type": "long", "_meta": { "description": "total number of alerting rules performing the delayed data health check" } }, "errorMessages": { "type": "long", "_meta": { "description": "total number of alerting rules performing the error messages health check" } } } } } } } } } }, "monitoring": { "properties": { "hasMonitoringData": { "type": "boolean" }, "clusters": { "type": "array", "items": { "properties": { "license": { "type": "keyword" }, "clusterUuid": { "type": "keyword" }, "metricbeatUsed": { "type": "boolean" }, "elasticsearch": { "properties": { "enabled": { "type": "boolean" }, "count": { "type": "long" }, "metricbeatUsed": { "type": "boolean" } } }, "kibana": { "properties": { "enabled": { "type": "boolean" }, "count": { "type": "long" }, "metricbeatUsed": { "type": "boolean" } } }, "logstash": { "properties": { "enabled": { "type": "boolean" }, "count": { "type": "long" }, "metricbeatUsed": { "type": "boolean" } } }, "beats": { "properties": { "enabled": { "type": "boolean" }, "count": { "type": "long" }, "metricbeatUsed": { "type": "boolean" } } }, "apm": { "properties": { "enabled": { "type": "boolean" }, "count": { "type": "long" }, "metricbeatUsed": { "type": "boolean" } } } } } } } }, "reporting": { "properties": { "csv_searchsource": { "properties": { "available": { "type": "boolean" }, "total": { "type": "long" }, "deprecated": { "type": "long" }, "output_size": { "properties": { "1.0": { "type": "long" }, "5.0": { "type": "long" }, "25.0": { "type": "long" }, "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "app": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "execution_times": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } }, "metrics": { "properties": { "csv_rows": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } } } }, "error_codes": { "properties": { "authentication_expired_error": { "type": "long" }, "queue_timeout_error": { "type": "long" }, "unknown_error": { "type": "long" }, "kibana_shutting_down_error": { "type": "long" } } } } }, "csv_searchsource_immediate": { "properties": { "available": { "type": "boolean" }, "total": { "type": "long" }, "deprecated": { "type": "long" }, "output_size": { "properties": { "1.0": { "type": "long" }, "5.0": { "type": "long" }, "25.0": { "type": "long" }, "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "app": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "execution_times": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } }, "metrics": { "properties": { "csv_rows": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } } } }, "error_codes": { "properties": { "authentication_expired_error": { "type": "long" }, "queue_timeout_error": { "type": "long" }, "unknown_error": { "type": "long" }, "kibana_shutting_down_error": { "type": "long" } } } } }, "csv_v2": { "properties": { "available": { "type": "boolean" }, "total": { "type": "long" }, "deprecated": { "type": "long" }, "output_size": { "properties": { "1.0": { "type": "long" }, "5.0": { "type": "long" }, "25.0": { "type": "long" }, "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "app": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "execution_times": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } }, "metrics": { "properties": { "csv_rows": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } } } }, "error_codes": { "properties": { "authentication_expired_error": { "type": "long" }, "queue_timeout_error": { "type": "long" }, "unknown_error": { "type": "long" }, "kibana_shutting_down_error": { "type": "long" } } } } }, "PNG": { "properties": { "available": { "type": "boolean" }, "total": { "type": "long" }, "deprecated": { "type": "long" }, "output_size": { "properties": { "1.0": { "type": "long" }, "5.0": { "type": "long" }, "25.0": { "type": "long" }, "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "app": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "execution_times": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } }, "metrics": { "properties": { "png_cpu": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "png_memory": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } } } }, "error_codes": { "properties": { "authentication_expired_error": { "type": "long" }, "queue_timeout_error": { "type": "long" }, "unknown_error": { "type": "long" }, "kibana_shutting_down_error": { "type": "long" }, "browser_could_not_launch_error": { "type": "long" }, "browser_unexpectedly_closed_error": { "type": "long" }, "browser_screenshot_error": { "type": "long" }, "visual_reporting_soft_disabled_error": { "type": "long" }, "invalid_layout_parameters_error": { "type": "long" } } } } }, "PNGV2": { "properties": { "available": { "type": "boolean" }, "total": { "type": "long" }, "deprecated": { "type": "long" }, "output_size": { "properties": { "1.0": { "type": "long" }, "5.0": { "type": "long" }, "25.0": { "type": "long" }, "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "app": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "execution_times": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } }, "metrics": { "properties": { "png_cpu": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "png_memory": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } } } }, "error_codes": { "properties": { "authentication_expired_error": { "type": "long" }, "queue_timeout_error": { "type": "long" }, "unknown_error": { "type": "long" }, "kibana_shutting_down_error": { "type": "long" }, "browser_could_not_launch_error": { "type": "long" }, "browser_unexpectedly_closed_error": { "type": "long" }, "browser_screenshot_error": { "type": "long" }, "visual_reporting_soft_disabled_error": { "type": "long" }, "invalid_layout_parameters_error": { "type": "long" } } } } }, "printable_pdf": { "properties": { "available": { "type": "boolean" }, "total": { "type": "long" }, "deprecated": { "type": "long" }, "output_size": { "properties": { "1.0": { "type": "long" }, "5.0": { "type": "long" }, "25.0": { "type": "long" }, "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "app": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "execution_times": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } }, "layout": { "properties": { "canvas": { "type": "long" }, "print": { "type": "long" }, "preserve_layout": { "type": "long" } } }, "metrics": { "properties": { "pdf_cpu": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "pdf_memory": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "pdf_pages": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } } } }, "error_codes": { "properties": { "pdf_worker_out_of_memory_error": { "type": "long" }, "authentication_expired_error": { "type": "long" }, "queue_timeout_error": { "type": "long" }, "unknown_error": { "type": "long" }, "kibana_shutting_down_error": { "type": "long" }, "browser_could_not_launch_error": { "type": "long" }, "browser_unexpectedly_closed_error": { "type": "long" }, "browser_screenshot_error": { "type": "long" }, "visual_reporting_soft_disabled_error": { "type": "long" }, "invalid_layout_parameters_error": { "type": "long" } } } } }, "printable_pdf_v2": { "properties": { "available": { "type": "boolean" }, "total": { "type": "long" }, "deprecated": { "type": "long" }, "output_size": { "properties": { "1.0": { "type": "long" }, "5.0": { "type": "long" }, "25.0": { "type": "long" }, "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "app": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "execution_times": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } }, "layout": { "properties": { "canvas": { "type": "long" }, "print": { "type": "long" }, "preserve_layout": { "type": "long" } } }, "metrics": { "properties": { "pdf_cpu": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "pdf_memory": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "pdf_pages": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } } } }, "error_codes": { "properties": { "pdf_worker_out_of_memory_error": { "type": "long" }, "authentication_expired_error": { "type": "long" }, "queue_timeout_error": { "type": "long" }, "unknown_error": { "type": "long" }, "kibana_shutting_down_error": { "type": "long" }, "browser_could_not_launch_error": { "type": "long" }, "browser_unexpectedly_closed_error": { "type": "long" }, "browser_screenshot_error": { "type": "long" }, "visual_reporting_soft_disabled_error": { "type": "long" }, "invalid_layout_parameters_error": { "type": "long" } } } } }, "_all": { "type": "long" }, "status": { "properties": { "completed": { "type": "long" }, "completed_with_warnings": { "type": "long" }, "failed": { "type": "long" }, "pending": { "type": "long" }, "processing": { "type": "long" } } }, "statuses": { "properties": { "completed": { "properties": { "csv_searchsource": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_searchsource_immediate": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNG": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNGV2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } } } }, "completed_with_warnings": { "properties": { "csv_searchsource": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_searchsource_immediate": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNG": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNGV2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } } } }, "failed": { "properties": { "csv_searchsource": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_searchsource_immediate": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNG": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNGV2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } } } }, "pending": { "properties": { "csv_searchsource": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_searchsource_immediate": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNG": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNGV2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } } } }, "processing": { "properties": { "csv_searchsource": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_searchsource_immediate": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNG": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNGV2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } } } } } }, "output_size": { "properties": { "1.0": { "type": "long" }, "5.0": { "type": "long" }, "25.0": { "type": "long" }, "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "queue_times": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } }, "available": { "type": "boolean" }, "enabled": { "type": "boolean" }, "last7Days": { "properties": { "csv_searchsource": { "properties": { "available": { "type": "boolean" }, "total": { "type": "long" }, "deprecated": { "type": "long" }, "output_size": { "properties": { "1.0": { "type": "long" }, "5.0": { "type": "long" }, "25.0": { "type": "long" }, "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "app": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "execution_times": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } }, "metrics": { "properties": { "csv_rows": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } } } }, "error_codes": { "properties": { "authentication_expired_error": { "type": "long" }, "queue_timeout_error": { "type": "long" }, "unknown_error": { "type": "long" }, "kibana_shutting_down_error": { "type": "long" } } } } }, "csv_searchsource_immediate": { "properties": { "available": { "type": "boolean" }, "total": { "type": "long" }, "deprecated": { "type": "long" }, "output_size": { "properties": { "1.0": { "type": "long" }, "5.0": { "type": "long" }, "25.0": { "type": "long" }, "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "app": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "execution_times": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } }, "metrics": { "properties": { "csv_rows": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } } } }, "error_codes": { "properties": { "authentication_expired_error": { "type": "long" }, "queue_timeout_error": { "type": "long" }, "unknown_error": { "type": "long" }, "kibana_shutting_down_error": { "type": "long" } } } } }, "csv_v2": { "properties": { "available": { "type": "boolean" }, "total": { "type": "long" }, "deprecated": { "type": "long" }, "output_size": { "properties": { "1.0": { "type": "long" }, "5.0": { "type": "long" }, "25.0": { "type": "long" }, "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "app": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "execution_times": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } }, "metrics": { "properties": { "csv_rows": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } } } }, "error_codes": { "properties": { "authentication_expired_error": { "type": "long" }, "queue_timeout_error": { "type": "long" }, "unknown_error": { "type": "long" }, "kibana_shutting_down_error": { "type": "long" } } } } }, "PNG": { "properties": { "available": { "type": "boolean" }, "total": { "type": "long" }, "deprecated": { "type": "long" }, "output_size": { "properties": { "1.0": { "type": "long" }, "5.0": { "type": "long" }, "25.0": { "type": "long" }, "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "app": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "execution_times": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } }, "metrics": { "properties": { "png_cpu": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "png_memory": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } } } }, "error_codes": { "properties": { "authentication_expired_error": { "type": "long" }, "queue_timeout_error": { "type": "long" }, "unknown_error": { "type": "long" }, "kibana_shutting_down_error": { "type": "long" }, "browser_could_not_launch_error": { "type": "long" }, "browser_unexpectedly_closed_error": { "type": "long" }, "browser_screenshot_error": { "type": "long" }, "visual_reporting_soft_disabled_error": { "type": "long" }, "invalid_layout_parameters_error": { "type": "long" } } } } }, "PNGV2": { "properties": { "available": { "type": "boolean" }, "total": { "type": "long" }, "deprecated": { "type": "long" }, "output_size": { "properties": { "1.0": { "type": "long" }, "5.0": { "type": "long" }, "25.0": { "type": "long" }, "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "app": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "execution_times": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } }, "metrics": { "properties": { "png_cpu": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "png_memory": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } } } }, "error_codes": { "properties": { "authentication_expired_error": { "type": "long" }, "queue_timeout_error": { "type": "long" }, "unknown_error": { "type": "long" }, "kibana_shutting_down_error": { "type": "long" }, "browser_could_not_launch_error