{
  "index_patterns": [
    "packetbeat-6.0.0-*"
  ],
  "mappings": {
    "doc": {
      "_meta": {
        "version": "6.0.0"
      },
      "date_detection": false,
      "dynamic_templates": [
        {
          "fields": {
            "mapping": {
              "type": "keyword"
            },
            "match_mapping_type": "string",
            "path_match": "fields.*"
          }
        },
        {
          "docker.container.labels": {
            "mapping": {
              "type": "keyword"
            },
            "match_mapping_type": "string",
            "path_match": "docker.container.labels.*"
          }
        },
        {
          "amqp.headers": {
            "mapping": {
              "type": "keyword"
            },
            "match_mapping_type": "string",
            "path_match": "amqp.headers.*"
          }
        },
        {
          "cassandra.response.supported": {
            "mapping": {
              "type": "keyword"
            },
            "match_mapping_type": "string",
            "path_match": "cassandra.response.supported.*"
          }
        },
        {
          "http.request.headers": {
            "mapping": {
              "type": "keyword"
            },
            "match_mapping_type": "string",
            "path_match": "http.request.headers.*"
          }
        },
        {
          "http.response.headers": {
            "mapping": {
              "type": "keyword"
            },
            "match_mapping_type": "string",
            "path_match": "http.response.headers.*"
          }
        },
        {
          "strings_as_keyword": {
            "mapping": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "match_mapping_type": "string"
          }
        }
      ],
      "properties": {
        "@timestamp": {
          "type": "date"
        },
        "amqp": {
          "properties": {
            "app-id": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "arguments": {
              "type": "object"
            },
            "auto-delete": {
              "type": "boolean"
            },
            "class-id": {
              "type": "long"
            },
            "consumer-count": {
              "type": "long"
            },
            "consumer-tag": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "content-encoding": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "content-type": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "correlation-id": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "delivery-mode": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "delivery-tag": {
              "type": "long"
            },
            "durable": {
              "type": "boolean"
            },
            "exchange": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "exchange-type": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "exclusive": {
              "type": "boolean"
            },
            "expiration": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "headers": {
              "type": "object"
            },
            "if-empty": {
              "type": "boolean"
            },
            "if-unused": {
              "type": "boolean"
            },
            "immediate": {
              "type": "boolean"
            },
            "mandatory": {
              "type": "boolean"
            },
            "message-count": {
              "type": "long"
            },
            "message-id": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "method-id": {
              "type": "long"
            },
            "multiple": {
              "type": "boolean"
            },
            "no-ack": {
              "type": "boolean"
            },
            "no-local": {
              "type": "boolean"
            },
            "no-wait": {
              "type": "boolean"
            },
            "passive": {
              "type": "boolean"
            },
            "priority": {
              "type": "long"
            },
            "queue": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "redelivered": {
              "type": "boolean"
            },
            "reply-code": {
              "type": "long"
            },
            "reply-text": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "reply-to": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "routing-key": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "timestamp": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "type": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "user-id": {
              "ignore_above": 1024,
              "type": "keyword"
            }
          }
        },
        "beat": {
          "properties": {
            "hostname": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "name": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "timezone": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "version": {
              "ignore_above": 1024,
              "type": "keyword"
            }
          }
        },
        "bytes_in": {
          "type": "long"
        },
        "bytes_out": {
          "type": "long"
        },
        "cassandra": {
          "properties": {
            "request": {
              "properties": {
                "headers": {
                  "properties": {
                    "flags": {
                      "ignore_above": 1024,
                      "type": "keyword"
                    },
                    "length": {
                      "type": "long"
                    },
                    "op": {
                      "ignore_above": 1024,
                      "type": "keyword"
                    },
                    "stream": {
                      "ignore_above": 1024,
                      "type": "keyword"
                    },
                    "version": {
                      "type": "long"
                    }
                  }
                },
                "query": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            },
            "response": {
              "properties": {
                "authentication": {
                  "properties": {
                    "class": {
                      "ignore_above": 1024,
                      "type": "keyword"
                    }
                  }
                },
                "error": {
                  "properties": {
                    "code": {
                      "type": "long"
                    },
                    "details": {
                      "properties": {
                        "alive": {
                          "type": "long"
                        },
                        "arg_types": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "blockfor": {
                          "type": "long"
                        },
                        "data_present": {
                          "type": "boolean"
                        },
                        "function": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "keyspace": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "num_failures": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "read_consistency": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "received": {
                          "type": "long"
                        },
                        "required": {
                          "type": "long"
                        },
                        "stmt_id": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "table": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "write_type": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        }
                      }
                    },
                    "msg": {
                      "ignore_above": 1024,
                      "type": "keyword"
                    },
                    "type": {
                      "ignore_above": 1024,
                      "type": "keyword"
                    }
                  }
                },
                "event": {
                  "properties": {
                    "change": {
                      "ignore_above": 1024,
                      "type": "keyword"
                    },
                    "host": {
                      "ignore_above": 1024,
