diff --git a/docs/integrations/setup.md b/docs/integrations/setup.md
index a4a56846c0..ad866e3331 100644
--- a/docs/integrations/setup.md
+++ b/docs/integrations/setup.md
@@ -34,4 +34,4 @@ If working on S3-based integrations, it's worth noting that queries have some va
- `{object_name}` used for giving tables a unique name per-integration to avoid collisions.
For some query examples, it can be worth looking at the assets for the
-[VPC integration](https://github.com/opensearch-project/dashboards-observability/blob/4e1e0e585/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/README.md).
+[VPC integration](https://github.com/opensearch-project/dashboards-observability/blob/main/server/adaptors/integrations/__data__/repository/amazon_vpc_flow/info/README.md).
diff --git a/server/adaptors/integrations/__data__/repository/amazon_cloudfront/amazon_cloudfront-1.0.0.json b/server/adaptors/integrations/__data__/repository/amazon_cloudfront/amazon_cloudfront-1.0.0.json
index 16ae0900c2..b613c281cc 100644
--- a/server/adaptors/integrations/__data__/repository/amazon_cloudfront/amazon_cloudfront-1.0.0.json
+++ b/server/adaptors/integrations/__data__/repository/amazon_cloudfront/amazon_cloudfront-1.0.0.json
@@ -5,7 +5,13 @@
"description": "Analyze access logs for Amazon CloudFront.",
"license": "Apache-2.0",
"type": "logs-aws_cloudfront",
- "labels": ["Observability", "Logs", "AWS", "Cloud", "Flint S3"],
+ "labels": [
+ "Observability",
+ "Logs",
+ "AWS",
+ "Cloud",
+ "Flint S3"
+ ],
"author": "OpenSearch",
"sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/aws_cloudfront/info",
"statics": {
@@ -35,20 +41,208 @@
}
],
"components": [
+ {
+ "name": "aws_config",
+ "version": "1.0.0"
+ },
+ {
+ "name": "aws_clientvpn",
+ "version": "1.0.0"
+ },
{
"name": "aws_cloudfront",
"version": "1.0.0"
},
{
- "name": "aws_s3",
+ "name": "aws_cloudhsm",
+ "version": "1.0.0"
+ },
+ {
+ "name": "aws_cloudtrail",
+ "version": "1.0.0"
+ },
+ {
+ "name": "aws_elasticache",
+ "version": "1.0.0"
+ },
+ {
+ "name": "aws_elb",
+ "version": "1.0.0"
+ },
+ {
+ "name": "aws_guardduty",
+ "version": "1.0.0"
+ },
+ {
+ "name": "aws_inspector",
+ "version": "1.0.0"
+ },
+ {
+ "name": "aws_msk",
+ "version": "1.0.0"
+ },
+ {
+ "name": "aws_networkfirewall",
+ "version": "1.0.0"
+ },
+ {
+ "name": "aws_opensearch",
+ "version": "1.0.0"
+ },
+ {
+ "name": "aws_r53resolver",
+ "version": "1.0.0"
+ },
+ {
+ "name": "aws_rds",
+ "version": "1.0.0"
+ },
+ {
+ "name": "aws_s3accesslog",
+ "version": "1.0.0"
+ },
+ {
+ "name": "aws_securityhub",
+ "version": "1.0.0"
+ },
+ {
+ "name": "aws_trustedadvisor",
+ "version": "1.0.0"
+ },
+ {
+ "name": "aws_vpcflowlogs",
+ "version": "1.0.0"
+ },
+ {
+ "name": "aws_waf",
+ "version": "1.0.0"
+ },
+ {
+ "name": "aws_workspace",
+ "version": "1.0.0"
+ },
+ {
+ "name": "log_ecs",
+ "version": "1.0.0"
+ },
+ {
+ "name": "log_linux",
+ "version": "1.0.0"
+ },
+ {
+ "name": "log_ocsf",
+ "version": "1.0.0"
+ },
+ {
+ "name": "log_win",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_clientvpc",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_cloudfront",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_cloudhsm",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_cloudtrail",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_config",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_elasticache",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_elb",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_guardduty",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_inspector",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_msk",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_networkfirewall",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_opensearch",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_r53resolver",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_rds",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_s3accesslog",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_securityhub",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_trustedadvisor",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_vpcflowlogs",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_waf",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_aws_workspaces",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_linux",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_ocsf",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_win",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_win_directory_service",
+ "version": "1.0.0"
+ },
+ {
+ "name": "logs_win_fsx",
"version": "1.0.0"
},
{
- "name": "cloud",
+ "name": "metrics_opensearch",
"version": "1.0.0"
},
{
- "name": "logs-aws_cloudfront",
+ "name": "opensearch",
"version": "1.0.0"
}
],
@@ -64,28 +258,36 @@
"version": "1.0.0",
"extension": "sql",
"type": "query",
- "workflows": ["queries"]
+ "workflows": [
+ "queries"
+ ]
},
{
"name": "example_queries",
"version": "1.0.0",
"extension": "ndjson",
"type": "savedObjectBundle",
- "workflows": ["queries"]
+ "workflows": [
+ "queries"
+ ]
},
{
"name": "create_mv",
"version": "1.0.0",
"extension": "sql",
"type": "query",
- "workflows": ["dashboards"]
+ "workflows": [
+ "dashboards"
+ ]
},
{
"name": "aws_cloudfront",
"version": "1.0.0",
"extension": "ndjson",
"type": "savedObjectBundle",
- "workflows": ["dashboards"]
+ "workflows": [
+ "dashboards"
+ ]
}
],
"sampleData": {
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/assets/dashboard-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/ocsf-security/assets/dashboard-1.0.0.ndjson
new file mode 100644
index 0000000000..842c88cc80
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/assets/dashboard-1.0.0.ndjson
@@ -0,0 +1,364 @@
+{"attributes":{"buildNum":36149,"dateFormat":"YYYY/MM/DD HH:mm:ss","dateNanosFormat":"YYYY/MM/DD HH:mm:ss.SSSSSS","defaultIndex":"36049c40-7fc8-11ea-945d-8d0868f4a377","fields:popularLimit":100,"format:number:defaultLocale":null,"format:number:defaultPattern":"00.[000000]","format:percent:defaultPattern":"00.[000]%","histogram:barTarget":100,"metaFields":["_source","_id","_index"],"savedObjects:listingLimit":2000,"timelion:max_buckets":20000,"timepicker:quickRanges":"[\n {\n \"from\": \"now/d\",\n \"to\": \"now/d\",\n \"display\": \"Today\"\n },\n {\n \"from\": \"now-15m\",\n \"to\": \"now\",\n \"display\": \"Last 15 minutes\"\n },\n {\n \"from\": \"now-30m\",\n \"to\": \"now\",\n \"display\": \"Last 30 minutes\"\n },\n {\n \"from\": \"now-1h\",\n \"to\": \"now\",\n \"display\": \"Last 1 hour\"\n },\n {\n \"from\": \"now-2h\",\n \"to\": \"now\",\n \"display\": \"Last 2 hours\"\n },\n {\n \"from\": \"now-3h\",\n \"to\": \"now\",\n \"display\": \"Last 3 hours\"\n },\n {\n \"from\": \"now-6h\",\n \"to\": \"now\",\n \"display\": \"Last 6 hours\"\n },\n {\n \"from\": \"now-12h\",\n \"to\": \"now\",\n \"display\": \"Last 12 hours\"\n },\n {\n \"from\": \"now-24h\",\n \"to\": \"now\",\n \"display\": \"Last 24 hours\"\n },\n {\n \"from\": \"now-48h\",\n \"to\": \"now\",\n \"display\": \"Last 48 hour\"\n },\n {\n \"from\": \"now-72h\",\n \"to\": \"now\",\n \"display\": \"Last 72 hour\"\n },\n {\n \"from\": \"now-7d\",\n \"to\": \"now\",\n \"display\": \"Last 7 days\"\n },\n {\n \"from\": \"now-30d\",\n \"to\": \"now\",\n \"display\": \"Last 30 days\"\n },\n {\n \"from\": \"now-90d\",\n \"to\": \"now\",\n \"display\": \"Last 90 days\"\n },\n {\n \"from\": \"now-1y\",\n \"to\": \"now\",\n \"display\": \"Last 1 year\"\n }\n]","timepicker:timeDefaults":"{\n \"from\": \"now-30m\",\n \"to\": \"now\"\n}","visualization:heatmap:maxBuckets":500,"visualization:regionmap:showWarnings":false},"id":"7.10.2","migrationVersion":{"config":"7.9.0"},"references":[],"type":"config","updated_at":"2021-06-26T07:55:09.646Z","version":"WzE5OSwxXQ=="}
+{"attributes":{"buildNum":36473,"dateFormat":"YYYY/MM/DD HH:mm:ss","dateNanosFormat":"YYYY/MM/DD HH:mm:ss.SSSSSS","defaultIndex":"36049c40-7fc8-11ea-945d-8d0868f4a377","fields:popularLimit":100,"format:number:defaultPattern":"00.[000000]","format:percent:defaultPattern":"00.[000]%","histogram:barTarget":100,"metaFields":["_source","_id","_index"],"savedObjects:listingLimit":2000,"timelion:max_buckets":20000,"timepicker:quickRanges":"[\n {\n \"from\": \"now/d\",\n \"to\": \"now/d\",\n \"display\": \"Today\"\n },\n {\n \"from\": \"now-15m\",\n \"to\": \"now\",\n \"display\": \"Last 15 minutes\"\n },\n {\n \"from\": \"now-30m\",\n \"to\": \"now\",\n \"display\": \"Last 30 minutes\"\n },\n {\n \"from\": \"now-1h\",\n \"to\": \"now\",\n \"display\": \"Last 1 hour\"\n },\n {\n \"from\": \"now-2h\",\n \"to\": \"now\",\n \"display\": \"Last 2 hours\"\n },\n {\n \"from\": \"now-3h\",\n \"to\": \"now\",\n \"display\": \"Last 3 hours\"\n },\n {\n \"from\": \"now-6h\",\n \"to\": \"now\",\n \"display\": \"Last 6 hours\"\n },\n {\n \"from\": \"now-12h\",\n \"to\": \"now\",\n \"display\": \"Last 12 hours\"\n },\n {\n \"from\": \"now-24h\",\n \"to\": \"now\",\n \"display\": \"Last 24 hours\"\n },\n {\n \"from\": \"now-48h\",\n \"to\": \"now\",\n \"display\": \"Last 48 hours\"\n },\n {\n \"from\": \"now-72h\",\n \"to\": \"now\",\n \"display\": \"Last 72 hours\"\n },\n {\n \"from\": \"now-7d\",\n \"to\": \"now\",\n \"display\": \"Last 7 days\"\n },\n {\n \"from\": \"now-30d\",\n \"to\": \"now\",\n \"display\": \"Last 30 days\"\n },\n {\n \"from\": \"now-90d\",\n \"to\": \"now\",\n \"display\": \"Last 90 days\"\n },\n {\n \"from\": \"now-1y\",\n \"to\": \"now\",\n \"display\": \"Last 1 year\"\n }\n]","timepicker:timeDefaults":"{\n \"from\": \"now-30m\",\n \"to\": \"now\"\n}","visualization:heatmap:maxBuckets":500,"visualization:regionmap:showWarnings":false},"id":"1.0.0-SNAPSHOT","migrationVersion":{"config":"7.9.0"},"references":[],"type":"config","updated_at":"2021-09-10T09:12:49.742Z","version":"WzIxOSwxXQ=="}
+{"attributes":{"buildNum":36526,"dateFormat":"YYYY/MM/DD HH:mm:ss","dateNanosFormat":"YYYY/MM/DD HH:mm:ss.SSSSSS","defaultIndex":"36049c40-7fc8-11ea-945d-8d0868f4a377","fields:popularLimit":100,"format:number:defaultLocale":null,"format:number:defaultPattern":"00.[000000]","format:percent:defaultPattern":"00.[000]%","histogram:barTarget":100,"metaFields":["_source","_id","_index"],"savedObjects:listingLimit":2000,"timelion:max_buckets":20000,"timepicker:quickRanges":"[\n {\n \"from\": \"now/d\",\n \"to\": \"now/d\",\n \"display\": \"Today\"\n },\n {\n \"from\": \"now-15m\",\n \"to\": \"now\",\n \"display\": \"Last 15 minutes\"\n },\n {\n \"from\": \"now-30m\",\n \"to\": \"now\",\n \"display\": \"Last 30 minutes\"\n },\n {\n \"from\": \"now-1h\",\n \"to\": \"now\",\n \"display\": \"Last 1 hour\"\n },\n {\n \"from\": \"now-2h\",\n \"to\": \"now\",\n \"display\": \"Last 2 hours\"\n },\n {\n \"from\": \"now-3h\",\n \"to\": \"now\",\n \"display\": \"Last 3 hours\"\n },\n {\n \"from\": \"now-6h\",\n \"to\": \"now\",\n \"display\": \"Last 6 hours\"\n },\n {\n \"from\": \"now-12h\",\n \"to\": \"now\",\n \"display\": \"Last 12 hours\"\n },\n {\n \"from\": \"now-24h\",\n \"to\": \"now\",\n \"display\": \"Last 24 hours\"\n },\n {\n \"from\": \"now-48h\",\n \"to\": \"now\",\n \"display\": \"Last 48 hours\"\n },\n {\n \"from\": \"now-72h\",\n \"to\": \"now\",\n \"display\": \"Last 72 hours\"\n },\n {\n \"from\": \"now-7d\",\n \"to\": \"now\",\n \"display\": \"Last 7 days\"\n },\n {\n \"from\": \"now-30d\",\n \"to\": \"now\",\n \"display\": \"Last 30 days\"\n },\n {\n \"from\": \"now-90d\",\n \"to\": \"now\",\n \"display\": \"Last 90 days\"\n },\n {\n \"from\": \"now-1y\",\n \"to\": \"now\",\n \"display\": \"Last 1 year\"\n }\n]","timepicker:timeDefaults":"{\n \"from\": \"now-30m\",\n \"to\": \"now\"\n}","visualization:heatmap:maxBuckets":500,"visualization:regionmap:showWarnings":false},"id":"1.1.0","migrationVersion":{"config":"7.9.0"},"references":[],"type":"config","updated_at":"2022-02-17T23:35:47.298Z","version":"WzIyOSwxXQ=="}
+{"attributes":{"buildNum":1,"dateFormat":"YYYY/MM/DD HH:mm:ss","dateNanosFormat":"YYYY/MM/DD HH:mm:ss.SSSSSS","defaultIndex":"36049c40-7fc8-11ea-945d-8d0868f4a377","fields:popularLimit":100,"format:number:defaultLocale":null,"format:number:defaultPattern":"00.[000000]","format:percent:defaultPattern":"00.[000]%","histogram:barTarget":100,"metaFields":["_source","_id","_index"],"savedObjects:listingLimit":2000,"timelion:max_buckets":20000,"timepicker:quickRanges":"[\n {\n \"from\": \"now/d\",\n \"to\": \"now/d\",\n \"display\": \"Today\"\n },\n {\n \"from\": \"now-15m\",\n \"to\": \"now\",\n \"display\": \"Last 15 minutes\"\n },\n {\n \"from\": \"now-30m\",\n \"to\": \"now\",\n \"display\": \"Last 30 minutes\"\n },\n {\n \"from\": \"now-1h\",\n \"to\": \"now\",\n \"display\": \"Last 1 hour\"\n },\n {\n \"from\": \"now-2h\",\n \"to\": \"now\",\n \"display\": \"Last 2 hours\"\n },\n {\n \"from\": \"now-3h\",\n \"to\": \"now\",\n \"display\": \"Last 3 hours\"\n },\n {\n \"from\": \"now-6h\",\n \"to\": \"now\",\n \"display\": \"Last 6 hours\"\n },\n {\n \"from\": \"now-12h\",\n \"to\": \"now\",\n \"display\": \"Last 12 hours\"\n },\n {\n \"from\": \"now-24h\",\n \"to\": \"now\",\n \"display\": \"Last 24 hours\"\n },\n {\n \"from\": \"now-48h\",\n \"to\": \"now\",\n \"display\": \"Last 48 hours\"\n },\n {\n \"from\": \"now-72h\",\n \"to\": \"now\",\n \"display\": \"Last 72 hours\"\n },\n {\n \"from\": \"now-7d\",\n \"to\": \"now\",\n \"display\": \"Last 7 days\"\n },\n {\n \"from\": \"now-30d\",\n \"to\": \"now\",\n \"display\": \"Last 30 days\"\n },\n {\n \"from\": \"now-90d\",\n \"to\": \"now\",\n \"display\": \"Last 90 days\"\n },\n {\n \"from\": \"now-1y\",\n \"to\": \"now\",\n \"display\": \"Last 1 year\"\n }\n]","timepicker:timeDefaults":"{\n \"from\": \"now-30m\",\n \"to\": \"now\"\n}","visualization:heatmap:maxBuckets":500,"visualization:regionmap:showWarnings":false},"id":"1.2.0","migrationVersion":{"config":"7.9.0"},"references":[],"type":"config","updated_at":"2022-04-05T12:31:57.042Z","version":"WzIzMSwxXQ=="}
+{"attributes":{"buildNum":3032,"dateFormat":"YYYY/MM/DD HH:mm:ss","dateNanosFormat":"YYYY/MM/DD HH:mm:ss.SSSSSS","defaultIndex":"36049c40-7fc8-11ea-945d-8d0868f4a377","fields:popularLimit":100,"format:number:defaultLocale":null,"format:number:defaultPattern":"00.[000000]","format:percent:defaultPattern":"00.[000]%","histogram:barTarget":100,"metaFields":["_source","_id","_index"],"savedObjects:listingLimit":2000,"timelion:max_buckets":20000,"timepicker:quickRanges":"[\n {\n \"from\": \"now/d\",\n \"to\": \"now/d\",\n \"display\": \"Today\"\n },\n {\n \"from\": \"now-15m\",\n \"to\": \"now\",\n \"display\": \"Last 15 minutes\"\n },\n {\n \"from\": \"now-30m\",\n \"to\": \"now\",\n \"display\": \"Last 30 minutes\"\n },\n {\n \"from\": \"now-1h\",\n \"to\": \"now\",\n \"display\": \"Last 1 hour\"\n },\n {\n \"from\": \"now-2h\",\n \"to\": \"now\",\n \"display\": \"Last 2 hours\"\n },\n {\n \"from\": \"now-3h\",\n \"to\": \"now\",\n \"display\": \"Last 3 hours\"\n },\n {\n \"from\": \"now-6h\",\n \"to\": \"now\",\n \"display\": \"Last 6 hours\"\n },\n {\n \"from\": \"now-12h\",\n \"to\": \"now\",\n \"display\": \"Last 12 hours\"\n },\n {\n \"from\": \"now-24h\",\n \"to\": \"now\",\n \"display\": \"Last 24 hours\"\n },\n {\n \"from\": \"now-48h\",\n \"to\": \"now\",\n \"display\": \"Last 48 hours\"\n },\n {\n \"from\": \"now-72h\",\n \"to\": \"now\",\n \"display\": \"Last 72 hours\"\n },\n {\n \"from\": \"now-7d\",\n \"to\": \"now\",\n \"display\": \"Last 7 days\"\n },\n {\n \"from\": \"now-30d\",\n \"to\": \"now\",\n \"display\": \"Last 30 days\"\n },\n {\n \"from\": \"now-90d\",\n \"to\": \"now\",\n \"display\": \"Last 90 days\"\n },\n {\n \"from\": \"now-1y\",\n \"to\": \"now\",\n \"display\": \"Last 1 year\"\n }\n]","timepicker:timeDefaults":"{\n \"from\": \"now-30m\",\n \"to\": \"now\"\n}","visualization:heatmap:maxBuckets":500,"visualization:regionmap:showWarnings":false},"id":"1.3.2","migrationVersion":{"config":"7.9.0"},"references":[],"type":"config","updated_at":"2022-07-30T07:46:51.084Z","version":"WzMxMiwxXQ=="}
+{"attributes":{"buildNum":4104,"dateFormat":"YYYY/MM/DD HH:mm:ss","dateNanosFormat":"YYYY/MM/DD HH:mm:ss.SSSSSS","defaultIndex":"36049c40-7fc8-11ea-945d-8d0868f4a377","fields:popularLimit":100,"format:number:defaultLocale":null,"format:number:defaultPattern":"00.[000000]","format:percent:defaultPattern":"00.[000]%","histogram:barTarget":100,"metaFields":["_source","_id","_index"],"savedObjects:listingLimit":2000,"timelion:max_buckets":20000,"timepicker:quickRanges":"[\n {\n \"from\": \"now/d\",\n \"to\": \"now/d\",\n \"display\": \"Today\"\n },\n {\n \"from\": \"now-15m\",\n \"to\": \"now\",\n \"display\": \"Last 15 minutes\"\n },\n {\n \"from\": \"now-30m\",\n \"to\": \"now\",\n \"display\": \"Last 30 minutes\"\n },\n {\n \"from\": \"now-1h\",\n \"to\": \"now\",\n \"display\": \"Last 1 hour\"\n },\n {\n \"from\": \"now-2h\",\n \"to\": \"now\",\n \"display\": \"Last 2 hours\"\n },\n {\n \"from\": \"now-3h\",\n \"to\": \"now\",\n \"display\": \"Last 3 hours\"\n },\n {\n \"from\": \"now-6h\",\n \"to\": \"now\",\n \"display\": \"Last 6 hours\"\n },\n {\n \"from\": \"now-12h\",\n \"to\": \"now\",\n \"display\": \"Last 12 hours\"\n },\n {\n \"from\": \"now-24h\",\n \"to\": \"now\",\n \"display\": \"Last 24 hours\"\n },\n {\n \"from\": \"now-48h\",\n \"to\": \"now\",\n \"display\": \"Last 48 hours\"\n },\n {\n \"from\": \"now-72h\",\n \"to\": \"now\",\n \"display\": \"Last 72 hours\"\n },\n {\n \"from\": \"now-7d\",\n \"to\": \"now\",\n \"display\": \"Last 7 days\"\n },\n {\n \"from\": \"now-30d\",\n \"to\": \"now\",\n \"display\": \"Last 30 days\"\n },\n {\n \"from\": \"now-90d\",\n \"to\": \"now\",\n \"display\": \"Last 90 days\"\n },\n {\n \"from\": \"now-1y\",\n \"to\": \"now\",\n \"display\": \"Last 1 year\"\n }\n]","timepicker:timeDefaults":"{\n \"from\": \"now-30m\",\n \"to\": \"now\"\n}","visualization:heatmap:maxBuckets":500,"visualization:regionmap:showWarnings":false},"id":"2.3.0","migrationVersion":{"config":"7.9.0"},"references":[],"type":"config","updated_at":"2022-11-19T23:31:45.055Z","version":"WzcxOSwxXQ=="}
+{"attributes":{"buildNum":223231,"dateFormat":"YYYY/MM/DD HH:mm:ss","dateNanosFormat":"YYYY/MM/DD HH:mm:ss.SSSSSS","defaultIndex":"36049c40-7fc8-11ea-945d-8d0868f4a377","fields:popularLimit":100,"format:number:defaultLocale":null,"format:number:defaultPattern":"00.[000000]","format:percent:defaultPattern":"00.[000]%","histogram:barTarget":100,"metaFields":["_source","_id","_index"],"savedObjects:listingLimit":2000,"timelion:max_buckets":20000,"timepicker:quickRanges":"[\n {\n \"from\": \"now/d\",\n \"to\": \"now/d\",\n \"display\": \"Today\"\n },\n {\n \"from\": \"now-15m\",\n \"to\": \"now\",\n \"display\": \"Last 15 minutes\"\n },\n {\n \"from\": \"now-30m\",\n \"to\": \"now\",\n \"display\": \"Last 30 minutes\"\n },\n {\n \"from\": \"now-1h\",\n \"to\": \"now\",\n \"display\": \"Last 1 hour\"\n },\n {\n \"from\": \"now-2h\",\n \"to\": \"now\",\n \"display\": \"Last 2 hours\"\n },\n {\n \"from\": \"now-3h\",\n \"to\": \"now\",\n \"display\": \"Last 3 hours\"\n },\n {\n \"from\": \"now-6h\",\n \"to\": \"now\",\n \"display\": \"Last 6 hours\"\n },\n {\n \"from\": \"now-12h\",\n \"to\": \"now\",\n \"display\": \"Last 12 hours\"\n },\n {\n \"from\": \"now-24h\",\n \"to\": \"now\",\n \"display\": \"Last 24 hours\"\n },\n {\n \"from\": \"now-48h\",\n \"to\": \"now\",\n \"display\": \"Last 48 hours\"\n },\n {\n \"from\": \"now-72h\",\n \"to\": \"now\",\n \"display\": \"Last 72 hours\"\n },\n {\n \"from\": \"now-7d\",\n \"to\": \"now\",\n \"display\": \"Last 7 days\"\n },\n {\n \"from\": \"now-30d\",\n \"to\": \"now\",\n \"display\": \"Last 30 days\"\n },\n {\n \"from\": \"now-90d\",\n \"to\": \"now\",\n \"display\": \"Last 90 days\"\n },\n {\n \"from\": \"now-1y\",\n \"to\": \"now\",\n \"display\": \"Last 1 year\"\n }\n]","timepicker:timeDefaults":"{\n \"from\": \"now-30m\",\n \"to\": \"now\"\n}","visualization:heatmap:maxBuckets":500,"visualization:regionmap:showWarnings":false},"id":"2.5.0","migrationVersion":{"config":"7.9.0"},"references":[],"type":"config","updated_at":"2023-04-07T01:58:34.616Z","version":"WzM2MSwxXQ=="}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_stream\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Artifact\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"AuthType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"AwsAccountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"BucketOwner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"BundleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"BytesSent\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"CipherSuite\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"CompanyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Compliance.RelatedRequirements\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Compliance.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Compliance.StatusReasons.Description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Compliance.StatusReasons.ReasonCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ComputerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Confidence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ConnectionState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ConnectionStateCheckTimestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"CreatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"DetectionMechanism\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"DirectoryId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"EndPoint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ErrorCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Binary\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccessList\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccessMask\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccountExpires\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AuthenticationPackageName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BitlockerUserInputTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ClientCreationTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CreationUtcTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CurrentStratumNumber\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DestAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DestPort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DeviceTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HandleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ImpersonationLevel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.IpAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.IpPort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.KeyLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogonGuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogonProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogonType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewProcessId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewSd\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectServer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OldSd\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OldTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OperationType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PasswordLastSet\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PreviousCreationUtcTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PreviousTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PrivilegeList\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessingTimeInMilliseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Properties\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SourceAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SourcePort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.StartTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.StopTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectDomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectLogonId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectUserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectUserSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetDomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetLogonId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetUserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetUserSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TimeSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TimeSourceRefId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TokenElevationType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param1\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Channel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Culture\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Keywords.Keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"Event.RenderingInfo.Opcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Task\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Channel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Computer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.EventID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.EventRecordID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Execution.ProcessID\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Execution.ThreadID\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Keywords\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Opcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Provider.EventSourceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Provider.Guid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Provider.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Qualifiers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Security.UserID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Task\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.TimeCreated.SystemTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"FindingProviderFields.Severity.Label\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"FindingProviderFields.Severity.Normalized\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"FindingProviderFields.Severity.Original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"FindingProviderFields.Severity.Product\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"FindingProviderFields.Types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"FirstObservedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"GeneratorId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"HTTPstatus\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"HostId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"IpAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"LastKnownUserConnectionTimestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"LastObservedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"NetworkPath.ComponentId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"NetworkPath.ComponentType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ObjectSize\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.FailedCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.InstalledCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.InstalledOtherCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.InstalledPendingReboot\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.InstalledRejectedCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.MissingCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.Operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.OperationEndTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.OperationStartTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.ControlId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.JobArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.JobId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.PatchManagerHash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.RecommendationUrl\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.RelatedAWSResources:0/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.RelatedAWSResources:0/type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.RelatedAWSResources:1/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.RelatedAWSResources:1/type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.Resources:0/Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.RuleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Bucket.allowsUnencryptedObjectUploads\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Bucket.effectivePermission\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Object.Extension\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Object.Path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Object.PublicAccess\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Object.Size\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Object.StorageClass\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.StandardsArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.StandardsControlArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.StandardsGuideArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.StandardsGuideSubscriptionArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.StandardsSubscriptionArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/ACL\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/BENCHMARK_ID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/BENCHMARK_RULE_ID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/CIS_BENCHMARK_PROFILE\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/CIS_WEIGHT\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/CVE_ID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/CVSS2_SCORE\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/CVSS2_VECTOR\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/CVSS3_SCORE\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/CVSS3_VECTOR\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/ELB\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/ELB2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/ENI\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/IGW\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/INSTANCE_ID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/PORT\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/PORT_GROUP_NAME\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/PROTOCOL\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/REACHABILITY_TYPE\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/RULE_TYPE\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/SECURITY_GROUP\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/TCP_PORTS\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/VPC\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/package_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/actionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/affectedResources/AWS::CloudTrail::Trail\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/affectedResources/AWS::EC2::Instance\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/affectedResources/AWS::IAM::Role\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/affectedResources/AWS::IAM::User\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/affectedResources/AWS::S3::Bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/api\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/callerType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/errorCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteAccountDetails/accountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteAccountDetails/affiliated\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/city/cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/country/countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/geoLocation/lat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/geoLocation/lon\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/organization/asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/organization/asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/organization/isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/organization/org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/dnsRequestAction/blocked\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/dnsRequestAction/domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/dnsRequestAction/protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/parameters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/city/cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/country/countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/geoLocation/lat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/geoLocation/lon\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/organization/asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/organization/asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/organization/isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/organization/org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/requestUri\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/sourceIPs.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/statusCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/userAgent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/verb\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/blocked\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/connectionDirection\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/localIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/localPortDetails/port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/localPortDetails/portName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/city/cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/country/countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/geoLocation/lat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/geoLocation/lon\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/organization/asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/organization/asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/organization/isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/organization/org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remotePortDetails/port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remotePortDetails/portName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/blocked\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/localIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/localPortDetails/port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/localPortDetails/portName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/city/cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/country/countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/geoLocation/lat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/geoLocation/lon\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/organization/asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/organization/asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/organization/isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/organization/org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/localIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/localPortDetails/port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/localPortDetails/portName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/city/cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/country/countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/geoLocation/lat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/geoLocation/lon\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/organization/asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/organization/asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/organization/isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/organization/org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/anomalies/anomalousAPIs\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.0_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.0_/firstSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.0_/lastSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.0_/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.1_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.1_/firstSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.1_/lastSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.1_/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.2_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.2_/firstSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.2_/lastSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.2_/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.3_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.3_/firstSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.3_/lastSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.3_/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.4_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.4_/firstSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.4_/lastSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.4_/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.5_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.5_/firstSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.5_/lastSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.5_/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.6_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.6_/firstSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.6_/lastSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.6_/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.7_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.7_/firstSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.7_/lastSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.7_/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/inBytes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/localPort\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/allowUsersToChangePassword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/hardExpiry\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/maxPasswordAge\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/minimumPasswordLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/passwordReusePrevention\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/requireLowercaseCharacters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/requireNumbers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/requireSymbols\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/requireUppercaseCharacters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/allowUsersToChangePassword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/hardExpiry\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/maxPasswordAge\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/minimumPasswordLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/passwordReusePrevention\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/requireLowercaseCharacters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/requireNumbers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/requireSymbols\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/requireUppercaseCharacters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/outBytes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.10_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.11_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.12_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.13_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.14_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.15_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.16_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.17_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.18_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.19_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.1_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.2_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.3_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.4_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.5_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.6_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.7_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.8_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.9_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledAPIsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledAPIsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledASNsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledASNsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledUserAgentsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledUserAgentsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledUserNamesAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledUserTypesAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/infrequentProfiledAPIsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/infrequentProfiledAPIsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/infrequentProfiledASNsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/infrequentProfiledASNsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/infrequentProfiledUserAgentsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/infrequentProfiledUserAgentsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledAPIsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledAPIsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledASNsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledUserAgentsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledUserAgentsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledUserNamesAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledUserTypesAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentApiCalls.0_/api\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentApiCalls.0_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentApiCalls.1_/api\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentApiCalls.1_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.0_/accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.0_/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.0_/principalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.1_/accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.1_/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.1_/principalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.2_/accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.2_/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.2_/principalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.3_/accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.3_/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.3_/principalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/sample\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/scannedPort\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/threatListName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/threatName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/countries.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/countries.1_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/countries.2_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/countries.3_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/hoursOfDay.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/isps\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/userNames.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusualBehavior/unusualAPIsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusualBehavior/unusualAPIsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusualBehavior/unusualASNsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusualBehavior/unusualASNsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusualProtocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/userAgent/fullUserAgent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/userAgent/userAgentCategory\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/archived\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/detectorId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/eventFirstSeen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/eventLastSeen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/evidence/threatIntelligenceDetails.0_/threatListName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/evidence/threatIntelligenceDetails.0_/threatNames.