": { "type": "long" }, "browser_unexpectedly_closed_error": { "type": "long" }, "browser_screenshot_error": { "type": "long" }, "visual_reporting_soft_disabled_error": { "type": "long" }, "invalid_layout_parameters_error": { "type": "long" } } } } }, "printable_pdf": { "properties": { "available": { "type": "boolean" }, "total": { "type": "long" }, "deprecated": { "type": "long" }, "output_size": { "properties": { "1.0": { "type": "long" }, "5.0": { "type": "long" }, "25.0": { "type": "long" }, "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "app": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "execution_times": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } }, "layout": { "properties": { "canvas": { "type": "long" }, "print": { "type": "long" }, "preserve_layout": { "type": "long" } } }, "metrics": { "properties": { "pdf_cpu": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "pdf_memory": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "pdf_pages": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } } } }, "error_codes": { "properties": { "pdf_worker_out_of_memory_error": { "type": "long" }, "authentication_expired_error": { "type": "long" }, "queue_timeout_error": { "type": "long" }, "unknown_error": { "type": "long" }, "kibana_shutting_down_error": { "type": "long" }, "browser_could_not_launch_error": { "type": "long" }, "browser_unexpectedly_closed_error": { "type": "long" }, "browser_screenshot_error": { "type": "long" }, "visual_reporting_soft_disabled_error": { "type": "long" }, "invalid_layout_parameters_error": { "type": "long" } } } } }, "printable_pdf_v2": { "properties": { "available": { "type": "boolean" }, "total": { "type": "long" }, "deprecated": { "type": "long" }, "output_size": { "properties": { "1.0": { "type": "long" }, "5.0": { "type": "long" }, "25.0": { "type": "long" }, "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "app": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "execution_times": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } }, "layout": { "properties": { "canvas": { "type": "long" }, "print": { "type": "long" }, "preserve_layout": { "type": "long" } } }, "metrics": { "properties": { "pdf_cpu": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "pdf_memory": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "pdf_pages": { "properties": { "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } } } }, "error_codes": { "properties": { "pdf_worker_out_of_memory_error": { "type": "long" }, "authentication_expired_error": { "type": "long" }, "queue_timeout_error": { "type": "long" }, "unknown_error": { "type": "long" }, "kibana_shutting_down_error": { "type": "long" }, "browser_could_not_launch_error": { "type": "long" }, "browser_unexpectedly_closed_error": { "type": "long" }, "browser_screenshot_error": { "type": "long" }, "visual_reporting_soft_disabled_error": { "type": "long" }, "invalid_layout_parameters_error": { "type": "long" } } } } }, "_all": { "type": "long" }, "status": { "properties": { "completed": { "type": "long" }, "completed_with_warnings": { "type": "long" }, "failed": { "type": "long" }, "pending": { "type": "long" }, "processing": { "type": "long" } } }, "statuses": { "properties": { "completed": { "properties": { "csv_searchsource": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_searchsource_immediate": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNG": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNGV2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } } } }, "completed_with_warnings": { "properties": { "csv_searchsource": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_searchsource_immediate": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNG": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNGV2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } } } }, "failed": { "properties": { "csv_searchsource": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_searchsource_immediate": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNG": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNGV2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } } } }, "pending": { "properties": { "csv_searchsource": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_searchsource_immediate": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNG": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNGV2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } } } }, "processing": { "properties": { "csv_searchsource": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_searchsource_immediate": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "csv_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNG": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "PNGV2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } }, "printable_pdf_v2": { "properties": { "search": { "type": "long" }, "canvas workpad": { "type": "long" }, "dashboard": { "type": "long" }, "visualization": { "type": "long" } } } } } } }, "output_size": { "properties": { "1.0": { "type": "long" }, "5.0": { "type": "long" }, "25.0": { "type": "long" }, "50.0": { "type": "long" }, "75.0": { "type": "long" }, "95.0": { "type": "long" }, "99.0": { "type": "long" } } }, "queue_times": { "properties": { "min": { "type": "long" }, "max": { "type": "long" }, "avg": { "type": "float" } } } } } } }, "rollups": { "properties": { "index_patterns": { "properties": { "total": { "type": "long", "_meta": { "description": "Counts all the rollup index patterns" } } } }, "saved_searches": { "properties": { "total": { "type": "long", "_meta": { "description": "Counts all the rollup saved searches" } } } }, "visualizations": { "properties": { "saved_searches": { "properties": { "total": { "type": "long", "_meta": { "description": "Counts all the visualizations that are based on rollup saved searches" } }, "lens_total": { "type": "long", "_meta": { "description": "Counts all the lens visualizations that are based on rollup saved searches" } } } }, "total": { "type": "long", "_meta": { "description": "Counts all the visualizations that are based on rollup index patterns" } }, "lens_total": { "type": "long", "_meta": { "description": "Counts all the lens visualizations that are based on rollup index patterns" } } } } } }, "saved_objects_tagging": { "properties": { "usedTags": { "type": "integer" }, "taggedObjects": { "type": "integer" }, "types": { "properties": { "dashboard": { "properties": { "usedTags": { "type": "integer" }, "taggedObjects": { "type": "integer" } } }, "lens": { "properties": { "usedTags": { "type": "integer" }, "taggedObjects": { "type": "integer" } } }, "visualization": { "properties": { "usedTags": { "type": "integer" }, "taggedObjects": { "type": "integer" } } }, "map": { "properties": { "usedTags": { "type": "integer" }, "taggedObjects": { "type": "integer" } } }, "search": { "properties": { "usedTags": { "type": "integer" }, "taggedObjects": { "type": "integer" } } }, "osquery-pack": { "properties": { "usedTags": { "type": "integer" }, "taggedObjects": { "type": "integer" } } }, "osquery-pack-asset": { "properties": { "usedTags": { "type": "integer" }, "taggedObjects": { "type": "integer" } } }, "osquery-saved-query": { "properties": { "usedTags": { "type": "integer" }, "taggedObjects": { "type": "integer" } } } } } } }, "security": { "properties": { "auditLoggingEnabled": { "type": "boolean", "_meta": { "description": "Indicates