                      "type": "keyword"
                    },
                    "port": {
                      "type": "long"
                    },
                    "schema_change": {
                      "properties": {
                        "args": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "change": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "keyspace": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "name": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "object": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "table": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "target": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        }
                      }
                    },
                    "type": {
                      "ignore_above": 1024,
                      "type": "keyword"
                    }
                  }
                },
                "headers": {
                  "properties": {
                    "flags": {
                      "ignore_above": 1024,
                      "type": "keyword"
                    },
                    "length": {
                      "type": "long"
                    },
                    "op": {
                      "ignore_above": 1024,
                      "type": "keyword"
                    },
                    "stream": {
                      "ignore_above": 1024,
                      "type": "keyword"
                    },
                    "version": {
                      "type": "long"
                    }
                  }
                },
                "result": {
                  "properties": {
                    "keyspace": {
                      "ignore_above": 1024,
                      "type": "keyword"
                    },
                    "prepared": {
                      "properties": {
                        "prepared_id": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "req_meta": {
                          "properties": {
                            "col_count": {
                              "type": "long"
                            },
                            "flags": {
                              "ignore_above": 1024,
                              "type": "keyword"
                            },
                            "keyspace": {
                              "ignore_above": 1024,
                              "type": "keyword"
                            },
                            "paging_state": {
                              "ignore_above": 1024,
                              "type": "keyword"
                            },
                            "pkey_columns": {
                              "type": "long"
                            },
                            "table": {
                              "ignore_above": 1024,
                              "type": "keyword"
                            }
                          }
                        },
                        "resp_meta": {
                          "properties": {
                            "col_count": {
                              "type": "long"
                            },
                            "flags": {
                              "ignore_above": 1024,
                              "type": "keyword"
                            },
                            "keyspace": {
                              "ignore_above": 1024,
                              "type": "keyword"
                            },
                            "paging_state": {
                              "ignore_above": 1024,
                              "type": "keyword"
                            },
                            "pkey_columns": {
                              "type": "long"
                            },
                            "table": {
                              "ignore_above": 1024,
                              "type": "keyword"
                            }
                          }
                        }
                      }
                    },
                    "rows": {
                      "properties": {
                        "meta": {
                          "properties": {
                            "col_count": {
                              "type": "long"
                            },
                            "flags": {
                              "ignore_above": 1024,
                              "type": "keyword"
                            },
                            "keyspace": {
                              "ignore_above": 1024,
                              "type": "keyword"
                            },
                            "paging_state": {
                              "ignore_above": 1024,
                              "type": "keyword"
                            },
                            "pkey_columns": {
                              "type": "long"
                            },
                            "table": {
                              "ignore_above": 1024,
                              "type": "keyword"
                            }
                          }
                        },
                        "num_rows": {
                          "type": "long"
                        }
                      }
                    },
                    "schema_change": {
                      "properties": {
                        "args": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "change": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "keyspace": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "name": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "object": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "table": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        },
                        "target": {
                          "ignore_above": 1024,
                          "type": "keyword"
                        }
                      }
                    },
                    "type": {
                      "ignore_above": 1024,
                      "type": "keyword"
                    }
                  }
                },
                "supported": {
                  "type": "object"
                },
                "warnings": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            }
          }
        },
        "client_geoip": {
          "properties": {
            "location": {
              "type": "geo_point"
            }
          }
        },
        "client_ip": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "client_port": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "client_proc": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "client_server": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "client_service": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "connection_id": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "connecttime": {
          "type": "long"
        },
        "cpu_time": {
          "type": "long"
        },
        "dest": {
          "properties": {
            "ip": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "ip_location": {
              "type": "geo_point"
            },
            "ipv6": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "ipv6_location": {
              "type": "geo_point"
            },
            "mac": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "outer_ip": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "outer_ip_location": {
              "type": "geo_point"
            },
            "outer_ipv6": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "outer_ipv6_location": {
              "type": "geo_point"
            },
            "port": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "stats": {
              "properties": {
                "net_bytes_total": {
                  "type": "long"
                },
                "net_packets_total": {
                  "type": "long"
                }
              }
            }
          }
        },
        "direction": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "dns": {
          "properties": {
            "additionals": {