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/resourceRole\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/FindingStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/ProductVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/RulesPackageName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/inspectorScore\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/packageVulnerabilityDetails/vulnerablePackages/1/sourceLayerHash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/packageVulnerabilityDetails/vulnerablePackages/2/sourceLayerHash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/packageVulnerabilityDetails/vulnerablePackages/3/sourceLayerHash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/packageVulnerabilityDetails/vulnerablePackages/4/sourceLayerHash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/packageVulnerabilityDetails/vulnerablePackages/sourceLayerHashes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/resources/1/resourceDetails/awsEc2InstanceDetails/platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/resources/1/resourceDetails/awsEcrContainerImageDetails/platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/securityhub/CompanyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/securityhub/FindingId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/securityhub/ProductName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/securityhub/annotation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.serviceAttributes/assessmentRunArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.serviceAttributes/rulesPackageArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.serviceAttributes/schemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RecordState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Referrer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Remediation.Recommendation.Text\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Remediation.Recommendation.Url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RemoteIP\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RequestDateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RequestID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RequestURI_httpProtoversion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RequestURI_key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RequestURI_operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Requester\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ResourceTypeAffected\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.DetailedResultsLocation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.AdditionalOccurrences\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Occurrences.Cells.CellReference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Occurrences.Cells.Column\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Occurrences.Cells.ColumnName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Occurrences.Cells.Row\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.TotalCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.MimeType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Cells.CellReference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Cells.Column\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Cells.ColumnName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Cells.Row\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.LineRanges.End\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.LineRanges.Start\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.LineRanges.StartColumn\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Pages.PageNumber\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Records.JsonPath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Records.RecordIndex\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.TotalCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SizeClassified\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.Status.Code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.CreatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.DomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.ResourceRecord.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.ResourceRecord.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.ResourceRecord.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.ValidationDomain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.ValidationMethod\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.ValidationStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.ExtendedKeyUsages.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.ExtendedKeyUsages.OId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.InUseBy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.IssuedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.Issuer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.KeyAlgorithm\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.KeyUsages.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.NotAfter\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.NotBefore\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.Options.CertificateTransparencyLoggingPreference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalEligibility\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.DomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.ResourceRecord.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.ResourceRecord.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.ResourceRecord.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.ValidationDomain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.ValidationMethod\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.ValidationStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.RenewalStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.UpdatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.Serial\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.SignatureAlgorithm\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.Subject\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.SubjectAlternativeNames\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.CloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.CloudWatchLogsRoleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.HasCustomEventSelectors\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.HomeRegion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.IncludeGlobalServiceEvents\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.IsMultiRegionTrail\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.IsOrganizationTrail\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.KmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.LogFileValidationEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.S3BucketName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.SnsTopicName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.AllocationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.Domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.NetworkBorderGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.PublicIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.PublicIpv4Pool\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.IamInstanceProfileArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.ImageId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.IpV4Addresses\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.KeyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.LaunchedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.NetworkInterfaces.NetworkInterfaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.SubnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Associations.NetworkAclAssociationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Associations.NetworkAclId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Associations.SubnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Entries.CidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Entries.Egress\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Entries.Protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Entries.RuleAction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Entries.RuleNumber\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.IsDefault\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.NetworkAclId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.OwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.GroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.GroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissions.FromPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissions.IpProtocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissions.IpRanges.CidrIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissions.ToPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissions.UserIdGroupPairs.GroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissions.UserIdGroupPairs.UserId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissionsEgress.IpProtocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissionsEgress.IpRanges.CidrIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.OwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.AssignIpv6AddressOnCreation\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.AvailabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.AvailabilityZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.AvailableIpAddressCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.CidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.DefaultForAz\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.MapPublicIpOnLaunch\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.OwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.State\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.SubnetArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.SubnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Attachments.AttachTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Attachments.DeleteOnTermination\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Attachments.InstanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Attachments.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.CreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Encrypted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.SnapshotId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Vpc.CidrBlockAssociationSet.AssociationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Vpc.CidrBlockAssociationSet.CidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Vpc.CidrBlockAssociationSet.CidrBlockState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Vpc.DhcpOptionsId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Vpc.State\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcrContainerImage.Architecture\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcrContainerImage.ImageDigest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcrContainerImage.ImagePublishedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcrContainerImage.ImageTags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcrContainerImage.RegistryId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcrContainerImage.RepositoryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEksCluster.Arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEksCluster.ClusterStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEksCluster.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.AvailabilityZones.SubnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.AvailabilityZones.ZoneName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.CanonicalHostedZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.CreatedTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.DNSName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.IpAddressType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.Scheme\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.SecurityGroups\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.State.Code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamAccessKey.PrincipalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamAccessKey.PrincipalName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamAccessKey.PrincipalType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.AttachmentCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.CreateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.DefaultVersionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.IsAttachable\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.Path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.PermissionsBoundaryUsageCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.PolicyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.PolicyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.PolicyVersionList.CreateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.PolicyVersionList.IsDefaultVersion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.PolicyVersionList.VersionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.UpdateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.AssumeRolePolicyDocument\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.AttachedManagedPolicies.PolicyArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.AttachedManagedPolicies.PolicyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.CreateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.CreateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.InstanceProfileId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.InstanceProfileName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Roles.Arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Roles.AssumeRolePolicyDocument\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Roles.CreateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Roles.Path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Roles.RoleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Roles.RoleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.Path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.RoleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.RoleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.RolePolicyList.PolicyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamUser.AttachedManagedPolicies.PolicyArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamUser.AttachedManagedPolicies.PolicyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamUser.CreateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamUser.Path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamUser.UserId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamUser.UserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKmsKey.AWSAccountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKmsKey.CreationDate\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKmsKey.KeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKmsKey.KeyManager\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKmsKey.KeyState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKmsKey.Origin\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.CodeSha256\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.DeadLetterConfig.TargetArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.FunctionName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.Handler\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.LastModified\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.MemorySize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.RevisionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.Role\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.Runtime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.Timeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.TracingConfig.Mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.Version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.ActivityStreamStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.AllocatedStorage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.AvailabilityZones\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.BackupRetentionPeriod\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.ClusterCreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.CopyTagsToSnapshot\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.CrossAccountClone\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterMembers.DbClusterParameterGroupStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterMembers.DbInstanceIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterMembers.IsClusterWriter\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterMembers.PromotionTier\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterParameterGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterResourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbSubnetGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DeletionProtection\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.EnabledCloudWatchLogsExports\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.Endpoint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.Engine\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.EngineMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.EngineVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.HostedZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.HttpEndpointEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.IamDatabaseAuthenticationEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.KmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.MasterUsername\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.MultiAz\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.Port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.PreferredBackupWindow\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.PreferredMaintenanceWindow\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.ReaderEndpoint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.StorageEncrypted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.VpcSecurityGroups.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.VpcSecurityGroups.VpcSecurityGroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.AllocatedStorage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.AvailabilityZones\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.ClusterCreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.Engine\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.EngineVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.KmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.LicenseModel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.MasterUsername\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.PercentProgress\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.Port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.SnapshotCreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.SnapshotType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.StorageEncrypted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.AllocatedStorage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.AutoMinorVersionUpgrade\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.AvailabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.BackupRetentionPeriod\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.CACertificateIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.CopyTagsToSnapshot\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DBClusterIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DBInstanceClass\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DBInstanceIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbInstancePort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbInstanceStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbParameterGroups.DbParameterGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbParameterGroups.ParameterApplyStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.DbSubnetGroupDescription\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.DbSubnetGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.SubnetGroupStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.Subnets.SubnetAvailabilityZone.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.Subnets.SubnetIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.Subnets.SubnetStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbiResourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DeletionProtection\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.EnabledCloudWatchLogsExports\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.Endpoint.Address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.Endpoint.HostedZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.Endpoint.Port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.Engine\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.EngineVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.EnhancedMonitoringResourceArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.IAMDatabaseAuthenticationEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.InstanceCreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.KmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.LicenseModel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.MasterUsername\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.MonitoringInterval\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.MonitoringRoleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.MultiAz\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.OptionGroupMemberships.OptionGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.OptionGroupMemberships.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PerformanceInsightsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PerformanceInsightsKmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PerformanceInsightsRetentionPeriod\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PreferredBackupWindow\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PreferredMaintenanceWindow\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PromotionTier\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PubliclyAccessible\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.StorageEncrypted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.StorageType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.VpcSecurityGroups.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.VpcSecurityGroups.VpcSecurityGroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.CreatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.OwnerAccountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.OwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.OwnerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.PublicAccessBlockConfiguration.BlockPublicAcls\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.PublicAccessBlockConfiguration.BlockPublicPolicy\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.PublicAccessBlockConfiguration.IgnorePublicAcls\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.PublicAccessBlockConfiguration.RestrictPublicBuckets\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.ServerSideEncryptionConfiguration.Rules.ApplyServerSideEncryptionByDefault.KMSMasterKeyID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.ServerSideEncryptionConfiguration.Rules.ApplyServerSideEncryptionByDefault.SSEAlgorithm\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Object.ETag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Object.LastModified\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Object.ServerSideEncryption\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSecretsManagerSecret.Deleted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSecretsManagerSecret.Description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSecretsManagerSecret.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSecretsManagerSecret.RotationEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.Action Granted\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.Condition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.External Principal\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.External Principal Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.kubernetesDetails/kubernetesUserDetails/groups.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.kubernetesDetails/kubernetesUserDetails/groups.1_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.kubernetesDetails/kubernetesUserDetails/uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.kubernetesDetails/kubernetesUserDetails/username\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.kubernetesDetails/kubernetesWorkloadDetails\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.Division\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingEKSClusterTag1\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingEKSClusterTag2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingEKSClusterTag3\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag1\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag3\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag5\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag6\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag7\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag8\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag9\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.Team\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.aws:cloudformation:logical-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.aws:cloudformation:stack-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.aws:cloudformation:stack-name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.foo\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"S3AccessPointARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Severity.Label\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Severity.Normalized\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Severity.Original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Severity.Product\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SigV\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SourceUrl\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"State\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SubnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"TLSVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ThreatFamilyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ThreatPurpose\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Title\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"TotalTime\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"TurnAroundTime\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"UpdatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"UserAgent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"UserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"VersionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Cvss.BaseScore\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Cvss.BaseVector\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Cvss.Source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Cvss.Version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.ReferenceUrls\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Vendor.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Vendor.Url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Vendor.VendorCreatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Vendor.VendorSeverity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Vendor.VendorUpdatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.Architecture\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.Epoch\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.FilePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.PackageManager\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.Release\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.Version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Workflow.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkflowState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkspaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkspaceProperties.ComputeTypeName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkspaceProperties.RootVolumeSizeGib\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkspaceProperties.RunningMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkspaceProperties.RunningModeAutoStopTimeoutInMinutes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkspaceProperties.UserVolumeSizeGib\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"accountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"account_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"actionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"actions_executed\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"answers.Class\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"answers.Rdata\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"answers.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"availability_zone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"az_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"backend_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"backend_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"backend_processing_time\",\"type\":\"number\",\"esTypes\":[\"half_float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"backend_status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"c_country\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"c_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"c_ip_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"c_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cache_behavior_path_pattern\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"chosen_cert_arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"classification_reason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientIpAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientPlatform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"client_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"client_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.client-ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.client-vpn-endpoint-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.common-name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-attempt-failure-reason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-attempt-status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-duration-seconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-end-time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-last-update-time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-log-type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-reset-status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-start-time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.device-ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.device-type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.egress-bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.egress-packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.ingress-bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.ingress-packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.transport-protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.username\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.availability_zone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.instance.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.service.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.cluster_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.command_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.command_type_hex\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.host_time\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.host_time_usec\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.hsm_error\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.hsm_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.hsm_return\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.key_handle\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.local_time\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.local_time_usec\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.log_type_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.opcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.opcode_hex\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.priv_secret_key_handle\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.propagation_delay\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.public_key_handle\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.reboot_counter\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.response\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.sequence_no\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.session_handle\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.timestamp\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.timestamp_usec\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.unknown_field_value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.user_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.user_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.user_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.user_type_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.version_no\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"connection_time\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"createdAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_accept\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_accept_encoding\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_header_names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_headers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_headers_count\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_protocol_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_referer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_uri_query\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_uri_stem\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"date_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"destination.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"directoryId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"distribution_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.class\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.data\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.question.class\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.question.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.question.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.response_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"domain_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dstaddr\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dstport\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.CacheClusterId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.CacheNodeId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.ClientAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.ClientName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.Command\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.Duration_us\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.Timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elb\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elb_status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":10,\"name\":\"event.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.alert.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.alert.rev\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.alert.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.alert.signature\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.alert.signature_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.app_proto\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.dest_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.dest_port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.event_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.flow_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.http.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.http.http_method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.http.http_user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.http.length\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.http.protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.http.url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.age\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.max_ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.min_ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.pkts\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.proto\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.src_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.src_port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.ack\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.fin\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.psh\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.rst\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.syn\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.tcp_flag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.tcp_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tls.sni\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tls.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event_timestamp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"firewall_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"flow_direction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"formatVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.request.method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.request.referrer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.clientIp\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.country\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.accept\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.accept_encoding\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.accept_language\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.cache_control\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.connection\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.content_length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.content_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.cookie\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.dnt\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.from\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.pragma\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.referer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.upgrade_insecure_requests\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.headers.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.headers.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.httpMethod\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.httpVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.requestId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.uri\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpSourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpSourceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_query\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.awsAccountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.findingArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.firstObservedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScore\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScoreDetails.adjustedCvss.cvssSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScoreDetails.adjustedCvss.score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScoreDetails.adjustedCvss.scoreSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScoreDetails.adjustedCvss.scoringVector\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScoreDetails.adjustedCvss.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.lastObservedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.networkReachabilityDetails.networkPath.steps.componentId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.networkReachabilityDetails.networkPath.steps.componentType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.networkReachabilityDetails.openPortRange.begin\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.networkReachabilityDetails.openPortRange.end\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.networkReachabilityDetails.protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.cvss.baseScore\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.cvss\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.cvss.scoringVector\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.cvss\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.cvss.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.cvss\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.cvss.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.cvss\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.referenceUrls\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.sourceUrl\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vendorCreatedAt\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vendorSeverity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vendorUpdatedAt\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerabilityId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.arch\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.epoch\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.filePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.packageManager\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.release\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.sourceLayerHash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.remediation.recommendation.text\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.remediation.recommendation.url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.iamInstanceProfileArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.imageId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.ipV4Addresses\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.keyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.launchedAt\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.architecture\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.imageHash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.imageTags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.pushedAt\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.registry\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.repositoryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.tags.