if audit logging is both enabled and supported by the current license." } }, "loginSelectorEnabled": { "type": "boolean", "_meta": { "description": "Indicates if the login selector UI is enabled." } }, "accessAgreementEnabled": { "type": "boolean", "_meta": { "description": "Indicates if the access agreement UI is both enabled and supported by the current license." } }, "authProviderCount": { "type": "long", "_meta": { "description": "The number of configured auth providers (including disabled auth providers)." } }, "enabledAuthProviders": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "The types of enabled auth providers (such as `saml`, `basic`, `pki`, etc)." } } }, "httpAuthSchemes": { "type": "array", "items": { "type": "keyword", "_meta": { "description": "The set of enabled http auth schemes. Used for api-based usage, and when credentials are provided via reverse-proxy." } } }, "sessionIdleTimeoutInMinutes": { "type": "long", "_meta": { "description": "The global session idle timeout expiration that is configured, in minutes (0 if disabled)." } }, "sessionLifespanInMinutes": { "type": "long", "_meta": { "description": "The global session lifespan expiration that is configured, in minutes (0 if disabled)." } }, "sessionCleanupInMinutes": { "type": "long", "_meta": { "description": "The session cleanup interval that is configured, in minutes (0 if disabled)." } }, "sessionConcurrentSessionsMaxSessions": { "type": "long", "_meta": { "description": "The maximum number of the concurrent user sessions (0 if not configured)." } }, "anonymousCredentialType": { "type": "keyword", "_meta": { "description": "The credential type that is configured for the anonymous authentication provider." } } } }, "security_solution": { "properties": { "detectionMetrics": { "properties": { "detection_rules": { "properties": { "detection_rule_usage": { "properties": { "query": { "properties": { "enabled": { "type": "long", "_meta": { "description": "Number of query rules enabled" } }, "disabled": { "type": "long", "_meta": { "description": "Number of query rules disabled" } }, "alerts": { "type": "long", "_meta": { "description": "Number of alerts generated by query rules" } }, "cases": { "type": "long", "_meta": { "description": "Number of cases attached to query detection rule alerts" } }, "legacy_notifications_enabled": { "type": "long", "_meta": { "description": "Number of legacy notifications enabled" } }, "legacy_notifications_disabled": { "type": "long", "_meta": { "description": "Number of legacy notifications disabled" } }, "notifications_enabled": { "type": "long", "_meta": { "description": "Number of notifications enabled" } }, "notifications_disabled": { "type": "long", "_meta": { "description": "Number of notifications enabled" } } } }, "threshold": { "properties": { "enabled": { "type": "long", "_meta": { "description": "Number of threshold rules enabled" } }, "disabled": { "type": "long", "_meta": { "description": "Number of threshold rules disabled" } }, "alerts": { "type": "long", "_meta": { "description": "Number of alerts generated by threshold rules" } }, "cases": { "type": "long", "_meta": { "description": "Number of cases attached to threshold detection rule alerts" } }, "legacy_notifications_enabled": { "type": "long", "_meta": { "description": "Number of legacy notifications enabled" } }, "legacy_notifications_disabled": { "type": "long", "_meta": { "description": "Number of legacy notifications disabled" } }, "notifications_enabled": { "type": "long", "_meta": { "description": "Number of notifications enabled" } }, "notifications_disabled": { "type": "long", "_meta": { "description": "Number of notifications enabled" } } } }, "eql": { "properties": { "enabled": { "type": "long", "_meta": { "description": "Number of eql rules enabled" } }, "disabled": { "type": "long", "_meta": { "description": "Number of eql rules disabled" } }, "alerts": { "type": "long", "_meta": { "description": "Number of alerts generated by eql rules" } }, "cases": { "type": "long", "_meta": { "description": "Number of cases attached to eql detection rule alerts" } }, "legacy_notifications_enabled": { "type": "long", "_meta": { "description": "Number of legacy notifications enabled" } }, "legacy_notifications_disabled": { "type": "long", "_meta": { "description": "Number of legacy notifications disabled" } }, "notifications_enabled": { "type": "long", "_meta": { "description": "Number of notifications enabled" } }, "notifications_disabled": { "type": "long", "_meta": { "description": "Number of notifications enabled" } } } }, "machine_learning": { "properties": { "enabled": { "type": "long", "_meta": { "description": "Number of machine_learning rules enabled" } }, "disabled": { "type": "long", "_meta": { "description": "Number of machine_learning rules disabled" } }, "alerts": { "type": "long", "_meta": { "description": "Number of alerts generated by machine_learning rules" } }, "cases": { "type": "long", "_meta": { "description": "Number of cases attached to machine_learning detection rule alerts" } }, "legacy_notifications_enabled": { "type": "long", "_meta": { "description": "Number of legacy notifications enabled" } }, "legacy_notifications_disabled": { "type": "long", "_meta": { "description": "Number of legacy notifications disabled" } }, "notifications_enabled": { "type": "long", "_meta": { "description": "Number of notifications enabled" } }, "notifications_disabled": { "type": "long", "_meta": { "description": "Number of notifications enabled" } } } }, "threat_match": { "properties": { "enabled": { "type": "long", "_meta": { "description": "Number of threat_match rules enabled" } }, "disabled": { "type": "long", "_meta": { "description": "Number of threat_match rules disabled" } }, "alerts": { "type": "long", "_meta": { "description": "Number of alerts generated by threat_match rules" } }, "cases": { "type": "long", "_meta": { "description": "Number of cases attached to threat_match detection rule alerts" } }, "legacy_notifications_enabled": { "type": "long", "_meta": { "description": "Number of legacy notifications enabled" } }, "legacy_notifications_disabled": { "type": "long", "_meta": { "description": "Number of legacy notifications disabled" } }, "notifications_enabled": { "type": "long", "_meta": { "description": "Number of notifications enabled" } }, "notifications_disabled": { "type": "long", "_meta": { "description": "Number of notifications enabled" } } } }, "new_terms": { "properties": { "enabled": { "type": "long", "_meta": { "description": "Number of new_terms rules enabled" } }, "disabled": { "type": "long", "_meta": { "description": "Number of new_terms rules disabled" } }, "alerts": { "type": "long", "_meta": { "description": "Number of alerts generated by new_terms rules" } }, "cases": { "type": "long", "_meta": { "description": "Number of cases attached to new_terms detection rule alerts" } }, "legacy_notifications_enabled": { "type": "long", "_meta": { "description": "Number of legacy notifications enabled" } }, "legacy_notifications_disabled": { "type": "long", "_meta": { "description": "Number of legacy notifications disabled" } }, "notifications_enabled": { "type": "long", "_meta": { "description": "Number of notifications enabled" } }, "notifications_disabled": { "type": "long", "_meta": { "description": "Number