              "properties": {
                "class": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "data": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "ttl": {
                  "type": "long"
                },
                "type": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              },
              "type": "object"
            },
            "additionals_count": {
              "type": "long"
            },
            "answers": {
              "properties": {
                "class": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "data": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "ttl": {
                  "type": "long"
                },
                "type": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              },
              "type": "object"
            },
            "answers_count": {
              "type": "long"
            },
            "authorities": {
              "properties": {
                "class": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "type": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              },
              "type": "object"
            },
            "authorities_count": {
              "type": "long"
            },
            "flags": {
              "properties": {
                "authentic_data": {
                  "type": "boolean"
                },
                "authoritative": {
                  "type": "boolean"
                },
                "checking_disabled": {
                  "type": "boolean"
                },
                "recursion_available": {
                  "type": "boolean"
                },
                "recursion_desired": {
                  "type": "boolean"
                },
                "truncated_response": {
                  "type": "boolean"
                }
              }
            },
            "id": {
              "type": "long"
            },
            "op_code": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "opt": {
              "properties": {
                "do": {
                  "type": "boolean"
                },
                "ext_rcode": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "udp_size": {
                  "type": "long"
                },
                "version": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            },
            "question": {
              "properties": {
                "class": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "etld_plus_one": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "type": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            },
            "response_code": {
              "ignore_above": 1024,
              "type": "keyword"
            }
          }
        },
        "dnstime": {
          "type": "long"
        },
        "docker": {
          "properties": {
            "container": {
              "properties": {
                "id": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "image": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "labels": {
                  "type": "object"
                },
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            }
          }
        },
        "domloadtime": {
          "type": "long"
        },
        "error": {
          "properties": {
            "code": {
              "type": "long"
            },
            "message": {
              "norms": false,
              "type": "text"
            },
            "type": {
              "ignore_above": 1024,
              "type": "keyword"
            }
          }
        },
        "fields": {
          "type": "object"
        },
        "final": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "flow_id": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "http": {
          "properties": {
            "request": {
              "properties": {
                "body": {
                  "norms": false,
                  "type": "text"
                },
                "headers": {
                  "type": "object"
                },
                "params": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            },
            "response": {
              "properties": {
                "body": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "code": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "headers": {
                  "type": "object"
                },
                "phrase": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            }
          }
        },
        "icmp": {
          "properties": {
            "request": {
              "properties": {
                "code": {
                  "type": "long"
                },
                "message": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "type": {
                  "type": "long"
                }
              }
            },
            "response": {
              "properties": {
                "code": {
                  "type": "long"
                },
                "message": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "type": {
                  "type": "long"
                }
              }
            },
            "version": {
              "ignore_above": 1024,
              "type": "keyword"
            }
          }
        },
        "icmp_id": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "ip": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "kubernetes": {
          "properties": {
            "annotations": {
              "type": "object"
            },
            "container": {
              "properties": {
                "image": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            },
            "labels": {
              "type": "object"
            },
            "namespace": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "pod": {
              "properties": {
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            }
          }
        },
        "last_time": {
          "type": "date"
        },
        "loadtime": {
          "type": "long"
        },
        "memcache": {
          "properties": {
            "protocol_type": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "request": {
              "properties": {
                "automove": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "bytes": {
                  "type": "long"
                },
                "cas_unique": {
                  "type": "long"
                },
                "command": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "count_values": {
                  "type": "long"
                },
                "delta": {
                  "type": "long"
                },
                "dest_class": {
                  "type": "long"
                },
                "exptime": {
                  "type": "long"
                },
                "flags": {
                  "type": "long"
                },
                "initial": {
                  "type": "long"
                },
                "line": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "noreply": {
                  "type": "boolean"
                },
                "opaque": {
                  "type": "long"
                },
                "opcode": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "opcode_value": {
                  "type": "long"
                },
                "quiet": {
                  "type": "boolean"
                },
                "raw_args": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "sleep_us": {
                  "type": "long"
                },
                "source_class": {
                  "type": "long"
                },
                "type": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "vbucket": {
                  "type": "long"
                },
                "verbosity": {
                  "type": "long"
                }
              }
            },
            "response": {
              "properties": {
                "bytes": {
                  "type": "long"
                },
                "cas_unique": {
                  "type": "long"
                },
                "command": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "count_values": {