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.title\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.updatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"instance_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"listener\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"listener_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log_entry_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log_status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"loginTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"matched_rule_priority\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.broker_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.cluster_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.group_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.log_level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.max_lag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"msk.sum_lag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.time_lag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.timestamp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.topic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.command\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.database\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.lock_time\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.log_level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"mysql.object\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.query\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"mysql.query_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.query_time\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.queryid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.retcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.serverhost\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.source_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.thread_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.username\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.direction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.transport\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"nonTerminatingMatchingRules.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"nonTerminatingMatchingRules.ruleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_cluster_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_format_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_node_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_node_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_request_body\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"opensearch.audit_request_effective_user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_request_effective_user_is_admin\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_request_layer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_request_origin\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_request_privilege\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_request_remote_address\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Accept\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Accept-Encoding\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Connection\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Content-Encoding\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Content-Length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Content-Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.User-Agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.x-opaque-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.x-opensearch-product-origin\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.filter_path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.metric\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.page_size\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_trace_doc_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_trace_indices\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_trace_resolved_indices\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_trace_shard_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_trace_task_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_transport_headers._system_index_access_allowed\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_transport_request_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"packets\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"pid\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"pkt_dst_aws_service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"pkt_dstaddr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"pkt_src_aws_service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"pkt_srcaddr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.database\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.duration_ms\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.log_level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"postgresql.pid\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.query\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"postgresql.query_step\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.session_time_seconds\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.source_address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.source_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.thread_id\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"proc\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"protocol\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query_class\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rds.cluster_identifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rds.database_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rds.instance_identifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rds.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":10,\"name\":\"rds.query\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":10,\"name\":\"rds.query_time\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"received_bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"request\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"request_creation_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"request_processing_time\",\"type\":\"number\",\"esTypes\":[\"half_float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"request_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.accessKeyDetails.accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.accessKeyDetails.principalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.accessKeyDetails.userName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.accessKeyDetails.userType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ebsVolumeDetails.scannedVolumeDetails.deviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ebsVolumeDetails.scannedVolumeDetails.encryptionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ebsVolumeDetails.scannedVolumeDetails.snapshotArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ebsVolumeDetails.scannedVolumeDetails.volumeArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ebsVolumeDetails.scannedVolumeDetails.volumeSizeInGB\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ebsVolumeDetails.scannedVolumeDetails.volumeType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.eksClusterDetails.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.eksClusterDetails.createdAt\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.eksClusterDetails.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.eksClusterDetails.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.eksClusterDetails.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.availabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.iamInstanceProfile.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.iamInstanceProfile.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.imageDescription\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.imageId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.instanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.instanceState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.instanceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.launchTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.networkInterfaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.privateDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.privateIpAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.privateIpAddresses.privateDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.publicDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.publicIp\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.securityGroups.groupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.securityGroups.groupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.tags.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.tags.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesUserDetails.groups\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesUserDetails.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesUserDetails.username\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.resourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"response_processing_time\",\"type\":\"number\",\"esTypes\":[\"half_float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.ruleset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ruleGroupList.excludedRules.exclusionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ruleGroupList.excludedRules.ruleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ruleGroupList.ruleGroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ruleGroupList.terminatingRule.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ruleGroupList.terminatingRule.ruleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sc-range-end\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sc-range-start\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sc_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sc_content_len\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sc_content_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sc_status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"schemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sent_bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.actionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.api\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.callerType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.city.cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.country.countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.geoLocation\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.ipAddressV4\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.ipAddressV6\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.organization.asn\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.organization.isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.organization.org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.dnsRequestAction.blocked\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.dnsRequestAction.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.dnsRequestAction.protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.country.countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.geoLocation.lat\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.geoLocation.lon\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.organization.asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.organization.asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.organization.isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.organization.org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.requestUri\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.sourceIPs\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.statusCode\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.userAgent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.verb\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.blocked\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.connectionDirection\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.localIpDetails.ipAddressV4\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.localPortDetails.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.localPortDetails.portName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.city.cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.country.countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.geoLocation\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.ipAddressV4\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.organization.asn\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.organization.isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.organization.org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remotePortDetails.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remotePortDetails.portName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.portProbeAction.portProbeDetails.localIpDetails.ipAddressV4\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.portProbeAction.portProbeDetails.remoteIpDetails.geoLocation\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.portProbeAction.portProbeDetails.remoteIpDetails.ipAddressV4\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.apiCalls.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.apiCalls.firstSeen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.apiCalls.lastSeen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.apiCalls.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.inBytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.localPort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.newPolicy.maxPasswordAge\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.newPolicy.minimumPasswordLength\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.newPolicy.passwordReusePrevention\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.oldPolicy.maxPasswordAge\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.oldPolicy.minimumPasswordLength\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.oldPolicy.passwordReusePrevention\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.outBytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.recentCredentials.ipAddressV4\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.threatListName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.threatName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.unusual\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"service.additionalInfo.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.archived\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.detectorId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanCompletedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.highestSeverityThreatDetails.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.highestSeverityThreatDetails.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.highestSeverityThreatDetails.threatName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.scannedItemCount.files\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.scannedItemCount.totalGb\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.scannedItemCount.volumes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.itemCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.shortened\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.filePaths.fileName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.filePaths.filePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.filePaths.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.filePaths.volumeArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.itemCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.uniqueThreatNameCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatsDetectedItemCount.files\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanStartedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.sources\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.triggerFindingId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.eventFirstSeen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.eventLastSeen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.evidence.threatIntelligenceDetails.threatListName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.evidence.threatIntelligenceDetails.threatNames\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.featureName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.node.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.resourceRole\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severitylabel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"srcaddr\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"srcids.instance\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"srcport\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ssl_cipher\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ssl_protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"subnet_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"syslog_message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"syslog_timestamp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_group_arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_port_list\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_processing_time\",\"type\":\"number\",\"esTypes\":[\"half_float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_status_code_list\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tcp_flags\",\"type\":\"number\",\"esTypes\":[\"byte\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"terminatingRuleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"terminatingRuleMatchDetails.conditionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"terminatingRuleMatchDetails.location\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"terminatingRuleMatchDetails.matchedData\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"terminatingRuleType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"time_taken\",\"type\":\"number\",\"esTypes\":[\"half_float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"time_to_first_byte\",\"type\":\"number\",\"esTypes\":[\"half_float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"title\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tls_cipher\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tls_handshake_time\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tls_protocol_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traffic_path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transport\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.account\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check.description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"trustedadvisor.check.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check.metadata\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check_ja.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check_ja.description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"trustedadvisor.check_ja.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check_ja.metadata\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check_ja.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.creation_date\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.refreshable\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.requestid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.categorySpecificSummary.costOptimizing.estimatedMonthlySavings\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.categorySpecificSummary.costOptimizing.estimatedPercentMonthlySavings\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.checkId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResource.isSuppressed\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResource.metadata\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResource.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResource.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResource.resourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResource.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResources.isSuppressed\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResources.metadata\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResources.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResources.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResources.resourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResources.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.resourcesSummary.resourcesFlagged\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.resourcesSummary.resourcesIgnored\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.resourcesSummary.resourcesProcessed\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.resourcesSummary.resourcesSuppressed\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"updatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.query\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.scheme\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"useragent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vpc_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"webaclId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"workspacesClientProductName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"x_edge_detailed_result_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"x_edge_location\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"x_edge_request_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"x_edge_response_result_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"x_edge_result_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"x_host_header\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-*"},"id":"36049c40-7fc8-11ea-945d-8d0868f4a377","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-18T06:56:24.096Z","version":"WzExMzYsMV0="}
+{"attributes":{"fieldFormatMap":"{\"event.duration\":{\"id\":\"duration\",\"params\":{\"parsedUrl\":{\"origin\":\"https://search-aes-siem-pds6mngsb2ouu2n5fesw55xsuq.ap-northeast-1.es.amazonaws.com\",\"pathname\":\"/_dashboards/app/discover\",\"basePath\":\"/_dashboards\"},\"inputFormat\":\"nanoseconds\",\"outputFormat\":\"asHours\",\"outputPrecision\":1,\"showSuffix\":true}},\"network.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"https://search-aes-siem-pds6mngsb2ouu2n5fesw55xsuq.ap-northeast-1.es.amazonaws.com\",\"pathname\":\"/_dashboards/app/visualize\",\"basePath\":\"/_dashboards\"},\"pattern\":\"0,0.[0] b\"}}}","fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_stream\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.client-ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.client-vpn-endpoint-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.common-name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-attempt-failure-reason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-attempt-status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-duration-seconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-end-time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-last-update-time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-log-type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-reset-status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-start-time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.device-ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.device-type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.egress-bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.egress-packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.ingress-bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.ingress-packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.transport-protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.username\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-clientvpn-*"},"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-17T13:07:52.655Z","version":"WzI3NzU5LDFd"}
+{"attributes":{"columns":["user.name","clientvpn.connection-attempt-status","source.ip","source.geo.country_name","clientvpn.connection-start-time","clientvpn.connection-end-time"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"search - ClientVPN","version":1},"id":"af416290-e00c-11ec-9f8e-d90a7585513a","migrationVersion":{"search":"7.9.3"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-08-17T08:34:26.948Z","version":"WzI3MTUzLDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"c_country\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"c_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"c_ip_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"c_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cache_behavior_path_pattern\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_accept\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_accept_encoding\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_cookie\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_header_names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_headers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_headers_count\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_protocol_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_referer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_uri_query\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_uri_stem\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"date_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"distribution_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.request.method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.request.referrer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sc-range-end\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sc-range-start\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sc_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sc_content_len\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sc_content_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sc_status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ssl_cipher\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ssl_protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"time_taken\",\"type\":\"number\",\"esTypes\":[\"half_float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"time_to_first_byte\",\"type\":\"number\",\"esTypes\":[\"half_float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.query\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.scheme\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"x_edge_detailed_result_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"x_edge_location\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"x_edge_request_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"x_edge_response_result_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"x_edge_result_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"x_host_header\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-cloudfront-*"},"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-17T13:48:59.684Z","version":"WzI3NzY3LDFd"}
+{"attributes":{"columns":["distribution_id","url.domain","cs_method","url.path","sc_status","x_edge_result_type","source.ip","source.geo.country_name"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"search - CloudFront","version":1},"id":"8ca57a50-16da-11ed-a61a-0b0a6420bb69","migrationVersion":{"search":"7.9.3"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-08-17T08:34:26.948Z","version":"WzI3MTU1LDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_stream\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.instance.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.cluster_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.command_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.command_type_hex\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.host_time\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.host_time_usec\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.hsm_error\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.hsm_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.hsm_return\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.key_handle\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.local_time\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.local_time_usec\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.log_type_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.mfa_enabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.number_of_users\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.opcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.opcode_hex\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.operation_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.priv_secret_key_handle\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.propagation_delay\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.public_key_handle\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.reboot_counter\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.response\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.sequence_no\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.session_handle\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.target_user_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.target_user_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.target_user_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.target_user_type_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.timestamp\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.timestamp_usec\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.unknown_field_value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.user_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.user_ids\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.user_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.user_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.user_type_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.version_no\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.target.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.target.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.target.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-cloudhsm-*"},"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-17T13:53:35.277Z","version":"WzI3Nzc0LDFd"}
+{"attributes":{"columns":["eventName","event.outcome","related.hosts","cloud.instance.id"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"event.module\",\"params\":{\"query\":\"cloudhsm.amazonaws.com\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.module\":\"cloudhsm.amazonaws.com\"}},\"$state\":{\"store\":\"appState\"}},{\"meta\":{\"alias\":null,\"negate\":true,\"disabled\":false,\"type\":\"phrase\",\"key\":\"eventName\",\"params\":{\"query\":\"DescribeClusters\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"eventName\":\"DescribeClusters\"}},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"search - CloudTrail (CloudHSM)","version":1},"id":"c4423070-c4f0-11ec-ab71-6f054bb9d785","migrationVersion":{"search":"7.9.3"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"search","updated_at":"2022-08-17T08:34:26.948Z","version":"WzI3MTU3LDFd"}
+{"attributes":{"columns":["cloudhsm.cluster_id","user.name","user.id","user.roles","cloudhsm.command_type","cloudhsm.opcode","cloudhsm.hsm_return","cloudhsm.hsm_error"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"search - CloudHSM","version":1},"id":"8a312410-c48a-11ec-ab71-6f054bb9d785","migrationVersion":{"search":"7.9.3"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-08-17T08:34:26.948Z","version":"WzI3MTU4LDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"additionalEventData.AuthenticationMethod\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.CipherSuite\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.LoginTo\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.MFAUsed\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.MfaType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.MobileVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.RedirectTo\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.RenewedBy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.RoleRenewed\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.SSEApplied\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.SignatureVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.SwitchFrom\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.SwitchTo\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.accessPointName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.bucketName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.bytesTransferredIn\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.bytesTransferredOut\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.configRuleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.configRuleInputParameters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.configRuleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.grantId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.lakeFormationPrincipal\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.managedRuleIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.notificationJobType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.providerAction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.versionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.vpcEndpointId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.x-amz-id-2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"awsRegion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.instance.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"errorCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"errorMessage\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"eventCategory\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"eventID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"eventName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"eventSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"eventTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"eventType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"eventVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"insightDetails.eventName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"insightDetails.eventSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"insightDetails.insightContext.attributions.attribute\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"insightDetails.insightContext.attributions.baseline.average\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"insightDetails.insightContext.attributions.baseline.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"insightDetails.insightContext.attributions.insight.average\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"insightDetails.insightContext.attributions.insight.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"insightDetails.insightContext.statistics.baseline.average\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"insightDetails.insightContext.statistics.baselineDuration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"insightDetails.insightContext.statistics.insight.average\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"insightDetails.insightContext.statistics.insightDuration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"insightDetails.insightType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"insightDetails.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"managementEvent\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"readOnly\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"recipientAccountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.AccountScope\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.AssociateClientVpnTargetNetworkRequest.ClientToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.AssociateClientVpnTargetNetworkRequest.ClientVpnEndpointId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.AssociateClientVpnTargetNetworkRequest.SubnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.AssociateIamInstanceProfileRequest.IamInstanceProfile.Arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.AssociateIamInstanceProfileRequest.IamInstanceProfile.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.AssociateIamInstanceProfileRequest.InstanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.AuthCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.AuthorizeClientVpnIngressRequest.AuthorizeAllGroups\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.AuthorizeClientVpnIngressRequest.ClientToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.AuthorizeClientVpnIngressRequest.ClientVpnEndpointId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.AuthorizeClientVpnIngressRequest.TargetNetworkCidr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CodeVerifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CompleteMultipartUpload.Part.ETag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CompleteMultipartUpload.Part.PartNumber\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CompleteMultipartUpload.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Context\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateAccessPointRequest.Bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateAccessPointRequest.PublicAccessBlockConfiguration.BlockPublicAcls\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateAccessPointRequest.PublicAccessBlockConfiguration.BlockPublicPolicy\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateAccessPointRequest.PublicAccessBlockConfiguration.IgnorePublicAcls\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateAccessPointRequest.PublicAccessBlockConfiguration.RestrictPublicBuckets\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateAccessPointRequest.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateBucketConfiguration.LocationConstraint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateBucketConfiguration.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.Authentication.MutualAuthentication.ClientRootCertificateChainArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.Authentication.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.Authentication.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.ClientCidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.ClientConnectOptions.Enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.ClientLoginBannerOptions.Enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.ClientToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.ConnectionLogOptions.Enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.Description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.DnsServers.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.DnsServers.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.SecurityGroupId.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.SecurityGroupId.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.SelfServicePortal\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.ServerCertificateArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.SessionTimeoutHours\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.SplitTunnel\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.TagSpecification.ResourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.TagSpecification.Tag.Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.TagSpecification.Tag.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.TagSpecification.Tag.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.TagSpecification.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.TransportProtocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnEndpointRequest.VpnPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnRouteRequest.ClientToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnRouteRequest.ClientVpnEndpointId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnRouteRequest.DestinationCidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateClientVpnRouteRequest.TargetVpcSubnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.ClientToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.LaunchTemplateConfigs.LaunchTemplateSpecification.LaunchTemplateId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.LaunchTemplateConfigs.LaunchTemplateSpecification.Version\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.AvailabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.InstanceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.Priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.SubnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.LaunchTemplateConfigs.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.OnDemandOptions.AllocationStrategy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.SpotOptions.AllocationStrategy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.TagSpecification.ResourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.TagSpecification.Tag.Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.TagSpecification.Tag.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.TagSpecification.Tag.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.TagSpecification.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.TargetCapacitySpecification.DefaultTargetCapacityType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.TargetCapacitySpecification.OnDemandTargetCapacity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.TargetCapacitySpecification.SpotTargetCapacity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.TargetCapacitySpecification.TotalTargetCapacity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFleetRequest.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFlowLogsRequest.DestinationOptions.FileFormat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFlowLogsRequest.DestinationOptions.HiveCompatiblePartitions\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFlowLogsRequest.DestinationOptions.PerHourPartition\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFlowLogsRequest.LogDestination\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFlowLogsRequest.LogDestinationType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFlowLogsRequest.LogFormat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFlowLogsRequest.MaxAggregationInterval\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFlowLogsRequest.ResourceId.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFlowLogsRequest.ResourceId.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFlowLogsRequest.ResourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFlowLogsRequest.TagSpecification.ResourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFlowLogsRequest.TagSpecification.Tag.Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFlowLogsRequest.TagSpecification.Tag.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFlowLogsRequest.TagSpecification.Tag.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFlowLogsRequest.TagSpecification.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateFlowLogsRequest.TrafficType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateJobRequest.ClientRequestToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateJobRequest.ConfirmationRequired\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateJobRequest.Description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateJobRequest.ManifestGenerator.S3JobManifestGenerator.EnableManifestOutput\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateJobRequest.ManifestGenerator.S3JobManifestGenerator.Filter.EligibleForReplication\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateJobRequest.ManifestGenerator.S3JobManifestGenerator.SourceBucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateJobRequest.Priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateJobRequest.Report.Enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateJobRequest.RoleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateJobRequest.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.TagSpecification.Tag.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.TagSpecification.Tag.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateNatGatewayRequest.AllocationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateNatGatewayRequest.ClientToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateNatGatewayRequest.SubnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateNatGatewayRequest.TagSpecification.ResourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateNatGatewayRequest.TagSpecification.Tag.Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateNatGatewayRequest.TagSpecification.Tag.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateNatGatewayRequest.TagSpecification.Tag.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateNatGatewayRequest.TagSpecification.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateNetworkInterfacePermissionRequest.AwsAccountId\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateNetworkInterfacePermissionRequest.NetworkInterfaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateNetworkInterfacePermissionRequest.Permission\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateSnapshotsRequest.TagSpecification.Tag.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.CreateVpcEndpointRequest.TagSpecification.Tag.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DeleteFlowLogsRequest.FlowLogId.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DeleteFlowLogsRequest.FlowLogId.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeByoipCidrsRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeClientVpnAuthorizationRulesRequest.ClientVpnEndpointId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeClientVpnConnectionsRequest.ClientVpnEndpointId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeClientVpnEndpointsRequest.ClientVpnEndpointId.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeClientVpnEndpointsRequest.ClientVpnEndpointId.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeClientVpnRoutesRequest.ClientVpnEndpointId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeClientVpnTargetNetworksRequest.ClientVpnEndpointId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeEgressOnlyInternetGatewaysRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeFlowLogsRequest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeFlowLogsRequest.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"requestParameters.DescribeFlowLogsRequest\"}}},{\"count\":0,\"name\":\"requestParameters.DescribeHostsRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeIamInstanceProfileAssociationsRequest.Filter.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeIamInstanceProfileAssociationsRequest.Filter.Value.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeIamInstanceProfileAssociationsRequest.Filter.Value.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeIamInstanceProfileAssociationsRequest.Filter.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeInstanceTypeOfferingsRequest.LocationType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeInstanceTypeOfferingsRequest.NextToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeInstanceTypesRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeInstanceTypesRequest.NextToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeIpamPoolsRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeIpv6PoolsRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateVersion.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateVersion.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeLaunchTemplatesRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeManagedPrefixListsRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeNatGatewaysRequest.Filter.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeNatGatewaysRequest.Filter.Value.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeNatGatewaysRequest.Filter.Value.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeNatGatewaysRequest.Filter.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeNatGatewaysRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeNatGatewaysRequest.NatGatewayId.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribePrefixListsRequest.PrefixListId.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribePrefixListsRequest.PrefixListId.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeReplaceRootVolumeTasksRequest.Filter.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeReplaceRootVolumeTasksRequest.Filter.Value.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeReplaceRootVolumeTasksRequest.Filter.Value.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeReplaceRootVolumeTasksRequest.Filter.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeReplaceRootVolumeTasksRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeSecurityGroupRulesRequest.Filter.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeSecurityGroupRulesRequest.Filter.Value.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeSecurityGroupRulesRequest.Filter.Value.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeSecurityGroupRulesRequest.Filter.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeSecurityGroupRulesRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeTransitGatewayAttachmentsRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeTransitGatewayPeeringAttachmentsRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeTransitGatewayRouteTablesRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeTransitGatewayVpcAttachmentsRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeTransitGatewaysRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeVolumesModificationsRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeVpcEndpointServiceConfigurationsRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeVpcEndpointServicesRequest.Filter.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeVpcEndpointServicesRequest.Filter.Value.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeVpcEndpointServicesRequest.Filter.Value.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeVpcEndpointServicesRequest.Filter.tag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.DescribeVpcEndpointsRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Dimension\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.EnvironmentId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ExportClientVpnClientConfigurationRequest.ClientVpnEndpointId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filter.And.Dimensions.Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filter.And.Dimensions.Values\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filter.And.Or.Dimensions.Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filter.And.Or.Dimensions.Values\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filter.Dimensions.Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filter.Dimensions.Values\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filter.Not.Or.Dimensions.Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filter.Not.Or.Dimensions.Values\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filter.Or.Dimensions.Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filter.Or.Dimensions.Values\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.FilterValues\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filters.GeneratorId.Comparison\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filters.GeneratorId.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filters.ProductName.Comparison\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filters.ProductName.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filters.RecordState.Comparison\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filters.RecordState.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filters.UpdatedAt.DateRange.Unit\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filters.UpdatedAt.DateRange.Value\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filters.WorkflowStatus.Comparison\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Filters.WorkflowStatus.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.GetManagedPrefixListEntriesRequest.MaxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.GetManagedPrefixListEntriesRequest.PrefixListId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Granularity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.GroupBy.Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.GroupBy.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.InsightArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.InsightArns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.KeyBase\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.LookbackPeriodInDays\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.MaxResults\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Metric\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Metrics\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.NotificationConfiguration.QueueConfiguration.Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.OnlyAssociated\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.PaymentOption\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.PredictionIntervalLevel\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.PublicAccessBlockConfiguration.BlockPublicAcls\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.PublicAccessBlockConfiguration.BlockPublicPolicy\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.PublicAccessBlockConfiguration.IgnorePublicAcls\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.PublicAccessBlockConfiguration.RestrictPublicBuckets\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.PublicAccessBlockConfiguration.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.PutAccessPointPolicyRequest.Policy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.PutAccessPointPolicyRequest.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.RedirectUri\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.RefreshToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ReplicationConfiguration.Role\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ReplicationConfiguration.Rule.DeleteMarkerReplication.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ReplicationConfiguration.Rule.Destination.AccessControlTranslation.Owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ReplicationConfiguration.Rule.Destination.Account\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ReplicationConfiguration.Rule.Destination.Bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ReplicationConfiguration.Rule.Filter\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ReplicationConfiguration.Rule.ID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ReplicationConfiguration.Rule.Priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ReplicationConfiguration.Rule.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ReplicationConfiguration.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ResourceArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.SavingsPlansType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ServerSideEncryptionConfiguration.Rule.ApplyServerSideEncryptionByDefault.SSEAlgorithm\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ServerSideEncryptionConfiguration.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ServiceSpecification.EC2Specification.OfferingClass\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.SortBy.Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.SortBy.SortOrder\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.SortCriteria.Field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.SortCriteria.SortOrder\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Tagging.TagSet.Tag.Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.Tagging.TagSet.Tag.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.TermInYears\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.TimePeriod.End\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.TimePeriod.Start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.VersioningConfiguration.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.VersioningConfiguration.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.X-Amz-Algorithm\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.X-Amz-Date\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.X-Amz-Expires\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.X-Amz-SignedHeaders\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.aRN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.aWSServiceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.acceptedMediaTypes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.accessPolicies\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.accountAttributeNameSet.items.attributeName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.accountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.accountIds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.actionsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.advancedOptions.override_main_response_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.agentName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.agentStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.agentVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.aggregateField\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.alarmActions\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.alarmName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.alarmNames\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.alarmTypes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.aliasName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.allRegions\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.allocationIdsSet.items.allocationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.amazonProvidedIpv6CidrBlock\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.analyzerArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.analyzerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.anomalyDetectorTypes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.architectures\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.assessmentRunName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.assessmentTemplateArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.associationFilterList.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.associationFilterList.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.associationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.associationStatus.additionalInfo\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.associationStatus.date\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.associationStatus.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.associationStatus.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.assumeRolePolicyDocument\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.attribute\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.attribute.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"requestParameters.attribute\"}}},{\"count\":0,\"name\":\"requestParameters.attributeName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.attributeValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.attributes.KmsDataKeyReusePeriodSeconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.attributes.KmsMasterKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.attributes.MessageRetentionPeriod\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.attributes.RedrivePolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.attributes.VisibilityTimeout\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.authParameters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.authParameters.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"requestParameters.authParameters\"}}},{\"count\":0,\"name\":\"requestParameters.autoScalingGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.automationExecutionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.availabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.blockDeviceMapping.items.deviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.blockDeviceMapping.items.ebs.deleteOnTermination\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.blockDeviceMapping.items.ebs.encrypted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.blockDeviceMapping.items.ebs.iops\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.blockDeviceMapping.items.ebs.kmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.blockDeviceMapping.items.ebs.snapshotId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.blockDeviceMapping.items.ebs.throughput\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.blockDeviceMapping.items.ebs.volumeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.blockDeviceMapping.items.ebs.volumeType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.bucketName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.bucketPolicy.Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.bucketPolicy.Statement\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.bucketPolicy.Statement.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"requestParameters.bucketPolicy.Statement\"}}},{\"count\":0,\"name\":\"requestParameters.bucketPolicy.Version\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.bypassPolicyLockoutSafetyCheck\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.capabilities\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificate.address\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificate.bigEndian\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificate.capacity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificate.hb\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificate.isReadOnly\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificate.limit\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificate.mark\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificate.nativeByteOrder\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificate.offset\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificate.position\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificateArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificateChain.address\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificateChain.bigEndian\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificateChain.capacity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificateChain.hb\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificateChain.isReadOnly\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificateChain.limit\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificateChain.mark\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificateChain.nativeByteOrder\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificateChain.offset\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificateChain.position\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.certificateStatuses\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.changeSetName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.checkId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.checkIds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.cidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.clientToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.cluster\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.clusterConfig.dedicatedMasterType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.clusterConfig.instanceCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.clusterConfig.instanceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.clusterConfig.zoneAwarenessConfig.availabilityZoneCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.clusterStates\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.clusters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.commandId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.comparisonOperator\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.complianceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.complianceTypes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.computerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.configRule.configRuleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.configRule.configRuleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.configRule.configRuleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.configRule.configRuleState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.configRule.createdBy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.configRule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.configRule.inputParameters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.configRule.scope.complianceResourceTypes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.configRule.source.owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.configRule.source.sourceIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.configRuleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.configRuleNames\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.configuration.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"requestParameters.configurationARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.configurationAggregatorName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.configurationRecorderNames\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.conformancePackName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.conformancePackNames\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.connectionArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.constraints.encryptionContextEquals.aws:acm:arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.constraints.encryptionContextEquals.clientvpn:ap-east-1:arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.constraints.encryptionContextSubset.aws:ebs:id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.constraints.encryptionContextSubset.aws:pi:service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.constraints.encryptionContextSubset.aws:rds:db-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.constraints.encryptionContextSubset.domainARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.constraints.encryptionContextSubset.service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.containerOverrides.environment.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"requestParameters.content\"}}},{\"count\":0,\"name\":\"requestParameters.continuation-token\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.currentDeliveryStreamVersionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.customerMasterKeySpec\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.dBClusterSnapshotIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.dBSnapshotIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.dashboardBody\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.dashboardName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.dashboardNames\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.databaseName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.datapointsToAlarm\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.deadLetterConfig.targetArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.definition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.delimiter\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.deliveryStreamName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.deliveryStreamType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.descending\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.destinationAAD\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.destinationArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.destinationCidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.destinationEncryptionAlgorithm\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.destinationEncryptionContext.aws:acm:arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.destinationEncryptionContext.aws:elasticloadbalancing:arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.destinationEncryptionContext.clientvpn:ap-east-1:arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.destinationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.destinationKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.detectorId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.disableApiStop\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.disableApiTermination\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.aliases.items\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.aliases.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.cacheBehaviors.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.callerReference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.comment\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.customErrorResponses.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.allowedMethods.cachedMethods.items\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.allowedMethods.cachedMethods.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.allowedMethods.items\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.allowedMethods.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.compress\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.defaultTTL\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.forwardedValues.cookies.forward\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.forwardedValues.headers.items\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.forwardedValues.headers.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.forwardedValues.queryString\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.forwardedValues.queryStringCacheKeys.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.functionAssociations.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.lambdaFunctionAssociations.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.maxTTL\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.minTTL\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.realtimeLogConfigArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.smoothStreaming\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.targetOriginId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.trustedKeyGroups.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.trustedKeyGroups.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.trustedSigners.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.trustedSigners.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.defaultCacheBehavior.viewerProtocolPolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.httpVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.isIPV6Enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.logging.bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.logging.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.logging.includeCookies\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.logging.prefix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.originGroups.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.origins.items.connectionAttempts\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.origins.items.connectionTimeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.origins.items.customHeaders.items.headerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.origins.items.customHeaders.items.headerValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.origins.items.customHeaders.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.origins.items.customOriginConfig.hTTPPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.origins.items.customOriginConfig.hTTPSPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.origins.items.customOriginConfig.originKeepaliveTimeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.origins.items.customOriginConfig.originProtocolPolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.origins.items.customOriginConfig.originReadTimeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.origins.items.customOriginConfig.originSslProtocols.items\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.origins.items.customOriginConfig.originSslProtocols.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.origins.items.domainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.origins.items.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.origins.items.originAccessControlId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.origins.items.originPath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.origins.items.originShield.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.origins.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.priceClass\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.restrictions.geoRestriction.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.restrictions.geoRestriction.restrictionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.staging\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.viewerCertificate.aCMCertificateArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.viewerCertificate.certificate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.viewerCertificate.certificateSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.viewerCertificate.cloudFrontDefaultCertificate\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.viewerCertificate.minimumProtocolVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.viewerCertificate.sSLSupportMethod\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionConfig.webACLId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.distributionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.documentName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.documentVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.domainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.domainNames\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.dryRun\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.durationSeconds\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ebsOptimized\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ebsOptimized.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"requestParameters.ebsOptimized\"}}},{\"count\":0,\"name\":\"requestParameters.enableDnsHostnames.value\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.encoding-type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.encryptionAlgorithm\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.encryptionContext.aws-crypto-public-key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.encryptionContext.aws:acm:arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.encryptionContext.aws:cloudfront:arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.encryptionContext.aws:cloudtrail:arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.encryptionContext.aws:ebs:id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.encryptionContext.aws:elasticloadbalancing:arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.encryptionContext.aws:lambda:FunctionArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.encryptionContext.aws:pi:service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.encryptionContext.aws:rds:db-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.encryptionContext.aws:rds:dbc-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.encryptionContext.aws:s3:arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.encryptionContext.aws:sqs:arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.encryptionContext.clientvpn:ap-east-1:arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.encryptionContext.clientvpn:ap-northeast-1:arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.encryptionContext.domainARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.encryptionContext.service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.endPoints.kinesisStreamConfig.roleARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.endPoints.kinesisStreamConfig.streamARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.endPoints.streamType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.endTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.engineType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.engineVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.environmentVariablesOverride.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.environmentVariablesOverride.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.environmentVariablesOverride.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ephemeralStorage.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.evaluationPeriods\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.evaluations.annotation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.evaluations.complianceResourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.evaluations.complianceResourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.evaluations.complianceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.evaluations.orderingTimestamp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.eventBusName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.eventCategory\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.eventSourceArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.excludeAutoscalingAlarms\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.excludeManagedAlarms\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.executionArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.executionResult.executionDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.executionResult.executionSummary\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.executionResult.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.executionSummary.executionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.executionSummary.executionTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.executionSummary.executionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.expression\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationConfiguration.bucketARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationConfiguration.bufferingHints.intervalInSeconds\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationConfiguration.bufferingHints.sizeInMBs\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationConfiguration.cloudWatchLoggingOptions.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationConfiguration.cloudWatchLoggingOptions.logGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationConfiguration.cloudWatchLoggingOptions.logStreamName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationConfiguration.compressionFormat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationConfiguration.dataFormatConversionConfiguration.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationConfiguration.encryptionConfiguration.noEncryptionConfig\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationConfiguration.prefix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationConfiguration.processingConfiguration.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationConfiguration.roleARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationConfiguration.s3BackupMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationUpdate.bucketARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationUpdate.bufferingHints.intervalInSeconds\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationUpdate.bufferingHints.sizeInMBs\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationUpdate.cloudWatchLoggingOptions.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationUpdate.cloudWatchLoggingOptions.logGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationUpdate.cloudWatchLoggingOptions.logStreamName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationUpdate.compressionFormat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationUpdate.dataFormatConversionConfiguration.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationUpdate.encryptionConfiguration.noEncryptionConfig\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationUpdate.prefix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationUpdate.processingConfiguration.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationUpdate.roleARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.extendedS3DestinationUpdate.s3BackupMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.externalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.fetch-owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.fields\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.fileSystemId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.filter\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.filter.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"requestParameters.filter\"}}},{\"count\":0,\"name\":\"requestParameters.filterBy.comparator\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.filterBy.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.filterBy.values\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.filterSet.items.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.filterSet.items.valueSet.items.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.filters.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.filters.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.filters.values\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.findingCriteria.criterion.archived.eq\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.findingCriteria.criterion.category.eq\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.findingCriteria.criterion.service.action.networkConnectionAction.localPortDetails.port.eq\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.findingCriteria.criterion.service.action.networkConnectionAction.remotePortDetails.port.eq\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.findingCriteria.criterion.service.archived.eq\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.findingCriteria.criterion.updatedAt.gte\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.findingCriteria.criterion.updatedAt.lt\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.findingIds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.findingStatisticTypes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.firewallArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.firewallName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.firewallPolicyArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.forAccount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.force\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.fullyQualifiedArn.arnPrefix.account\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.fullyQualifiedArn.arnPrefix.partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.fullyQualifiedArn.arnPrefix.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.fullyQualifiedArn.relativeId.functionName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.functionArns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.functionName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.functionVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.gatewayId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.gitCloneDepthOverride\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.granteePrincipal\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.granularity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.groupBy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.groupDescription\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.groupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.groupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.groupSet.items.groupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.handler\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.hostedZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.iPAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.iamInstanceProfile\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.iamInstanceProfile.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"requestParameters.iamInstanceProfile\"}}},{\"count\":0,\"name\":\"requestParameters.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.identifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ids\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ifMatch\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ignored\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.imageId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.imageIds.imageDigest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.imageIds.imageTag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.imagesSet.items.imageId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.include\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.includeAllInstances\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.includeBlacklistedFeatures\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.includeCommunications\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.includeDeletedResources\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.includeDeprecatedFeaturesAccess\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.includeDeprecatedRuntimeDetails\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.includeExecutionData\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.includePreviewFeatures\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.includePublic\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.includePublicKey\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.includeResolvedCases\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.includeShadowTrails\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.includeShared\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.includeUnreservedConcurrentExecutionsMinimum\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.includes.hasDnsFqdn\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.includes.keyTypes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.input\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.instanceArns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.instanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.instanceIds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.instanceMarketOptions.marketType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.instanceMarketOptions.spotOptions.spotInstanceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.instanceProfileName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.instanceTenancy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.instanceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.instanceType.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"requestParameters.instanceType\"}}},{\"count\":0,\"name\":\"requestParameters.instancesSet.item.instanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.instancesSet.items.imageId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.instancesSet.items.instanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.instancesSet.items.keyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.instancesSet.items.maxCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.instancesSet.items.minCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.interactive\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.internetGatewayId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.internetGatewayIdSet.items.internetGatewayId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ipPermissions.items.fromPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ipPermissions.items.ipProtocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ipPermissions.items.ipRanges.items.cidrIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ipPermissions.items.toPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ipv6AddressCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.itemContentHash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.items.captureTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.items.contentHash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.items.details.DetailedText\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.items.details.DocumentName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.items.details.DocumentVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.items.details.PatchBaselineId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.items.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.items.schemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.items.