of notifications enabled" } } } }, "elastic_total": { "properties": { "enabled": { "type": "long", "_meta": { "description": "Number of elastic rules enabled" } }, "disabled": { "type": "long", "_meta": { "description": "Number of elastic rules disabled" } }, "alerts": { "type": "long", "_meta": { "description": "Number of alerts generated by elastic rules" } }, "cases": { "type": "long", "_meta": { "description": "Number of cases attached to elastic detection rule alerts" } }, "legacy_notifications_enabled": { "type": "long", "_meta": { "description": "Number of legacy notifications enabled" } }, "legacy_notifications_disabled": { "type": "long", "_meta": { "description": "Number of legacy notifications disabled" } }, "notifications_enabled": { "type": "long", "_meta": { "description": "Number of notifications enabled" } }, "notifications_disabled": { "type": "long", "_meta": { "description": "Number of notifications enabled" } } } }, "custom_total": { "properties": { "enabled": { "type": "long", "_meta": { "description": "Number of custom rules enabled" } }, "disabled": { "type": "long", "_meta": { "description": "Number of custom rules disabled" } }, "alerts": { "type": "long", "_meta": { "description": "Number of alerts generated by custom rules" } }, "cases": { "type": "long", "_meta": { "description": "Number of cases attached to custom detection rule alerts" } }, "legacy_notifications_enabled": { "type": "long", "_meta": { "description": "Number of legacy notifications enabled" } }, "legacy_notifications_disabled": { "type": "long", "_meta": { "description": "Number of legacy notifications disabled" } }, "notifications_enabled": { "type": "long", "_meta": { "description": "Number of notifications enabled" } }, "notifications_disabled": { "type": "long", "_meta": { "description": "Number of notifications enabled" } } } } } }, "detection_rule_detail": { "type": "array", "items": { "properties": { "rule_name": { "type": "keyword", "_meta": { "description": "The name of the detection rule" } }, "rule_id": { "type": "keyword", "_meta": { "description": "The UUID id of the detection rule" } }, "rule_type": { "type": "keyword", "_meta": { "description": "The type of detection rule. ie eql, query..." } }, "rule_version": { "type": "long", "_meta": { "description": "The version of the rule" } }, "enabled": { "type": "boolean", "_meta": { "description": "If the detection rule has been enabled by the user" } }, "elastic_rule": { "type": "boolean", "_meta": { "description": "If the detection rule has been authored by Elastic" } }, "created_on": { "type": "keyword", "_meta": { "description": "When the detection rule was created on the cluster" } }, "updated_on": { "type": "keyword", "_meta": { "description": "When the detection rule was updated on the cluster" } }, "alert_count_daily": { "type": "long", "_meta": { "description": "The number of daily alerts generated by a rule" } }, "cases_count_total": { "type": "long", "_meta": { "description": "The number of total cases generated by a rule" } }, "has_legacy_notification": { "type": "boolean", "_meta": { "description": "True if this rule has a legacy notification" } }, "has_notification": { "type": "boolean", "_meta": { "description": "True if this rule has a notification" } } } } }, "detection_rule_status": { "properties": { "all_rules": { "properties": { "eql": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "top_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "top_partial_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "succeeded": { "type": "long", "_meta": { "description": "The number of successful rules" } }, "index_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "search_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "enrichment_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_count": { "type": "long", "_meta": { "description": "The count of gaps" } } } }, "threat_match": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "top_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "top_partial_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "succeeded": { "type": "long", "_meta": { "description": "The number of successful rules" } }, "index_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "search_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "enrichment_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_count": { "type": "long", "_meta": { "description": "The count of gaps" } } } }, "machine_learning": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "top_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "top_partial_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "succeeded": { "type": "long", "_meta": { "description": "The number of successful rules" } }, "index_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "search_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "enrichment_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_count": { "type": "long", "_meta": { "description": "The count of gaps" } } } }, "query": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "top_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "top_partial_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "succeeded": { "type": "long", "_meta": { "description": "The number of successful rules" } }, "index_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "search_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "enrichment_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_count": { "type": "long", "_meta": { "description": "The count of gaps" } } } }, "saved_query": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "top_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "top_partial_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "succeeded": { "type": "long", "_meta": { "description": "The number of successful rules" } }, "index_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "search_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "enrichment_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_count": { "type": "long", "_meta": { "description": "The count of gaps" } } } }, "threshold": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "top_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "top_partial_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "succeeded": { "type": "long", "_meta": { "description": "The number of successful rules" } }, "index_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "search_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "enrichment_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_count": { "type": "long", "_meta": { "description": "The count of gaps" } } } }, "total": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "succeeded": { "type": "long", "_meta": { "description": "The number of succeeded rules" } } } } } }, "elastic_rules": { "properties": { "eql": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "top_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "top_partial_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "succeeded": { "type": "long", "_meta": { "description": "The number of successful rules" } }, "index_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "search_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "enrichment_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_count": { "type": "long", "_meta": { "description": "The