                  "type": "long"
                },
                "error_msg": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "flags": {
                  "type": "long"
                },
                "opaque": {
                  "type": "long"
                },
                "opcode": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "opcode_value": {
                  "type": "long"
                },
                "status": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "status_code": {
                  "type": "long"
                },
                "type": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "value": {
                  "type": "long"
                },
                "version": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            }
          }
        },
        "meta": {
          "properties": {
            "cloud": {
              "properties": {
                "availability_zone": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "instance_id": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "instance_name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "machine_type": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "project_id": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "provider": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "region": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            }
          }
        },
        "method": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "mongodb": {
          "properties": {
            "cursorId": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "error": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "fullCollectionName": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "numberReturned": {
              "type": "long"
            },
            "numberToReturn": {
              "type": "long"
            },
            "numberToSkip": {
              "type": "long"
            },
            "query": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "returnFieldsSelector": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "selector": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "startingFrom": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "update": {
              "ignore_above": 1024,
              "type": "keyword"
            }
          }
        },
        "mysql": {
          "properties": {
            "affected_rows": {
              "type": "long"
            },
            "error_code": {
              "type": "long"
            },
            "error_message": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "insert_id": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "iserror": {
              "type": "boolean"
            },
            "num_fields": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "num_rows": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "query": {
              "ignore_above": 1024,
              "type": "keyword"
            }
          }
        },
        "nfs": {
          "properties": {
            "minor_version": {
              "type": "long"
            },
            "opcode": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "status": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "tag": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "version": {
              "type": "long"
            }
          }
        },
        "notes": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "outer_vlan": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "params": {
          "norms": false,
          "type": "text"
        },
        "path": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "pgsql": {
          "properties": {
            "error_code": {
              "type": "long"
            },
            "error_message": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "error_severity": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "iserror": {
              "type": "boolean"
            },
            "num_fields": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "num_rows": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "query": {
              "ignore_above": 1024,
              "type": "keyword"
            }
          }
        },
        "port": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "proc": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "query": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "real_ip": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "redis": {
          "properties": {
            "error": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "return_value": {
              "ignore_above": 1024,
              "type": "keyword"
            }
          }
        },
        "release": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "request": {
          "norms": false,
          "type": "text"
        },
        "resource": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "response": {
          "norms": false,
          "type": "text"
        },
        "responsetime": {
          "type": "long"
        },
        "rpc": {
          "properties": {
            "auth_flavor": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "call_size": {
              "type": "long"
            },
            "cred": {
              "properties": {
                "gid": {
                  "type": "long"
                },
                "gids": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "machinename": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "stamp": {
                  "type": "long"
                },
                "uid": {
                  "type": "long"
                }
              }
            },
            "reply_size": {
              "type": "long"
            },
            "status": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "time": {
              "type": "long"
            },
            "time_str": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "xid": {
              "ignore_above": 1024,
              "type": "keyword"
            }
          }
        },
        "server": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "service": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "source": {
          "properties": {
            "ip": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "ip_location": {
              "type": "geo_point"
            },
            "ipv6": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "ipv6_location": {
              "type": "geo_point"
            },
            "mac": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "outer_ip": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "outer_ip_location": {
              "type": "geo_point"
            },
            "outer_ipv6": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "outer_ipv6_location": {
              "type": "geo_point"
            },
            "port": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "stats": {
              "properties": {
                "net_bytes_total": {
                  "type": "long"
                },
                "net_packets_total": {
                  "type": "long"
                }
              }
            }
          }
        },
        "start_time": {
          "type": "date"
        },
        "status": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "tags": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "thrift": {
          "properties": {
            "exceptions": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "params": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "return_value": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "service": {
              "ignore_above": 1024,
              "type": "keyword"
            }
          }
        },
        "transport": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "type": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "vlan": {
          "ignore_above": 1024,
          "type": "keyword"
        }
      }
    }
  },
  "order": 1,
  "settings": {
    "index": {
      "mapping": {
        "total_fields": {
          "limit": 10000
        }
      },
      "number_of_shards": 3,
      "refresh_interval": "5s"
    }
  }
}