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.items.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.items.title\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.items.typeName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.itemsPerPage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.jobId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.jobStatuses\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.key-marker\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.keyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.keyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.keySpec\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.keyUsage\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.kinesisStreamSourceConfiguration.kinesisStreamARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.kinesisStreamSourceConfiguration.roleARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.language\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.laterTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.launchTemplate.launchTemplateId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.launchTemplate.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.layerDigest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.layerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.layers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.limit\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.list-type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.listenerArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.listenerArns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.loadBalancerArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.loadBalancerArns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.loadBalancerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.loadBalancerNames\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.locale\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.logGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.logGroupNamePrefix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.logGroupNames\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.logStreamName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.logStreamNamePrefix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.loggingConfiguration.destinations.cloudWatchLogsLogGroup.logGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.loggingConfiguration.includeExecutionData\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.loggingConfiguration.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.lookupAttributes.attributeKey\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.lookupAttributes.attributeValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.caller\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.end\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.filter.map.expressions.myArrayList.map.expressions.myArrayList.map.comparison.map.attribute\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.filter.map.expressions.myArrayList.map.expressions.myArrayList.map.comparison.map.matchOption\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.filter.map.expressions.myArrayList.map.expressions.myArrayList.map.comparison.map.values.myArrayList\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.filter.map.expressions.myArrayList.map.expressions.myArrayList.map.expressions.myArrayList.map.comparison.map.attribute\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.filter.map.expressions.myArrayList.map.expressions.myArrayList.map.expressions.myArrayList.map.comparison.map.matchOption\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.filter.map.expressions.myArrayList.map.expressions.myArrayList.map.expressions.myArrayList.map.comparison.map.values.myArrayList\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.filter.map.expressions.myArrayList.map.expressions.myArrayList.map.logicalOperator\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.filter.map.expressions.myArrayList.map.logicalOperator\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.filter.map.logicalOperator\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.groupBy.myArrayList\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.limit\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.locale\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.month\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.payload.myArrayList\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.sort.map.order\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.start\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.timePeriod.map.endBillingPeriod.map.month\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.timePeriod.map.endBillingPeriod.map.year\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.timePeriod.map.startBillingPeriod.map.month\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.timePeriod.map.startBillingPeriod.map.year\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.timestamp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.timestampInMilliseconds\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.usageType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.map.year\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.marker\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.masterRegion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.max-keys\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.maxConcurrency\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.maxErrors\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.maxItems\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.maxRecords\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.maxResults\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.memorySize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.metricName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.metrics\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.monitoring.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.multiRegion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.namePrefix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.natGatewayId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.networkInterfaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.networkInterfaceIdSet.items.networkInterfaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.networkInterfaceSet.items.associatePublicIpAddress\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.networkInterfaceSet.items.deviceIndex\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.networkInterfaceSet.items.groupSet.items.groupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.nextToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.notificationFilter.domainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.numberOfBytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.onFailure\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.onlyAssociated\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.onlyAttached\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.operations\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.orderBy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.origin\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.overrides.containerOverrides.environment.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ownersSet.items.owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.packageType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.pageSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.parameters.AutomationAssumeRole\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.parameters.ForceReplace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.parameters.InstanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.parameters.IsPolicyAttachAllowed\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.parameters.RoleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.parameters.archiveType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.parameters.branchName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.parameters.callbackToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.parameters.commitId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.parameters.destinationBucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.parameters.destinationBucketKey\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.parameters.fullRepositoryId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.parameters.maxBytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.parameters.normalizeArchive\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.parameters.parameterKey\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.parameters.sSEAlgorithm\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.parameters.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.parentsOfAlarmName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partNumber\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInput.lastAccessTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInput.storageDescriptor.columns.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInput.storageDescriptor.columns.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInput.storageDescriptor.compressed\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInput.storageDescriptor.inputFormat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInput.storageDescriptor.location\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInput.storageDescriptor.numberOfBuckets\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInput.storageDescriptor.outputFormat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInput.storageDescriptor.parameters.averageRecordSize\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInput.storageDescriptor.parameters.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInput.storageDescriptor.parameters.compressionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInput.storageDescriptor.parameters.objectCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInput.storageDescriptor.parameters.recordCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInput.storageDescriptor.parameters.sizeKey\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInput.storageDescriptor.parameters.typeOfData\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInput.storageDescriptor.serdeInfo.parameters.serialization.format\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInput.storageDescriptor.serdeInfo.serializationLibrary\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInput.storageDescriptor.storedAsSubDirectories\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInput.values\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionInputList\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"requestParameters.partitionValueList\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.partitionsToGet.values\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.passwordResetRequired\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.pathPrefix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.pendingWindowInDays\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.performCheckOnly\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.period\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.permissionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.physicalResourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.platformName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.platformType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.platformVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.policy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.policyArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.policyDocument\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.policyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.policyType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.prefix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.principal\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.principal.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"requestParameters.principal\"}}},{\"count\":0,\"name\":\"requestParameters.principalArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.privateDnsNameOptions.enableResourceNameDnsAAAARecord\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.privateDnsNameOptions.enableResourceNameDnsARecord\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.privateDnsNameOptions.hostnameType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.privateKey\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.projectName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.publicIpsSet.items.publicIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.publicKeyMaterial\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.publish\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.qualifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.queryId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.queryString\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.queueUrl\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.recommendationPreferences.cpuVendorArchitectures\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.recordPointer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.reference.Commit\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.reference.FullRepositoryId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.referenceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.registryId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.registryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.repositoryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.repositoryNames\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.requestContext.awsAccountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.resolverRuleAssociationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.resolverRuleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.resource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.resourceARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.resourceArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.resourceArns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.resourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.resourceIdList\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.resourceKeys.resourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.resourceKeys.resourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.resourceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.resourceOwner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.resourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.resourceTypeFilters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.resourcesPerPage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.resourcesSet.items.resourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.response-content-disposition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.result\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.result.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"requestParameters.result\"}}},{\"count\":0,\"name\":\"requestParameters.resultToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.retiringPrincipal\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.reverseOrder\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.role\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.roleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.roleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.roleSessionName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.routeTableId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.routeTableIdSet.items.routeTableId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.rule\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ruleGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.ruleGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.runtime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.s3Bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.s3Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.s3ObjectVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.samplingRate\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.scheduleExpression\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.scope\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.searchExpression.subExpressions.subExpressions.filters.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.secretId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.securityGroupIdSet.items.groupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.serviceNamespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.serviceNamespaces\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.services\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.setAsDefault\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.shardCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.sharedUsersSet.items.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.showSubscriptionDestinations\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.size\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.snapshotId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.snapshotSet.items.snapshotId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.sort\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.sort.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"requestParameters.sort\"}}},{\"count\":0,\"name\":\"requestParameters.sortBy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.sortBy.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"requestParameters.sortBy\"}}},{\"count\":0,\"name\":\"requestParameters.sortCriteria.attributeName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.sortCriteria.orderBy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.sortOrder\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.source.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"requestParameters.source\"}}},{\"count\":0,\"name\":\"requestParameters.sourceAAD\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.sourceArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.sourceEncryptionAlgorithm\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.sourceEncryptionContext.aws:acm:arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.sourceVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.stackName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.stackStatusFilter\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.startDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.startTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.stateMachineArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.statementId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.statistic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.status.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"requestParameters.status\"}}},{\"count\":0,\"name\":\"requestParameters.streamARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.streamCreationTimestamp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.streamModeDetails.streamMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.streamName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.subnetSet.items.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.subnets\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.subnets.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"requestParameters.subnets\"}}},{\"count\":0,\"name\":\"requestParameters.tableInput.isRowFilteringEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.lastAccessTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.parameters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.parameters.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"requestParameters.tableInput.parameters\"}}},{\"count\":0,\"name\":\"requestParameters.tableInput.partitionKeys.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.partitionKeys.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.retention\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.columns.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.columns.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.compressed\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.inputFormat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.location\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.numberOfBuckets\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.outputFormat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.parameters.CrawlerSchemaDeserializerVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.parameters.CrawlerSchemaSerializerVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.parameters.UPDATED_BY_CRAWLER\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.parameters.averageRecordSize\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.parameters.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.parameters.compressionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.parameters.exclusions\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.parameters.objectCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.parameters.recordCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.parameters.sizeKey\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.parameters.typeOfData\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.serdeInfo.parameters.serialization.format\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.serdeInfo.serializationLibrary\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.storageDescriptor.storedAsSubDirectories\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableInput.tableType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tableName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tagSet.items.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tagSet.items.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tagSpecificationSet.items.resourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tagSpecificationSet.items.tags.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tagSpecificationSet.items.tags.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tags.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tagsPerPage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.target\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.target.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"requestParameters.target\"}}},{\"count\":0,\"name\":\"requestParameters.targetGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.targetGroupArns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.targetKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.targetParameterName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.targetVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.targets.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.targets.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.targets.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.targets.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.targets.values\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.taskDefinition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.taskName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.template\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.templateBody\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.templateURL\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.testMode\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.threshold\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.timeRange\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.timeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.timeoutInMinutesOverride\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.timeoutSeconds\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.title\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.topicArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.tracingConfig.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.trailName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.treatMissingData\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.typeName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.uploadId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.uploadType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.usageCriteria.accountIds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.usageCriteria.dataSources\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.usageStatisticsType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.usePreviousTemplate\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.userName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.validatePolicyResourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.version-id-marker\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.versionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.versionNumber\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.volumeId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.volumeSet.items.volumeId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.vpc\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.vpcSet.items.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.workGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.workspaceIds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.x-amz-acl\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.x-amz-server-side-encryption\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.x-amz-server-side-encryption-aws-kms-key-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.x-amz-server-side-encryption-context\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.x-amz-storage-class\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"requestParameters.x-amz-version-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.ARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.ARNPrefix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.accountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.AssociateClientVpnTargetNetworkResponse.associationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.AssociateClientVpnTargetNetworkResponse.requestId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.AssociateClientVpnTargetNetworkResponse.status.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.AssociateClientVpnTargetNetworkResponse.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.associationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.AssociateIamInstanceProfileResponse.requestId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.AssociateIamInstanceProfileResponse.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.AuthorizeClientVpnIngressResponse.requestId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.AuthorizeClientVpnIngressResponse.status.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.AuthorizeClientVpnIngressResponse.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CheckMfa\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.ConsoleLogin\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateClientVpnEndpointResponse.clientVpnEndpointId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateClientVpnEndpointResponse.dnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateClientVpnEndpointResponse.requestId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateClientVpnEndpointResponse.status.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateClientVpnEndpointResponse.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateClientVpnRouteResponse.requestId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateClientVpnRouteResponse.status.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateClientVpnRouteResponse.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateFleetResponse.fleetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.launchTemplateSpecification.launchTemplateId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.launchTemplateSpecification.version\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.overrides.availabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.overrides.instanceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.overrides.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.overrides.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateFleetResponse.fleetInstanceSet.item.lifecycle\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateFleetResponse.requestId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateFleetResponse.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateFlowLogsResponse.clientToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateFlowLogsResponse.flowLogIdSet.item\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateFlowLogsResponse.requestId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateFlowLogsResponse.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateData.tagSpecificationSet.item.tagSet.item.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateNatGatewayResponse.clientToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateNatGatewayResponse.natGateway.connectivityType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateNatGatewayResponse.natGateway.createTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateNatGatewayResponse.natGateway.natGatewayAddressSet.item.allocationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateNatGatewayResponse.natGateway.natGatewayId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateNatGatewayResponse.natGateway.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateNatGatewayResponse.natGateway.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateNatGatewayResponse.natGateway.tagSet.item.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateNatGatewayResponse.natGateway.tagSet.item.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateNatGatewayResponse.natGateway.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateNatGatewayResponse.requestId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateNatGatewayResponse.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfacePermissionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.permission\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.permissionState.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateNetworkInterfacePermissionResponse.requestId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateNetworkInterfacePermissionResponse.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateSnapshotsResponse.snapshotSet.item.tagSet.item.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.CreateVpcEndpointResponse.vpcEndpoint.tagSet.item.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.DeleteFlowLogsResponse.requestId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.DeleteFlowLogsResponse.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.EnvironmentId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.ExportClientVpnClientConfigurationResponse.clientConfiguration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.ExportClientVpnClientConfigurationResponse.requestId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.ExportClientVpnClientConfigurationResponse.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.RenewRole\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.SessionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.StartScreenMessages.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.StartScreenMessages.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.StartScreenMessages.link.text\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.StartScreenMessages.link.url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.StartScreenMessages.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.StreamUrl\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.SwitchRole\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.TokenValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements._return\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.advancedOptions.override_main_response_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.advancedOptions.rest.action.multi.allow_explicit_index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.allocationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.approximateNumberOfMessagesMoved\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.architectures\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.associationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.associationState.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.assumedRoleUser.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.assumedRoleUser.assumedRoleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.automationExecutionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.availabilityZones\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.artifacts.encryptionDisabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.artifacts.location\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.artifacts.overrideArtifactName\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.buildComplete\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.buildNumber\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.buildStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.cache.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.currentPhase\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.encryptionKey\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.endTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.environment.computeType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.environment.environmentVariables.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.environment.environmentVariables.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.environment.environmentVariables.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.environment.image\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.environment.imagePullCredentialsType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.environment.privilegedMode\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.environment.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.initiator\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.logs.cloudWatchLogs.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.logs.cloudWatchLogsArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.logs.deepLink\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.logs.groupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.logs.s3Logs.encryptionDisabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.logs.s3Logs.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.logs.streamName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.phases.contexts.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.phases.contexts.statusCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.phases.durationInSeconds\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.phases.endTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.phases.phaseStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.phases.phaseType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.phases.startTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.projectName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.queuedTimeoutInMinutes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.resolvedSourceVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.serviceRole\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.source.buildspec\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.source.gitCloneDepth\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.source.gitSubmodulesConfig.fetchSubmodules\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.source.insecureSsl\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.source.location\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.source.reportBuildStatus\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.source.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.sourceVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.startTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.build.timeoutInMinutes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.certificateArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.codeSha256\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.codeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.cloudWatchOutputConfig.cloudWatchOutputEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.commandId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.completedCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.deliveryTimedOutCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.documentName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.documentVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.errorCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.expiresAfter\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.interactive\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.maxConcurrency\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.maxErrors\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.outputS3Region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.parameters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.requestedDateTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.statusDetails\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.targetCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.targets.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.targets.values\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.command.timeoutSeconds\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.conformancePackArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.createTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.createdDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.credentials.accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.credentials.expiration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.credentials.sessionToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.dBClusterSnapshotAttributes.attributeName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.dBClusterSnapshotIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.dBSnapshotAttributes.attributeName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.dBSnapshotIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.dBSubnetGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.dBSubnetGroup.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"responseElements.dBSubnetGroup\"}}},{\"count\":0,\"name\":\"responseElements.dashboardEntries.dashboardArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.dashboardEntries.dashboardName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.dashboardEntries.lastModified\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.dashboardEntries.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.data\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.deadLetterConfig.targetArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.deletionDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.deliveryStreamARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"responseElements.description\"}}},{\"count\":0,\"name\":\"responseElements.destinationArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.aRN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.activeTrustedKeyGroups.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.activeTrustedKeyGroups.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.activeTrustedSigners.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.activeTrustedSigners.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.aliasICPRecordals.cNAME\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.aliasICPRecordals.iCPRecordalStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.aliases.items\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.aliases.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.cacheBehaviors.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.callerReference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.comment\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.customErrorResponses.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.allowedMethods.cachedMethods.items\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.allowedMethods.cachedMethods.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.allowedMethods.items\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.allowedMethods.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.compress\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.defaultTTL\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.forwardedValues.cookies.forward\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.forwardedValues.headers.items\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.forwardedValues.headers.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.forwardedValues.queryString\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.forwardedValues.queryStringCacheKeys.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.functionAssociations.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.lambdaFunctionAssociations.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.maxTTL\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.minTTL\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.realtimeLogConfigArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.smoothStreaming\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.targetOriginId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.trustedKeyGroups.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.trustedKeyGroups.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.trustedSigners.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.trustedSigners.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.defaultCacheBehavior.viewerProtocolPolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.httpVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.isIPV6Enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.logging.bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.logging.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.logging.includeCookies\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.logging.prefix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.originGroups.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.origins.items.connectionAttempts\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.origins.items.connectionTimeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.origins.items.customHeaders.items.headerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.origins.items.customHeaders.items.headerValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.origins.items.customHeaders.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.origins.items.customOriginConfig.hTTPPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.origins.items.customOriginConfig.hTTPSPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.origins.items.customOriginConfig.originKeepaliveTimeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.origins.items.customOriginConfig.originProtocolPolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.origins.items.customOriginConfig.originReadTimeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.origins.items.customOriginConfig.originSslProtocols.items\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.origins.items.customOriginConfig.originSslProtocols.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.origins.items.domainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.origins.items.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.origins.items.originAccessControlId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.origins.items.originPath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.origins.items.originShield.