count of gaps" } } } }, "threat_match": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "top_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "top_partial_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "succeeded": { "type": "long", "_meta": { "description": "The number of successful rules" } }, "index_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "search_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "enrichment_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_count": { "type": "long", "_meta": { "description": "The count of gaps" } } } }, "machine_learning": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "top_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "top_partial_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "succeeded": { "type": "long", "_meta": { "description": "The number of successful rules" } }, "index_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "search_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "enrichment_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_count": { "type": "long", "_meta": { "description": "The count of gaps" } } } }, "query": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "top_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "top_partial_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "succeeded": { "type": "long", "_meta": { "description": "The number of successful rules" } }, "index_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "search_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "enrichment_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_count": { "type": "long", "_meta": { "description": "The count of gaps" } } } }, "saved_query": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "top_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "top_partial_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "succeeded": { "type": "long", "_meta": { "description": "The number of successful rules" } }, "index_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "search_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "enrichment_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_count": { "type": "long", "_meta": { "description": "The count of gaps" } } } }, "threshold": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "top_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "top_partial_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "succeeded": { "type": "long", "_meta": { "description": "The number of successful rules" } }, "index_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "search_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "enrichment_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_count": { "type": "long", "_meta": { "description": "The count of gaps" } } } }, "total": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "succeeded": { "type": "long", "_meta": { "description": "The number of succeeded rules" } } } } } }, "custom_rules": { "properties": { "eql": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "top_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "top_partial_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "succeeded": { "type": "long", "_meta": { "description": "The number of successful rules" } }, "index_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "search_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "enrichment_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_count": { "type": "long", "_meta": { "description": "The count of gaps" } } } }, "threat_match": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "top_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "top_partial_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "succeeded": { "type": "long", "_meta": { "description": "The number of successful rules" } }, "index_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "search_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "enrichment_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_count": { "type": "long", "_meta": { "description": "The count of gaps" } } } }, "machine_learning": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "top_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "top_partial_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "succeeded": { "type": "long", "_meta": { "description": "The number of successful rules" } }, "index_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "search_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "enrichment_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_count": { "type": "long", "_meta": { "description": "The count of gaps" } } } }, "query": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "top_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "top_partial_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "succeeded": { "type": "long", "_meta": { "description": "The number of successful rules" } }, "index_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "search_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "enrichment_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_count": { "type": "long", "_meta": { "description": "The count of gaps" } } } }, "saved_query": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "top_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "top_partial_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "succeeded": { "type": "long", "_meta": { "description": "The number of successful rules" } }, "index_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "search_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "enrichment_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_count": { "type": "long", "_meta": { "description": "The count of gaps" } } } }, "threshold": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "top_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "top_partial_failures": { "type": "array", "items": { "properties": { "message": { "type": "keyword", "_meta": { "description": "Failed rule message" } }, "count": { "type": "long", "_meta": { "description": "Number of times the message occurred" } } } } }, "succeeded": { "type": "long", "_meta": { "description": "The number of successful rules" } }, "index_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "search_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "enrichment_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_duration": { "properties": { "max": { "type": "float", "_meta": { "description": "The max duration" } }, "avg": { "type": "float", "_meta": { "description": "The avg duration" } }, "min": { "type": "float", "_meta": { "description": "The min duration" } } } }, "gap_count": { "type": "long", "_meta": { "description": "The count of gaps" } } } }, "total": { "properties": { "failures": { "type": "long", "_meta": { "description": "The number of failed rules" } }, "partial_failures": { "type": "long", "_meta": { "description": "The number of partial failure rules" } }, "succeeded": { "type": "long", "_meta": { "description": "The number of succeeded rules" } } } } } } } } } }, "ml_jobs": { "properties": { "ml_job_usage": { "properties": { "custom": { "properties": { "enabled": { "type": "long", "_meta": { "description": "The number of custom ML jobs rules enabled" } }, "disabled": { "type": "long", "_meta": { "description": "The number of custom ML jobs rules disabled" } } } }, "elastic": { "properties": { "enabled": { "type": "long", "_meta": { "description": "The number of elastic provided ML jobs rules enabled" } }, "disabled": { "type": "long", "_meta": { "description": "The number of elastic provided ML jobs rules disabled" } } } } } }, "ml_job_metrics": { "type": "array", "items": { "properties": { "job_id": { "type": "keyword", "_meta": { "description": "Identifier for the anomaly detection job" } }, "open_time": { "type": "keyword", "_meta": { "description": "For open jobs only, the elapsed time for which the job has been open" } }, "create_time": { "type": "keyword", "_meta": { "description": "The time the job was created" } }, "finished_time": { "type": "keyword", "_meta": { "description": "If the job closed or failed, this is the time the job finished" } }, "state": { "type": "keyword", "_meta": { "description": "The status of the anomaly detection job" } }, "data_counts": { "properties": { "bucket_count": { "type": "long", "_meta": { "description": "The number of buckets processed" } }, "empty_bucket_count": { "type": "long", "_meta": { "description": "The number of buckets which did not contain any data" } }, "input_bytes": { "type": "long", "_meta": { "description": "The number of bytes of input data posted to the anomaly detection job" } }, "input_record_count": { "type": "long", "_meta": { "description": "The number of input documents posted to the anomaly detection job" } }, "last_data_time": { "type": "long", "_meta": { "description": "The timestamp at which data was last analyzed, according to server time" } }, "processed_record_count": { "type": "long", "_meta": { "description": "The number of input documents that have been processed by the anomaly detection job" } } } }, "model_size_stats": { "properties": { "bucket_allocation_failures_count": { "type": "long", "_meta": { "description": "The number of buckets for which new entities in incoming data were not processed due to insufficient model memory" } }, "model_bytes": { "type": "long", "_meta": { "description": "The number of bytes of memory used by the models" } }, "model_bytes_exceeded": { "type": "long", "_meta": { "description": "The number of bytes over the high limit for memory usage at the last allocation failure" } }, "model_bytes_memory_limit": { "type": "long", "_meta": { "description": "The upper limit for model memory usage, checked on increasing values" } }, "peak_model_bytes": { "type": "long", "_meta": { "description": "The peak number of bytes of memory ever used by the models" } } } }, "timing_stats": { "properties": { "bucket_count": { "type": "long", "_meta": { "description": "The number of buckets processed" } }, "exponential_average_bucket_processing_time_ms": { "type": "long", "_meta": { "description": "Exponential moving average of all bucket processing times, in milliseconds" } }, "exponential_average_bucket_processing_time_per_hour_ms": { "type": "long", "_meta": { "description": "Exponentially-weighted moving average of bucket processing times calculated in a 1 hour time window, in milliseconds" } }, "maximum_bucket_processing_time_ms": { "type": "long", "_meta": { "description": "Maximum among all bucket processing times, in milliseconds" } }, "minimum_bucket_processing_time_ms": { "type": "long", "_meta": { "description": "Minimum among all bucket processing times, in milliseconds" } }, "total_bucket_processing_time_ms": { "type": "long", "_meta": { "description": "Sum of all bucket processing times, in milliseconds" } } } }, "datafeed": { "properties": { "datafeed_id": { "type": "keyword", "_meta": { "description": "A numerical character string that uniquely identifies the datafeed" } }, "state": { "type": "keyword", "_meta": { "description": "The status of the datafeed" } }, "timing_stats": { "properties": { "average_search_time_per_bucket_ms": { "type": "long", "_meta": { "description": "The average search time per bucket, in milliseconds" } }, "bucket_count": { "type": "long", "_meta": { "description": "The number of buckets processed" } }, "exponential_average_search_time_per_hour_ms": { "type": "long", "_meta": { "description": "The exponential average search time per hour, in milliseconds" } }, "search_count": { "type": "long", "_meta": { "description": "The number of searches run by the datafeed" } }, "total_search_time_ms": { "type": "long", "_meta": { "description": "The total time the datafeed spent searching, in milliseconds" } } } } } } } } } } } } }, "endpointMetrics": { "properties": { "unique_endpoint_count": { "type": "long", "_meta": { "description": "Number of active unique endpoints in last 24 hours" } } } }, "dashboardMetrics": { "properties": { "dashboard_tag": { "properties": { "created_at": { "type": "keyword", "_meta": { "description": "The time the tab was created" } }, "linked_dashboards_count": { "type": "long", "_meta": { "description": "Number of associated dashboards" } } } }, "dashboards": { "type": "array", "items": { "properties": { "created_at": { "type": "keyword", "_meta": { "description": "The time the dashboard was created" } }, "dashboard_id": { "type": "keyword", "_meta": { "description": "The dashboard saved object id" } }, "error_message": { "type": "keyword", "_meta": { "description": "The relevant error message" } }, "error_status_code": { "type": "long", "_meta": { "description": "The relevant error status code" } } } } } } } } }, "slo": { "properties": { "slo": { "properties": { "total": { "type": "long", "_meta": { "description": "The total number of slos in the cluster" } }, "by_status": { "properties": { "enabled": { "type": "long", "_meta": { "description": "The number of enabled slos in the cluster" } }, "disabled": { "type": "long", "_meta": { "description": "The number of disabled slos in the cluster" } } } }, "by_sli_type": { "properties": { "DYNAMIC_KEY": { "type": "long", "_meta": { "description": "The number of slos by sli type in the cluster" } } } }, "by_rolling_duration": { "properties": { "DYNAMIC_KEY": { "type": "long", "_meta": { "description": "The number of slos by rolling duration in the cluster" } } } }, "by_calendar_aligned_duration": { "properties": { "DYNAMIC_KEY": { "type": "long", "_meta": { "description": "The number of slos by calendar aligned duration in the cluster" } } } }, "by_budgeting_method": { "properties": { "occurrences": { "type": "long", "_meta": { "description": "The number of slos by timeslices budgeting method in the cluster" } }, "timeslices": { "type": "long", "_meta": { "description": "The number of slos by occurrences budgeting method in the cluster" } } } } } } } }, "spaces": { "properties": { "usesFeatureControls": { "type": "boolean", "_meta": { "description": "Indicates if at least one feature is disabled in at least one space. This is a signal that space-level feature controls are in use. This does not account for role-based (security) feature