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.origins.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.priceClass\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.restrictions.geoRestriction.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.restrictions.geoRestriction.restrictionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.staging\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.viewerCertificate.aCMCertificateArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.viewerCertificate.certificate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.viewerCertificate.certificateSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.viewerCertificate.cloudFrontDefaultCertificate\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.viewerCertificate.minimumProtocolVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.viewerCertificate.sSLSupportMethod\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.distributionConfig.webACLId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.domainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.inProgressInvalidationBatches\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.lastModifiedTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.distribution.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.accessPolicies.options\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.accessPolicies.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.accessPolicies.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.accessPolicies.status.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.accessPolicies.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.accessPolicies.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.advancedOptions.options.override_main_response_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.advancedOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.advancedOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.advancedOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.advancedOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.advancedOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.advancedSecurityOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.advancedSecurityOptions.options.internalUserDatabaseEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.advancedSecurityOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.advancedSecurityOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.advancedSecurityOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.advancedSecurityOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.advancedSecurityOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.autoTuneOptions.options.desiredState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.autoTuneOptions.options.maintenanceSchedules.cronExpressionForRecurrence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.autoTuneOptions.options.maintenanceSchedules.duration.unit\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.autoTuneOptions.options.maintenanceSchedules.duration.value\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.autoTuneOptions.options.maintenanceSchedules.startAt\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.autoTuneOptions.options.rollbackOnDisable\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.autoTuneOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.autoTuneOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.autoTuneOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.autoTuneOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.autoTuneOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.changeProgressDetails.changeId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.clusterConfig.options.coldStorageOptions.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.clusterConfig.options.dedicatedMasterCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.clusterConfig.options.dedicatedMasterEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.clusterConfig.options.dedicatedMasterType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.clusterConfig.options.instanceCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.clusterConfig.options.instanceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.clusterConfig.options.warmCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.clusterConfig.options.warmEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.clusterConfig.options.warmStorage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.clusterConfig.options.warmType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.clusterConfig.options.zoneAwarenessConfig.availabilityZoneCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.clusterConfig.options.zoneAwarenessEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.clusterConfig.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.clusterConfig.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.clusterConfig.status.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.clusterConfig.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.clusterConfig.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.cognitoOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.cognitoOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.cognitoOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.cognitoOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.cognitoOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.cognitoOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.domainEndpointOptions.options.customEndpointEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.domainEndpointOptions.options.enforceHTTPS\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.domainEndpointOptions.options.tLSSecurityPolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.domainEndpointOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.domainEndpointOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.domainEndpointOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.domainEndpointOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.domainEndpointOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.eBSOptions.options.eBSEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.eBSOptions.options.iops\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.eBSOptions.options.throughput\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.eBSOptions.options.volumeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.eBSOptions.options.volumeType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.eBSOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.eBSOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.eBSOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.eBSOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.eBSOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.encryptionAtRestOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.encryptionAtRestOptions.options.kmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.encryptionAtRestOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.encryptionAtRestOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.encryptionAtRestOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.encryptionAtRestOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.encryptionAtRestOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.engineVersion.options\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.engineVersion.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.engineVersion.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.engineVersion.status.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.engineVersion.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.engineVersion.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.logPublishingOptions.options.AUDIT_LOGS.cloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.logPublishingOptions.options.AUDIT_LOGS.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.logPublishingOptions.options.ES_APPLICATION_LOGS.cloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.logPublishingOptions.options.ES_APPLICATION_LOGS.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.logPublishingOptions.options.INDEX_SLOW_LOGS.cloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.logPublishingOptions.options.INDEX_SLOW_LOGS.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.logPublishingOptions.options.SEARCH_SLOW_LOGS.cloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.logPublishingOptions.options.SEARCH_SLOW_LOGS.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.logPublishingOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.logPublishingOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.logPublishingOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.logPublishingOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.logPublishingOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.nodeToNodeEncryptionOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.nodeToNodeEncryptionOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.nodeToNodeEncryptionOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.nodeToNodeEncryptionOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.nodeToNodeEncryptionOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.nodeToNodeEncryptionOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.snapshotOptions.options.automatedSnapshotStartHour\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.snapshotOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.snapshotOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.snapshotOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.snapshotOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.snapshotOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.vPCOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.vPCOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.vPCOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.vPCOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainConfig.vPCOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.domainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.eTag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.encrypted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.endpoint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.endpoint.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"responseElements.endpoint\"}}},{\"count\":0,\"name\":\"responseElements.ephemeralStorage.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.errors.partitionValues\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.executionArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.failedEntryCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.functionArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.functionName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.grantId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.groupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.handler\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.imageId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.amiLaunchIndex\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.architecture\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.capacityReservationSpecification.capacityReservationPreference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.clientToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.cpuOptions.coreCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.cpuOptions.threadsPerCore\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.currentState.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.currentState.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.ebsOptimized\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.enaSupport\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.enclaveOptions.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.groupSet.items.groupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.groupSet.items.groupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.hypervisor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.iamInstanceProfile.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.iamInstanceProfile.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.imageId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.instanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.instanceLifecycle\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.instanceState.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.instanceState.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.instanceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.keyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.launchTime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.maintenanceOptions.autoRecovery\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.metadataOptions.httpEndpoint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.metadataOptions.httpProtocolIpv4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.metadataOptions.httpProtocolIpv6\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.metadataOptions.httpPutResponseHopLimit\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.metadataOptions.httpTokens\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.metadataOptions.instanceMetadataTags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.metadataOptions.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.monitoring.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.attachment.attachTime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.attachment.attachmentId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.attachment.deleteOnTermination\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.attachment.deviceIndex\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.attachment.networkCardIndex\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.attachment.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.groupSet.items.groupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.groupSet.items.groupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.interfaceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.macAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.networkInterfaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.ownerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.privateDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.privateIpAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.privateIpAddressesSet.item.primary\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.privateIpAddressesSet.item.privateDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.privateIpAddressesSet.item.privateIpAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.sourceDestCheck\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.networkInterfaceSet.items.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.placement.availabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.placement.tenancy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.previousState.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.previousState.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.privateDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.privateDnsNameOptions.enableResourceNameDnsAAAARecord\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.privateDnsNameOptions.enableResourceNameDnsARecord\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.privateDnsNameOptions.hostnameType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.privateIpAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.rootDeviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.rootDeviceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.sourceDestCheck\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.spotInstanceRequestId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.stateReason.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.stateReason.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.tagSet.items.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.tagSet.items.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.virtualizationType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.instancesSet.items.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.internetGateway.internetGatewayId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.internetGateway.ownerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.internetGateway.tagSet.items.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.internetGateway.tagSet.items.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.isElasticsearchDomain\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.isOpenSearchDomain\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.isTruncated\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.keyFingerprint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.keyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.keyMetadata.aWSAccountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.keyMetadata.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.keyMetadata.creationDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.keyMetadata.customerMasterKeySpec\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.keyMetadata.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.keyMetadata.encryptionAlgorithms\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.keyMetadata.keyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.keyMetadata.keyManager\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.keyMetadata.keySpec\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.keyMetadata.keyState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.keyMetadata.keyUsage\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.keyMetadata.multiRegion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.keyMetadata.origin\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.keyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.keyPairId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.keyState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.lastEvaluatedAt\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.lastModified\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.lastUpdateStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.lastUpdateStatusReason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.lastUpdateStatusReasonCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.lastUpdatedDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.layers.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.layers.codeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.layers.uncompressedCodeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.lifecyclePolicyText\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.loginProfile.createDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.loginProfile.passwordResetRequired\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.loginProfile.userName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.memorySize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.multiAZ\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkBorderGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.availabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.groupSet.items.groupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.groupSet.items.groupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.interfaceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.macAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.networkInterfaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.ownerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.privateDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.privateIpAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.privateIpAddressesSet.item.primary\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.privateIpAddressesSet.item.privateDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.privateIpAddressesSet.item.privateIpAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.requesterId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.requesterManaged\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.sourceDestCheck\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.tagSet.items.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.networkInterface.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.nextToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.notificationFilter.domainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.notifications.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.notifications.domains\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.notifications.eventName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.notifications.mergedNotification\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.notifications.notificationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.notifications.notificationMetadataMap.automatedUpdateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.notifications.notificationMetadataMap.event\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.notifications.notificationMetadataMap.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.notifications.notificationMetadataMap.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.notifications.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.notifications.time\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.ownerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.packageType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.packedPolicySize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.pendingWindowInDays\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.performCheckOnly\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.policy.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.policy.attachmentCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.policy.createDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.policy.defaultVersionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.policy.isAttachable\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.policy.path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.policy.policyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.policy.policyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.policy.updateDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.policy.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.policy.value.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"responseElements.policy.value\"}}},{\"count\":0,\"name\":\"responseElements.policyVersion.createDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.policyVersion.document\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.policyVersion.isDefaultVersion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.policyVersion.versionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.product\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.publicIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.publicIpv4Pool\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.queryId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.realtimeLogConfig.aRN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.realtimeLogConfig.endPoints.kinesisStreamConfig.roleARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.realtimeLogConfig.endPoints.kinesisStreamConfig.streamARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.realtimeLogConfig.endPoints.streamType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.realtimeLogConfig.fields\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.realtimeLogConfig.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.realtimeLogConfig.samplingRate\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.registryId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.repositoryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.requestId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.requesterId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.reservationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.responseParameters.method.response.header.Access-Control-Allow-Headers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.responseParameters.method.response.header.Access-Control-Allow-Methods\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.responseParameters.method.response.header.Access-Control-Allow-Origin\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.revisionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.role\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.role.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"responseElements.role\"}}},{\"count\":0,\"name\":\"responseElements.routeTable.ownerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.routeTable.routeSet.items.destinationCidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.routeTable.routeSet.items.gatewayId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.routeTable.routeSet.items.origin\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.routeTable.routeSet.items.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.routeTable.routeTableId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.routeTable.tagSet.items.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.routeTable.tagSet.items.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.routeTable.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.ruleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.runtime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.securityGroupRuleSet.items.cidrIpv4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.securityGroupRuleSet.items.fromPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.securityGroupRuleSet.items.groupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.securityGroupRuleSet.items.groupOwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.securityGroupRuleSet.items.ipProtocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.securityGroupRuleSet.items.isEgress\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.securityGroupRuleSet.items.securityGroupRuleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.securityGroupRuleSet.items.toPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.snapshotDownloadUrl\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.snapshotId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.sourceArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.stackId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.startDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.startTime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.stateReason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.stateReasonCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.statement\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.status.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnet.assignIpv6AddressOnCreation\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnet.availabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnet.availabilityZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnet.availableIpAddressCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnet.cidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnet.defaultForAz\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnet.enableDns64\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnet.ipv6Native\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnet.mapPublicIpOnLaunch\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnet.ownerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnet.privateDnsNameOptionsOnLaunch.enableResourceNameDnsAAAARecord\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnet.privateDnsNameOptionsOnLaunch.enableResourceNameDnsARecord\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnet.privateDnsNameOptionsOnLaunch.hostnameType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnet.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnet.subnetArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnet.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnet.tagSet.items.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnet.tagSet.items.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnet.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnets\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.subnets.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"responseElements.subnets\"}}},{\"count\":0,\"name\":\"responseElements.success\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.targetVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.taskName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.tasks.overrides.containerOverrides.environment.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.timeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.tracingConfig.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.updateDate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.upgradeId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.volumeId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.volumeSize\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.vpc.cidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.vpc.cidrBlockAssociationSet.items.associationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.vpc.cidrBlockAssociationSet.items.cidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.vpc.cidrBlockAssociationSet.items.cidrBlockState.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.vpc.dhcpOptionsId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.vpc.instanceTenancy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.vpc.isDefault\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.vpc.ownerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.vpc.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.vpc.tagSet.items.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.vpc.tagSet.items.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.vpc.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.workspaces.bundleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.workspaces.computerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.workspaces.directoryId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.workspaces.ipAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.workspaces.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.workspaces.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.workspaces.userName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.workspaces.userRealm\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.workspaces.workspaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.workspaces.workspaceProperties.computeTypeName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.workspaces.workspaceProperties.recycleMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.workspaces.workspaceProperties.rootVolumeSizeGib\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.workspaces.workspaceProperties.runningMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.workspaces.workspaceProperties.runningModeAutoStopTimeoutInMinutes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.workspaces.workspaceProperties.userVolumeSizeGib\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.workspacesConnectionStatus.connectionState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.workspacesConnectionStatus.connectionStateCheckTimestamp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.workspacesConnectionStatus.lastKnownUserConnectionTimestamp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.workspacesConnectionStatus.workspaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.x-amz-delete-marker\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.x-amz-expiration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.x-amz-server-side-encryption\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.x-amz-server-side-encryption-aws-kms-key-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.x-amz-server-side-encryption-context\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.x-amz-storage-class\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"responseElements.x-amz-version-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.eventRequestDetails\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.eventRequestDetails.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"serviceEventDetails.eventRequestDetails\"}}},{\"count\":0,\"name\":\"serviceEventDetails.failureCodes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.instanceIdSet\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.jobArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.jobEventId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.jobId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.keyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.lifecycleEventPolicy.lastEvaluatedAt\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.lifecycleEventPolicy.lifecycleEventRules.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.lifecycleEventPolicy.lifecycleEventRules.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.lifecycleEventPolicy.lifecycleEventRules.lifecycleEventSelection.countNumber\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.lifecycleEventPolicy.lifecycleEventRules.lifecycleEventSelection.countType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.lifecycleEventPolicy.lifecycleEventRules.lifecycleEventSelection.tagStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.lifecycleEventPolicy.lifecycleEventRules.rulePriority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.lifecycleEventPolicy.policyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.lifecycleEventPolicy.policyVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.permissions.ClientMount\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.permissions.ClientRootAccess\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.permissions.ClientWrite\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.repositoryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.snapshotId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.sourceIpAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceEventDetails.statusChangeReason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sessionCredentialFromConsole\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sharedEventID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sourceIPAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tlsDetails.cipherSuite\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tlsDetails.clientProvidedHostHeader\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tlsDetails.tlsVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"userAgent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"userIdentity.accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"userIdentity.accountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"userIdentity.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"userIdentity.invokedBy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"userIdentity.principalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"userIdentity.sessionContext.attributes.creationDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"userIdentity.sessionContext.attributes.mfaAuthenticated\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"userIdentity.sessionContext.ec2RoleDelivery\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"userIdentity.sessionContext.sessionIssuer.accountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"userIdentity.sessionContext.sessionIssuer.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"userIdentity.sessionContext.sessionIssuer.principalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"userIdentity.sessionContext.sessionIssuer.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"userIdentity.sessionContext.sessionIssuer.userName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"userIdentity.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"userIdentity.userName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vpcEndpointId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-cloudtrail-*"},"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-17T08:04:02.255Z","version":"WzI2NzM5LDFd"}
+{"attributes":{"columns":["cloud.account.id","cloud.region","eventSource","eventName","user.name","source.address"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[["@timestamp","desc"]],"title":"search - CloudTrail","version":1},"id":"2c0fb0e0-87ce-11ea-b9a0-7b688d6c40a7","migrationVersion":{"search":"7.9.3"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-08-17T08:23:02.807Z","version":"WzI2Nzc0LDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"availabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"awsAccountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"awsRegion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.instance.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configRuleARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configRuleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AWS:AWSComponent.Content.ApplicationType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:AWSComponent.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:AWSComponent.Content.Architecture\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:AWSComponent.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:AWSComponent.Content.InstalledTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:AWSComponent.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:AWSComponent.Content.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:AWSComponent.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:AWSComponent.Content.PackageId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:AWSComponent.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:AWSComponent.Content.Publisher\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:AWSComponent.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:AWSComponent.Content.Release\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:AWSComponent.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:AWSComponent.Content.Summary\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:AWSComponent.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:AWSComponent.Content.URL\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:AWSComponent.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:AWSComponent.Content.Version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:AWSComponent.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:AWSComponent.SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AWS:Application.Content.ApplicationType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:Application.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:Application.Content.Architecture\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:Application.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:Application.Content.Epoch\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:Application.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:Application.Content.InstalledTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:Application.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:Application.Content.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:Application.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:Application.Content.PackageId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:Application.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:Application.Content.Publisher\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:Application.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:Application.Content.Release\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:Application.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:Application.Content.Summary\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:Application.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:Application.Content.URL\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:Application.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:Application.Content.Version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:Application.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:Application.SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.Classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.ComplianceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.CompliantCriticalCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.CompliantHighCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.CompliantInformationalCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.CompliantLowCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.CompliantMediumCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.CompliantUnspecifiedCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.DetailedText\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.DocumentName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.DocumentVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.ExecutionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.InstalledTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.NonCompliantCriticalCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.NonCompliantHighCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.NonCompliantInformationalCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.NonCompliantLowCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.NonCompliantMediumCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.NonCompliantUnspecifiedCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.OverallSeverity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.PatchBaselineId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.PatchGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.PatchSeverity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.PatchState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.Severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Association.Title\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Association\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.CVEIds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.Classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.ComplianceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.CompliantCriticalCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.CompliantHighCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.CompliantInformationalCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.CompliantLowCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.CompliantMediumCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.CompliantUnspecifiedCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.DocumentName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.DocumentVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.ExecutionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.InstalledTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.NonCompliantCriticalCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.NonCompliantHighCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.NonCompliantInformationalCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.NonCompliantLowCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.NonCompliantMediumCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.NonCompliantUnspecifiedCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.OverallSeverity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.PatchBaselineId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.PatchGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.PatchSeverity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.PatchState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.Severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.Content.Patch.Title\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:ComplianceItem.Content.Patch\"}}},{\"count\":0,\"name\":\"configuration.AWS:ComplianceItem.SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AWS:InstanceInformation.Content.AgentType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AWS:InstanceInformation.Content.AgentVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AWS:InstanceInformation.Content.ComputerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AWS:InstanceInformation.Content.InstanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AWS:InstanceInformation.Content.InstanceStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AWS:InstanceInformation.Content.IpAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AWS:InstanceInformation.Content.PlatformName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AWS:InstanceInformation.Content.PlatformType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AWS:InstanceInformation.Content.PlatformVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AWS:InstanceInformation.Content.ResourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AWS:InstanceInformation.SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AWS:Network.Content.DHCPServer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:Network.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:Network.Content.DNSServer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:Network.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:Network.Content.Gateway\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:Network.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:Network.Content.IPV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:Network.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:Network.Content.IPV6\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:Network.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:Network.Content.MacAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:Network.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:Network.Content.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:Network.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:Network.Content.SubnetMask\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:Network.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:Network.SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AWS:WindowsUpdate.Content.Description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:WindowsUpdate.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:WindowsUpdate.Content.HotFixId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:WindowsUpdate.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:WindowsUpdate.Content.InstalledBy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:WindowsUpdate.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:WindowsUpdate.Content.InstalledTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"configuration.AWS:WindowsUpdate.Content\"}}},{\"count\":0,\"name\":\"configuration.AWS:WindowsUpdate.SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AccessPolicies.Statement.Action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AccessPolicies.Statement.Condition.IpAddress.aws:SourceIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AccessPolicies.Statement.Effect\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AccessPolicies.Statement.Principal.AWS\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AccessPolicies.Statement.Resource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AccessPolicies.Version\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AccessPolicy.Statement.Action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AccessPolicy.Statement.Effect\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AccessPolicy.Statement.Principal.AWS\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AccessPolicy.Statement.Resource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AccessPolicy.Version\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AdvancedOptions.indices.fielddata.cache.size\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AdvancedOptions.indices.query.bool.max_clause_count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AdvancedOptions.override_main_response_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AdvancedOptions.rest.action.multi.allow_explicit_index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AdvancedSecurityOptions.AnonymousAuthEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AdvancedSecurityOptions.Enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AdvancedSecurityOptions.InternalUserDatabaseEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AmazonSideAsn\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AnalyzerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ApplicationLayerAutomaticResponseConfig.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ApplicationSuccessFeedbackSampleRate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AssociationDefaultRouteTableId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.AutoAcceptSharedAttachments\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.BackupPlan.BackupPlanName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.BackupPlan.BackupPlanRule.CompletionWindowMinutes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.BackupPlan.BackupPlanRule.Lifecycle.DeleteAfterDays\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.BackupPlan.BackupPlanRule.RuleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.BackupPlan.BackupPlanRule.ScheduleExpression\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.BackupPlan.BackupPlanRule.StartWindowMinutes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.BackupPlan.BackupPlanRule.TargetBackupVault\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.BackupPlanArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.BackupPlanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.BackupPolicy.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.BackupSelection.IamRoleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.BackupSelection.ListOfTags.ConditionKey\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.BackupSelection.ListOfTags.ConditionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.BackupSelection.ListOfTags.ConditionValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.BackupSelection.SelectionName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.BackupSizeInBytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.BackupVaultArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.BackupVaultName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.CalculatedLifecycle.DeleteAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Capacity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.CapacityProviders\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Certificates.CertificateArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Cluster\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ClusterConfig.DedicatedMasterEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ClusterConfig.InstanceCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ClusterConfig.InstanceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ClusterConfig.WarmEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ClusterConfig.ZoneAwarenessEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ClusterName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ClusterSettings.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ClusterSettings.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.CognitoOptions.Enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.CompletionDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ComputeEnvironmentArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ComputeEnvironmentName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ComputeEnvironmentOrder.ComputeEnvironment\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ComputeEnvironmentOrder.Order\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ComputeResources.DesiredvCpus\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ComputeResources.Ec2Configuration.ImageType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ComputeResources.InstanceRole\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ComputeResources.InstanceTypes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ComputeResources.MaxvCpus\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ComputeResources.MinvCpus\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ComputeResources.SecurityGroupIds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ComputeResources.Subnets\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ComputeResources.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.Command\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.Cpu\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.EntryPoint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.Environment.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.Environment.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.Essential\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.FirelensConfiguration.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.Image\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.LogConfiguration.LogDriver\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.LogConfiguration.Options.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.LogConfiguration.Options.auto_create_group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.LogConfiguration.Options.awslogs-group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.LogConfiguration.Options.awslogs-region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.LogConfiguration.Options.awslogs-stream-prefix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.LogConfiguration.Options.log_group_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.LogConfiguration.Options.log_key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.LogConfiguration.Options.log_stream_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.LogConfiguration.Options.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.Memory\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.MemoryReservation\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.PortMappings.ContainerPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.PortMappings.HostPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.PortMappings.Protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ContainerDefinitions.User\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Cpu\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.CreatedBy.BackupPlanArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.CreatedBy.BackupPlanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.CreatedBy.BackupPlanVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.CreatedBy.BackupRuleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.CreatedTimestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.CreationDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.CreationTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DataSources.Kubernetes.AuditLogs.Enable\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DataSources.S3Logs.Enable\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DefaultActions.FixedResponseConfig.ContentType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DefaultActions.FixedResponseConfig.StatusCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DefaultActions.ForwardConfig.TargetGroupStickinessConfig.Enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DefaultActions.ForwardConfig.TargetGroups.TargetGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DefaultActions.ForwardConfig.TargetGroups.Weight\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DefaultActions.Order\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DefaultActions.TargetGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DefaultActions.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DefaultRouteTableAssociation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DefaultRouteTablePropagation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DefaultVersionNumber\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DefinitionString\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DelaySeconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Deleted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DeploymentConfiguration.DeploymentCircuitBreaker.Enable\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DeploymentConfiguration.DeploymentCircuitBreaker.Rollback\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DeploymentConfiguration.MaximumPercent\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DeploymentConfiguration.MinimumHealthyPercent\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DeploymentController.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DesiredCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DisplayName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DnsSupport\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DomainEndpointOptions.CustomEndpointEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DomainEndpointOptions.EnforceHTTPS\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DomainEndpointOptions.TLSSecurityPolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.DomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.EBSOptions.EBSEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.EBSOptions.VolumeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.EBSOptions.VolumeType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.EffectiveDeliveryPolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Enable\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.EnableECSManagedTags\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Encrypted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.EncryptionAtRestOptions.Enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.EncryptionAtRestOptions.KmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.EncryptionKeyArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.EngineVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ExecutionRoleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.FileSystemId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.FileSystemTags.Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.FileSystemTags.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.FindingPublishingFrequency\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.HTTPSuccessFeedbackSampleRate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.HealthCheckGracePeriodSeconds\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.IamRoleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ImageScanningConfiguration.ScanOnPush\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ImageTagMutability\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.IsEncrypted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.JobQueueName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.KmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.KmsMasterKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LabelNamespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LambdaSuccessFeedbackSampleRate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LastModifiedTimestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LatestVersionNumber\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LaunchTemplateData.EbsOptimized\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LaunchTemplateData.IamInstanceProfile.Arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LaunchTemplateData.ImageId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LaunchTemplateData.InstanceInitiatedShutdownBehavior\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LaunchTemplateData.InstanceMarketOptions.MarketType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LaunchTemplateData.InstanceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LaunchTemplateData.KeyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LaunchTemplateData.SecurityGroupIds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LaunchTemplateData.TagSpecifications.ResourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LaunchTemplateData.TagSpecifications.Tags.Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LaunchTemplateData.TagSpecifications.Tags.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LaunchTemplateData.UserData\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LaunchTemplateName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LaunchType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Lifecycle.DeleteAfterDays\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LifecyclePolicies.TransitionToIA\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LifecyclePolicy.LifecyclePolicyText\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LifecyclePolicy.RegistryId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ListenerArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LoadBalancerArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LoadBalancers.ContainerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LoadBalancers.ContainerPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LoadBalancers.TargetGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LogPublishingOptions.AUDIT_LOGS.CloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LogPublishingOptions.AUDIT_LOGS.Enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LogPublishingOptions.ES_APPLICATION_LOGS.CloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LogPublishingOptions.ES_APPLICATION_LOGS.Enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LogPublishingOptions.INDEX_SLOW_LOGS.CloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LogPublishingOptions.INDEX_SLOW_LOGS.Enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LogPublishingOptions.SEARCH_SLOW_LOGS.CloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LogPublishingOptions.SEARCH_SLOW_LOGS.Enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LoggingConfiguration.IncludeExecutionData\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.LoggingConfiguration.Level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ManagedByFirewallManager\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.MaximumMessageSize\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Memory\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.MessageRetentionPeriod\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.MulticastSupport\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.NameServers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.NetworkConfiguration.AwsvpcConfiguration.AssignPublicIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.NetworkConfiguration.AwsvpcConfiguration.SecurityGroups\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.NetworkConfiguration.AwsvpcConfiguration.Subnets\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.NetworkMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.NodeToNodeEncryptionOptions.Enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.PerformanceMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.PlatformVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Policy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.PropagationDefaultRouteTableId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.QueryLoggingConfig.CloudWatchLogsLogGroupArn.CloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.QueryLoggingConfig.CloudWatchLogsLogGroupArn.HostedZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.QueryLoggingConfig.CloudWatchLogsLogGroupArn.Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.QueueArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ReceiveMessageWaitTimeSeconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.RecoveryPointArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.RedrivePolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.RepositoryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.RepositoryPolicyText\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.RequiresCompatibilities\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ResolverRuleAssociationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ResolverRuleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ResourceArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ResourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.RetentionPeriodHours\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Role\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.RoleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.RotationEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.RuleType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Rules.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Rules.Priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Rules.Statement.ByteMatchStatement.PositionalConstraint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Rules.Statement.ByteMatchStatement.SearchString\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Rules.Statement.ByteMatchStatement.TextTransformations.Priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Rules.Statement.ByteMatchStatement.TextTransformations.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Rules.Statement.ManagedRuleGroupStatement.ExcludedRules.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Rules.Statement.ManagedRuleGroupStatement.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Rules.Statement.ManagedRuleGroupStatement.VendorName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Rules.VisibilityConfig.CloudWatchMetricsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Rules.VisibilityConfig.MetricName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Rules.VisibilityConfig.SampledRequestsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.SQSFailureFeedbackRoleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.SQSSuccessFeedbackRoleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.SQSSuccessFeedbackSampleRate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.SchedulingStrategy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.SelectionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ServiceArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ServiceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ServiceRegistries.RegistryArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ServiceRole\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ShardCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.SnapshotOptions.AutomatedSnapshotStartHour\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.SqsManagedSseEnabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.SslPolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.State\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.StateMachineName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.StateMachineType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.StorageClass\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.TagSpecifications.ResourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.TagSpecifications.Tags.Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.TagSpecifications.Tags.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Tags.Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Tags.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.TaskDefinition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.TaskDefinitionArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.TaskRoleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ThroughputMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.TopicArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.TracingConfiguration.Enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.VPCId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.VPCs.VPCId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.VPCs.VPCRegion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.VersionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.VisibilityConfig.CloudWatchMetricsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.VisibilityConfig.MetricName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.VisibilityConfig.SampledRequestsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.VisibilityTimeout\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.VpnEcmpSupport\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.WorkGroupConfiguration.BytesScannedCutoffPerQuery\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.WorkGroupConfiguration.EnforceWorkGroupConfiguration\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.WorkGroupConfiguration.EngineVersion.EffectiveEngineVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.WorkGroupConfiguration.EngineVersion.SelectedEngineVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.WorkGroupConfiguration.PublishCloudWatchMetricsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.WorkGroupConfiguration.RequesterPaysEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.WorkGroupConfiguration.ResultConfiguration.OutputLocation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.aRN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.accepterVpcInfo.cidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.accepterVpcInfo.cidrBlockSet.cidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.accepterVpcInfo.ownerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.accepterVpcInfo.peeringOptions.allowDnsResolutionFromRemoteVpc\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.accepterVpcInfo.peeringOptions.allowEgressFromLocalClassicLinkToRemoteVpc\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.accepterVpcInfo.peeringOptions.allowEgressFromLocalVpcToRemoteClassicLink\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.accepterVpcInfo.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.accepterVpcInfo.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.accessLogSettings.destinationArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.accessLogSettings.format\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.accessPolicies\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.actionsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.activeTrustedKeyGroups.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.activeTrustedKeyGroups.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.activeTrustedSigners.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.activeTrustedSigners.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.activityStreamStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.actualIncrementalBackupSizeInMegaBytes\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.advancedOptions.indices.fielddata.cache.size\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.advancedOptions.override_main_response_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.advancedOptions.rest.action.multi.allow_explicit_index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.advancedSecurityOptions.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.advancedSecurityOptions.internalUserDatabaseEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.alarmActions\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.alarmArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.alarmConfigurationUpdatedTimestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.alarmDescription\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.alarmName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.aliasICPRecordals.cNAME\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.aliasICPRecordals.iCPRecordalStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.allocatedStorage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.allocationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.allowVersionUpgrade\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.amazonSideAsn\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.amiLaunchIndex\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.apiKeySource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.applicationName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.aquaConfiguration.aquaConfigurationStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.aquaConfiguration.aquaStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.architecture\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.architectures\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.artifacts.encryptionDisabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.artifacts.location\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.artifacts.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.artifacts.namespaceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.artifacts.overrideArtifactName\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.artifacts.packaging\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.artifacts.path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.artifacts.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.assignIpv6AddressOnCreation\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.associatePublicIpAddress\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.associatedRoles.featureName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.associatedRoles.roleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.associatedRoles.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.association.allocationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.association.associationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.association.ipOwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.association.publicDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.association.publicIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.associationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.associations.associationState.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.associations.main\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.associations.networkAclAssociationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.associations.networkAclId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.associations.routeTableAssociationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.associations.routeTableId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.associations.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.assumeRolePolicyDocument\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attachedManagedPolicies.policyArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attachedManagedPolicies.policyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attachment.attachTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attachment.attachmentId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attachment.deleteOnTermination\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attachment.deviceIndex\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attachment.instanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attachment.instanceOwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attachment.networkCardIndex\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attachment.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attachmentCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attachments.attachTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attachments.deleteOnTermination\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attachments.device\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attachments.instanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attachments.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attachments.volumeId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attachments.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attributeDefinitions.attributeName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.attributeDefinitions.attributeType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.autoMinorVersionUpgrade\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.autoScalingGroupARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.autoScalingGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.autoTuneOptions.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.automatedSnapshotRetentionPeriod\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.availabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.availabilityZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.availabilityZoneRelocationStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.availabilityZones.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.availabilityZones.zoneName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.availableIpAddressCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.awsaccountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.backupProgressInMegaBytes\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.backupRetentionPeriod\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.billingModeSummary.billingMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.billingModeSummary.lastUpdateToPayPerRequestDateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.blockDeviceMappings.deviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.blockDeviceMappings.ebs.attachTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.blockDeviceMappings.ebs.deleteOnTermination\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.blockDeviceMappings.ebs.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.blockDeviceMappings.ebs.volumeId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.blockDeviceMappings.ebs.volumeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.blockDeviceMappings.ebs.volumeType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.blockPublicAcls\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.blockPublicPolicy\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.bootMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.cACertificateIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.cNAME\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.cache.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.cacheClusterEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.cacheClusterStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.canonicalHostedZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.canonicalHostedZoneName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.canonicalHostedZoneNameID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.capabilities\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.capacity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.capacityRebalance\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.capacityReservationSpecification.capacityReservationPreference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.certificateArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.cidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.cidrBlockAssociationSet.associationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.cidrBlockAssociationSet.cidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.cidrBlockAssociationSet.cidrBlockState.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.clientToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.cloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.cloudWatchLogsRoleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.clusterAvailabilityStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.clusterCreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.clusterIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.clusterNamespaceArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.clusterNodes.nodeRole\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.clusterNodes.privateIPAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.clusterNodes.publicIPAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.clusterParameterGroups.parameterApplyStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.clusterParameterGroups.parameterGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.clusterPublicKey\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.clusterRevisionNumber\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.clusterStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.clusterSubnetGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.clusterVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.codeSha256\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.codeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.cognitoOptions.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.cognitoOptions.identityPoolId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.cognitoOptions.roleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.cognitoOptions.userPoolId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.comparisonOperator\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.complianceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.compliantRuleCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.computePlatform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"conflictDescriptions\":{\"nested\":[\"log-aws-config-2021-h2\",\"log-aws-config-2022-04\",\"log-aws-config-2022-05\",\"log-aws-config-2022-06\",\"log-aws-config-2022-07\",\"log-aws-config-2022-08\",\"log-aws-config-2022-q1\"],\"object\":[\"log-aws-config-2020\",\"log-aws-config-2021-h1\"]},\"name\":\"configuration.configRuleList\",\"type\":\"conflict\",\"esTypes\":[\"nested\",\"object\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"configuration.configRuleList.complianceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"configuration.configRuleList\"}}},{\"count\":0,\"name\":\"configuration.configRuleList.configRuleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"configuration.configRuleList\"}}},{\"count\":0,\"name\":\"configuration.configRuleList.configRuleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"configuration.configRuleList\"}}},{\"count\":0,\"name\":\"configuration.configRuleList.configRuleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"configuration.configRuleList\"}}},{\"count\":0,\"name\":\"configuration.connectivityType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.consecutivePeriodsToAlarm\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.copyTagsToSnapshot\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.cpuOptions.coreCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.cpuOptions.threadsPerCore\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.createDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.createTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.created\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.createdAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.createdDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.createdTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.creationDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.creationDateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.creationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.creationTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.creationTimestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.crossAccountClone\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.currentBackupRateInMegaBytesPerSecond\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.customerMasterKeySpec\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.customerOwnedIpEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBClusterIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBInstanceArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBInstanceClass\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBInstanceIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBInstanceStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBParameterGroups.dBParameterGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBParameterGroups.parameterApplyStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBSecurityGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBSecurityGroupDescription\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBSecurityGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBSnapshotArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBSnapshotIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBSubnetGroup.dBSubnetGroupDescription\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBSubnetGroup.dBSubnetGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBSubnetGroup.subnetGroupStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBSubnetGroup.subnets.subnetAvailabilityZone.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBSubnetGroup.subnets.subnetIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBSubnetGroup.subnets.subnetStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBSubnetGroup.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBSubnetGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBSubnetGroupDescription\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dBSubnetGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dNSName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.datapointsToAlarm\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dateCreated\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dateModified\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dateUpdated\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dbClusterResourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dbInstancePort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dbclusterArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dbclusterIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dbclusterMembers.clusterWriter\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dbclusterMembers.dbclusterParameterGroupStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dbclusterMembers.dbinstanceIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dbclusterMembers.isClusterWriter\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dbclusterMembers.promotionTier\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dbclusterParameterGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dbclusterSnapshotArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dbclusterSnapshotIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dbiResourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dbsubnetGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.deadLetterConfig.targetArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.defaultAction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.defaultCooldown\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.defaultForAz\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.defaultNamespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.defaultVersionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.deleteTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.deleted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.deletionDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.deletionProtection\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.deletionTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.deliverLogsErrorMessage\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.deliverLogsPermissionArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.deliverLogsStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.deploymentConfigId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.deploymentConfigName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.deploymentId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.desiredCapacity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.destinationOptions.fileFormat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.destinationOptions.hiveCompatiblePartitions\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.destinationOptions.perHourPartition\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dhcpOptionsId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dimensions.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dimensions.