controls." } }, "disabledFeatures": { "properties": { "DYNAMIC_KEY": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "stackAlerts": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "actions": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "enterpriseSearch": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "fleet": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "savedObjectsTagging": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "indexPatterns": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "discover": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "canvas": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "maps": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "siem": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "monitoring": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "graph": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "uptime": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "savedObjectsManagement": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "dev_tools": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "advancedSettings": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "infrastructure": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "visualize": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "logs": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "dashboard": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "ml": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } }, "apm": { "type": "long", "_meta": { "description": "The number of spaces which have this feature disabled." } } } }, "available": { "type": "boolean", "_meta": { "description": "Indicates if the Spaces feature is available in this installation." } }, "enabled": { "type": "boolean", "_meta": { "description": "Indicates if the Spaces feature is enabled in this installation." } }, "count": { "type": "long", "_meta": { "description": "The number of spaces in this installation." } }, "apiCalls.copySavedObjects.total": { "type": "long", "_meta": { "description": "The number of times the \"Copy Saved Objects\" API has been called." } }, "apiCalls.copySavedObjects.kibanaRequest.yes": { "type": "long", "_meta": { "description": "The number of times the \"Copy Saved Objects\" API has been called via the Kibana client." } }, "apiCalls.copySavedObjects.kibanaRequest.no": { "type": "long", "_meta": { "description": "The number of times the \"Copy Saved Objects\" API has been called via an API consumer (e.g. curl)." } }, "apiCalls.copySavedObjects.createNewCopiesEnabled.yes": { "type": "long", "_meta": { "description": "The number of times the \"Copy Saved Objects\" API has been called with \"createNewCopies\" set to true." } }, "apiCalls.copySavedObjects.createNewCopiesEnabled.no": { "type": "long", "_meta": { "description": "The number of times the \"Copy Saved Objects\" API has been called with \"createNewCopies\" set to false." } }, "apiCalls.copySavedObjects.overwriteEnabled.yes": { "type": "long", "_meta": { "description": "The number of times the \"Copy Saved Objects\" API has been called with \"overwrite\" set to true." } }, "apiCalls.copySavedObjects.overwriteEnabled.no": { "type": "long", "_meta": { "description": "The number of times the \"Copy Saved Objects\" API has been called with \"overwrite\" set to false." } }, "apiCalls.copySavedObjects.compatibilityModeEnabled.yes": { "type": "long", "_meta": { "description": "The number of times the \"Copy Saved Objects\" API has been called with \"compatibilityMode\" set to true." } }, "apiCalls.copySavedObjects.compatibilityModeEnabled.no": { "type": "long", "_meta": { "description": "The number of times the \"Copy Saved Objects\" API has been called with \"compatibilityMode\" set to false." } }, "apiCalls.resolveCopySavedObjectsErrors.total": { "type": "long", "_meta": { "description": "The number of times the \"Resolve Copy Saved Objects Errors\" API has been called." } }, "apiCalls.resolveCopySavedObjectsErrors.kibanaRequest.yes": { "type": "long", "_meta": { "description": "The number of times the \"Resolve Copy Saved Objects Errors\" API has been called via the Kibana client." } }, "apiCalls.resolveCopySavedObjectsErrors.kibanaRequest.no": { "type": "long", "_meta": { "description": "The number of times the \"Resolve Copy Saved Objects Errors\" API has been called via an API consumer (e.g. curl)." } }, "apiCalls.resolveCopySavedObjectsErrors.createNewCopiesEnabled.yes": { "type": "long", "_meta": { "description": "The number of times the \"Resolve Copy Saved Objects Errors\" API has been called with \"createNewCopies\" set to true." } }, "apiCalls.resolveCopySavedObjectsErrors.createNewCopiesEnabled.no": { "type": "long", "_meta": { "description": "The number of times the \"Resolve Copy Saved Objects Errors\" API has been called with \"createNewCopies\" set to false." } }, "apiCalls.resolveCopySavedObjectsErrors.compatibilityModeEnabled.yes": { "type": "long", "_meta": { "description": "The number of times the \"Resolve Copy Saved Objects Errors\" API has been called with \"compatibilityMode\" set to true." } }, "apiCalls.resolveCopySavedObjectsErrors.compatibilityModeEnabled.no": { "type": "long", "_meta": { "description": "The number of times the \"Resolve Copy Saved Objects Errors\" API has been called with \"compatibilityMode\" set to false." } }, "apiCalls.disableLegacyUrlAliases.total": { "type": "long", "_meta": { "description": "The number of times the \"Disable Legacy URL Aliases\" API has been called." } } } }, "task_manager": { "properties": { "ephemeral_tasks_enabled": { "type": "boolean" }, "ephemeral_request_capacity": { "type": "short" }, "ephemeral_stats": { "properties": { "status": { "type": "keyword" }, "queued_tasks": { "properties": { "p50": { "type": "long" }, "p90": { "type": "long" }, "p95": { "type": "long" }, "p99": { "type": "long" } } }, "load": { "properties": { "p50": { "type": "long" }, "p90": { "type": "long" }, "p95": { "type": "long" }, "p99": { "type": "long" } } }, "executions_per_cycle": { "properties": { "p50": { "type": "long" }, "p90": { "type": "long" }, "p95": { "type": "long" }, "p99": { "type": "long" } } } } }, "task_type_exclusion": { "type": "array", "items": { "type": "keyword" } }, "failed_tasks": { "type": "long" }, "recurring_tasks": { "properties": { "actual_service_time": { "type": "long" }, "adjusted_service_time": { "type": "long" } } }, "adhoc_tasks": { "properties": { "actual_service_time": { "type": "long" }, "adjusted_service_time": { "type": "long" } } }, "capacity": { "type": "long" } } }, "transform": { "properties": { "alertRules": { "properties": { "transform_health": { "properties": { "count_by_check_type": { "properties": { "notStarted": { "type": "long", "_meta": { "description": "total number of alerting rules performing the not started health check" } }, "errorMessages": { "type": "long", "_meta": { "description": "total number of alerting rules performing the error message health check" } }, "healthCheck": { "type": "long", "_meta": { "description": "total number of alerting rules performing the health check with the stats API" } } } } } } } } } }, "upgrade-assistant-telemetry": { "properties": { "features": { "properties": { "deprecation_logging": { "properties": { "enabled": { "type": "boolean", "_meta": { "description": "Whether user has enabled Elasticsearch deprecation logging" } } } } } } } }, "workplace_search": { "properties": { "ui_viewed": { "properties": { "setup_guide": { "type": "long" }, "overview": { "type": "long" } } }, "ui_error": { "properties": { "cannot_connect": { "type": "long" }, "not_found": { "type": "long" } } }, "ui_clicked": { "properties": { "header_launch_button": { "type": "long" }, "org_name_change_button": { "type": "long" }, "onboarding_card_button": { "type": "long" }, "recent_activity_source_details_link": { "type": "long" } } } } } } }