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.disableRollback\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.aliases.items\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.aliases.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.cacheBehaviors.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.callerReference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.customErrorResponses.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.allowedMethods.cachedMethods.items\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.allowedMethods.cachedMethods.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.allowedMethods.items\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.allowedMethods.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.cachePolicyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.cloudFrontFunctionAssociations.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.compress\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.defaultTTL\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.edgeScriptAssociations.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.forwardedValues.cookies.forward\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.forwardedValues.headers.items\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.forwardedValues.headers.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.forwardedValues.queryString\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.forwardedValues.queryStringCacheKeys.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.functionAssociations.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.lambdaFunctionAssociations.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.maxTTL\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.minTTL\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.originRequestPolicyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.realtimeLogConfigArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.smoothStreaming\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.targetOriginId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.trustedKeyGroups.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.trustedKeyGroups.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.trustedSigners.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.trustedSigners.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.defaultCacheBehavior.viewerProtocolPolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.httpVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.isIPV6Enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.logging.bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.logging.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.logging.includeCookies\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.logging.prefix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.originGroups.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.origins.items.connectionAttempts\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.origins.items.connectionTimeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.origins.items.customHeaders.items.headerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.origins.items.customHeaders.items.headerValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.origins.items.customHeaders.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.origins.items.customOriginConfig.httpPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.origins.items.customOriginConfig.httpsPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.origins.items.customOriginConfig.originKeepaliveTimeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.origins.items.customOriginConfig.originProtocolPolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.origins.items.customOriginConfig.originReadTimeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.origins.items.customOriginConfig.originSslProtocols.items\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.origins.items.customOriginConfig.originSslProtocols.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.origins.items.domainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.origins.items.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.origins.items.oacSigningBehavior\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.origins.items.originAccessControlId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.origins.items.originPath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.origins.items.originShield.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.origins.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.priceClass\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.restrictions.geoRestriction.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.restrictions.geoRestriction.restrictionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.staging\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.viewerCertificate.acmCertificateArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.viewerCertificate.certificate\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.viewerCertificate.certificateSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.viewerCertificate.cloudFrontDefaultCertificate\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.viewerCertificate.minimumProtocolVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.viewerCertificate.sslSupportMethod\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.distributionConfig.webACLId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dnsEntries.dnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dnsEntries.hostedZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.dnsname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.domainEndpointOptions.customEndpointEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.domainEndpointOptions.enforceHTTPS\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.domainEndpointOptions.tlssecurityPolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.domainId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.domainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.domainValidationOptions.domainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.domainValidationOptions.resourceRecord.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.domainValidationOptions.resourceRecord.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.domainValidationOptions.resourceRecord.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.domainValidationOptions.validationDomain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.domainValidationOptions.validationMethod\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.domainValidationOptions.validationStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.driftInformation.stackDriftStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ebsOptimized\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ebsoptions.ebsenabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ebsoptions.iops\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ebsoptions.volumeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ebsoptions.volumeType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.elapsedTimeInSeconds\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.elasticsearchClusterConfig.coldStorageOptions.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.elasticsearchClusterConfig.dedicatedMasterCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.elasticsearchClusterConfig.dedicatedMasterEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.elasticsearchClusterConfig.dedicatedMasterType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.elasticsearchClusterConfig.instanceCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.elasticsearchClusterConfig.instanceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.elasticsearchClusterConfig.warmCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.elasticsearchClusterConfig.warmEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.elasticsearchClusterConfig.warmType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.elasticsearchClusterConfig.zoneAwarenessConfig.availabilityZoneCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.elasticsearchClusterConfig.zoneAwarenessEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.elasticsearchVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.enaSupport\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.enableTerminationProtection\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.enabledCloudwatchLogsExports\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.enabledMetrics.granularity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.enabledMetrics.metric\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.enclaveOptions.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.encrypted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.encryptedWithHSM\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.encryptionAlgorithms\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.encryptionAtRestOptions.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.encryptionAtRestOptions.kmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.encryptionKey\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.endpoint.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.endpoint.hostedZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.endpoint.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.endpointConfiguration.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.endpointURL\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.endpoints.vpc\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.engine\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.engineFullVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.engineMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.engineVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.enhancedMonitoringResourceArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.enhancedVpcRouting\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.entries.cidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.entries.egress\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.entries.icmpTypeCode.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.entries.icmpTypeCode.type\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.entries.portRange.from\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.entries.portRange.to\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.entries.protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.entries.ruleAction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.entries.ruleNumber\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.environment.computeType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.environment.environmentVariables.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.environment.environmentVariables.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.environment.environmentVariables.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.environment.image\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.environment.imagePullCredentialsType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.environment.privilegedMode\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.environment.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.environmentArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.environmentId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.environmentName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ephemeralStorage.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.estimatedSecondsToCompletion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.evaluationPeriods\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.extendedKeyUsages.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.extendedKeyUsages.oID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewall.deleteProtection\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewall.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewall.firewallArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewall.firewallId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewall.firewallName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewall.firewallPolicyArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewall.firewallPolicyChangeProtection\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewall.subnetChangeProtection\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewall.subnetMappings.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewall.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewallPolicy.statelessDefaultActions\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewallPolicy.statelessFragmentDefaultActions\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewallPolicy.statelessRuleGroupReferences.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewallPolicy.statelessRuleGroupReferences.resourceArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewallPolicyResponse.consumedStatefulRuleCapacity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewallPolicyResponse.consumedStatelessRuleCapacity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewallPolicyResponse.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewallPolicyResponse.encryptionConfiguration.keyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewallPolicyResponse.encryptionConfiguration.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewallPolicyResponse.firewallPolicyArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewallPolicyResponse.firewallPolicyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewallPolicyResponse.firewallPolicyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewallPolicyResponse.firewallPolicyStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewallPolicyResponse.lastModifiedTime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.firewallPolicyResponse.numberOfAssociations\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.flowLogId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.flowLogStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.functionArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.functionName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.globalSecondaryIndexes.indexArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.globalSecondaryIndexes.indexName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.globalSecondaryIndexes.indexStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.globalSecondaryIndexes.keySchema.attributeName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.globalSecondaryIndexes.keySchema.keyType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.globalSecondaryIndexes.projection.nonKeyAttributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.globalSecondaryIndexes.projection.projectionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.globalSecondaryIndexes.provisionedThroughput.numberOfDecreasesToday\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.globalSecondaryIndexes.provisionedThroughput.readCapacityUnits\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.globalSecondaryIndexes.provisionedThroughput.writeCapacityUnits\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.groupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.groupList\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.groupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.groups.groupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.groups.groupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.handler\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.hasCustomEventSelectors\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.hasInsightSelectors\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.healthCheckGracePeriod\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.healthCheckType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.hibernationOptions.configured\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.homeRegion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.hostedZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.httpEndpointEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.hypervisor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.iAMDatabaseAuthenticationEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.iamInstanceProfile.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.iamInstanceProfile.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.iamdatabaseAuthenticationEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ignorePublicAcls\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.imageId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.importedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.inUseBy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.includeGlobalServiceEvents\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instanceCreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instanceLifecycle\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instanceMonitoring.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instanceProfileList.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instanceProfileList.createDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instanceProfileList.instanceProfileId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instanceProfileList.instanceProfileName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instanceProfileList.path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instanceProfileList.roles.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instanceProfileList.roles.assumeRolePolicyDocument\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instanceProfileList.roles.createDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instanceProfileList.roles.path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instanceProfileList.roles.roleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instanceProfileList.roles.roleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instanceTenancy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instanceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instances.availabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instances.healthStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instances.instanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instances.instanceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instances.launchConfigurationName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instances.launchTemplate.launchTemplateId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instances.launchTemplate.launchTemplateName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instances.launchTemplate.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instances.lifecycleState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.instances.protectedFromScaleIn\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.interfaceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.internetGatewayId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.iops\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipAddressType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissions.fromPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissions.ipProtocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissions.ipRanges\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissions.ipv4Ranges.cidrIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissions.ipv4Ranges.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissions.ipv6Ranges.cidrIpv6\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissions.prefixListIds.prefixListId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissions.toPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissions.userIdGroupPairs.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissions.userIdGroupPairs.groupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissions.userIdGroupPairs.userId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissionsEgress.fromPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissionsEgress.ipProtocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissionsEgress.ipRanges\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissionsEgress.ipv4Ranges.cidrIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissionsEgress.ipv4Ranges.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissionsEgress.ipv6Ranges.cidrIpv6\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissionsEgress.prefixListIds.prefixListId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissionsEgress.toPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissionsEgress.userIdGroupPairs.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissionsEgress.userIdGroupPairs.groupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ipPermissionsEgress.userIdGroupPairs.userId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.isAttachable\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.isDefault\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.isMultiRegionTrail\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.isOrganizationTrail\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.isStaging\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.isolationStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.issuedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.issuer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.keyAlgorithm\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.keyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.keyManager\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.keyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.keySchema.attributeName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.keySchema.keyType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.keySpec\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.keyState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.keyUsage\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.keyUsages.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.kmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.labelNamespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.lastModified\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.lastModifiedTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.lastUpdateStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.lastUpdateStatusReason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.lastUpdateStatusReasonCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.lastUpdatedDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.lastUpdatedTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.latestRestorableTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.launchConfigurationARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.launchConfigurationName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.launchTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.layers.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.layers.codeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.licenseModel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.listenerDescriptions.listener.instancePort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.listenerDescriptions.listener.instanceProtocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.listenerDescriptions.listener.loadBalancerPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.listenerDescriptions.listener.protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.listenerDescriptions.listener.sslcertificateId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.listenerDescriptions.policyNames\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.loadBalancerArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.loadBalancerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.localSecondaryIndexes.indexArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.localSecondaryIndexes.indexName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.localSecondaryIndexes.keySchema.attributeName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.localSecondaryIndexes.keySchema.keyType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.localSecondaryIndexes.projection.projectionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.logDestination\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.logDestinationType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.logFileValidationEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.logFormat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.logGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.logPublishingOptions.AUDIT_LOGS.cloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.logPublishingOptions.AUDIT_LOGS.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.logPublishingOptions.ES_APPLICATION_LOGS.cloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.logPublishingOptions.ES_APPLICATION_LOGS.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.logPublishingOptions.INDEX_SLOW_LOGS.cloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.logPublishingOptions.INDEX_SLOW_LOGS.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.logPublishingOptions.SEARCH_SLOW_LOGS.cloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.logPublishingOptions.SEARCH_SLOW_LOGS.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.logsConfig.cloudWatchLogs.groupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.logsConfig.cloudWatchLogs.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.logsConfig.cloudWatchLogs.streamName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.logsConfig.s3Logs.encryptionDisabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.logsConfig.s3Logs.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.macAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.maintenanceTrackName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.managedByFMS\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.managedByFirewallManager\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.manualSnapshotRetentionPeriod\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.mapCustomerOwnedIpOnLaunch\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.mapPublicIpOnLaunch\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.masterUsername\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.maxAggregationInterval\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.maxAllocatedStorage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.maxSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.memorySize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.metadata.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.metadata.pipelineArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.metadataOptions.httpEndpoint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.metadataOptions.httpPutResponseHopLimit\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.metadataOptions.httpTokens\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.metadataOptions.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.metricName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.minSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.minimumHealthyHosts.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.minimumHealthyHosts.value\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.mixedInstancesPolicy.instancesDistribution.onDemandAllocationStrategy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.mixedInstancesPolicy.instancesDistribution.onDemandBaseCapacity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.mixedInstancesPolicy.instancesDistribution.onDemandPercentageAboveBaseCapacity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.mixedInstancesPolicy.instancesDistribution.spotAllocationStrategy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.mixedInstancesPolicy.instancesDistribution.spotInstancePools\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.mixedInstancesPolicy.launchTemplate.launchTemplateSpecification.launchTemplateId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.mixedInstancesPolicy.launchTemplate.launchTemplateSpecification.launchTemplateName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.mixedInstancesPolicy.launchTemplate.launchTemplateSpecification.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.mixedInstancesPolicy.launchTemplate.overrides.instanceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.monitoring.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.monitoringInterval\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.monitoringRoleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.multiAZ\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.multiAttachEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.multiRegion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.multiRegionConfiguration.multiRegionKeyType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.multiRegionConfiguration.primaryKey.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.multiRegionConfiguration.primaryKey.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.multiRegionConfiguration.replicaKeys.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.multiRegionConfiguration.replicaKeys.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.natGatewayAddresses.allocationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.natGatewayAddresses.networkInterfaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.natGatewayAddresses.privateIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.natGatewayAddresses.publicIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.natGatewayId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkAclId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkBorderGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaceIds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaceOwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.association.ipOwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.association.publicDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.association.publicIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.attachment.attachTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.attachment.attachmentId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.attachment.deleteOnTermination\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.attachment.deviceIndex\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.attachment.networkCardIndex\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.attachment.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.groups.groupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.groups.groupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.interfaceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.macAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.networkInterfaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.ownerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.privateDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.privateIpAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.privateIpAddresses.association.ipOwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.privateIpAddresses.association.publicDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.privateIpAddresses.association.publicIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.privateIpAddresses.primary\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.privateIpAddresses.privateDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.privateIpAddresses.privateIpAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.sourceDestCheck\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.networkInterfaces.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.newInstancesProtectedFromScaleIn\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.nextMaintenanceWindowStartTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.nodeToNodeEncryptionOptions.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.nodeType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.nonCompliantRuleCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.notAfter\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.notBefore\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.notificationARNs\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.numberOfNodes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.okactions\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionGroupMemberships.optionGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionGroupMemberships.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:autoscaling:asg.Availability Zones.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:autoscaling:asg.Cooldown.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:autoscaling:asg.MaxSize.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:autoscaling:asg.MinSize.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:autoscaling:launchconfiguration.IamInstanceProfile.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:autoscaling:launchconfiguration.ImageId.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:autoscaling:launchconfiguration.InstanceType.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:autoscaling:launchconfiguration.MonitoringInterval.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:autoscaling:launchconfiguration.SSHSourceRestriction.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:autoscaling:updatepolicy:rollingupdate.RollingUpdateEnabled.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:autoscaling:updatepolicy:rollingupdate.RollingUpdateType.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:autoscaling:updatepolicy:rollingupdate.Timeout.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:ec2:vpc.AssociatePublicIpAddress.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:ec2:vpc.ELBScheme.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:ec2:vpc.ELBSubnets.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:ec2:vpc.Subnets.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:ec2:vpc.VPCId.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:application.Application Healthcheck URL.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:cloudwatch:logs.StreamLogs.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:command.BatchSize.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:command.BatchSizeType.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:command.IgnoreHealthCheck.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:command.Timeout.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:container:nodejs.GzipCompression.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:container:nodejs.NodeVersion.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:container:nodejs.ProxyServer.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:environment.EnvironmentType.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:environment.LoadBalancerIsShared.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:environment.ServiceRole.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:healthreporting:system.ConfigDocument.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:healthreporting:system.EnhancedHealthAuthEnabled.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:healthreporting:system.HealthCheckSuccessThreshold.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:healthreporting:system.SystemType.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:managedactions.ManagedActionsEnabled.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:managedactions.ServiceRoleForManagedUpdates.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:managedactions:platformupdate.InstanceRefreshEnabled.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.optionSettings.aws:elasticbeanstalk:sns:topics.Notification Protocol.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.options.certificateTransparencyLoggingPreference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.origin\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.outputs.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.outputs.outputKey\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.outputs.outputValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ownerAccount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ownerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.owner_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.packageType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.parameterGroupFamily\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.parameterGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.parameters.parameterKey\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.parameters.parameterValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.parentId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.payerToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pendingDeletionWindowInDays\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.percentProgress\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.performanceInsightsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.performanceInsightsKMSKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.performanceInsightsRetentionPeriod\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.period\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.permissionsBoundaryUsageCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.artifactStore.location\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.artifactStore.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.roleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.actionTypeId.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.actionTypeId.owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.actionTypeId.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.actionTypeId.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.AppSpecTemplateArtifact\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.ApplicationName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.Branch\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.BranchName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.BucketName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.ClusterName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.DeploymentGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.Extract\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.Image1ArtifactName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.Image1ContainerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.OAuthToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.OutputArtifactFormat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.Owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.PollForSourceChanges\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.ProjectName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.Repo\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.RepositoryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.S3Bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.S3ObjectKey\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.ServiceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.configuration.TaskDefinitionTemplateArtifact\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.inputArtifacts.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.outputArtifacts.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.actions.runOrder\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.stages.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.pipeline.version\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.placement.availabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.placement.tenancy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.platformArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.policies.otherPolicies\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.policyDocument\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.policyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.policyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.policyVersionList.createDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.policyVersionList.document\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.policyVersionList.isDefaultVersion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.policyVersionList.versionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.predicateList.dataId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.predicateList.negated\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.predicateList.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.preferredBackupWindow\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.preferredMaintenanceWindow\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.privateDnsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.privateDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.privateIpAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.privateIpAddresses.association.allocationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.privateIpAddresses.association.associationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.privateIpAddresses.association.ipOwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.privateIpAddresses.association.publicDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.privateIpAddresses.association.publicIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.privateIpAddresses.primary\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.privateIpAddresses.privateDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.privateIpAddresses.privateIpAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.processing\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.productCodes.productCodeId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.productCodes.productCodeType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.promotionTier\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.provisionedThroughput.lastDecreaseDateTime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.provisionedThroughput.lastIncreaseDateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.provisionedThroughput.numberOfDecreasesToday\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.provisionedThroughput.readCapacityUnits\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.provisionedThroughput.writeCapacityUnits\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.publicDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.publicIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.publicIpAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.publicIpv4Pool\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.publiclyAccessible\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.queuedtimeoutInMinutes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.readerEndpoint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.renewalEligibility\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.renewalSummary.domainValidationOptions.domainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.renewalSummary.domainValidationOptions.resourceRecord.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.renewalSummary.domainValidationOptions.resourceRecord.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.renewalSummary.domainValidationOptions.resourceRecord.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.renewalSummary.domainValidationOptions.validationDomain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.renewalSummary.domainValidationOptions.validationMethod\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.renewalSummary.domainValidationOptions.validationStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.renewalSummary.renewalStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.renewalSummary.updatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.requesterId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.requesterManaged\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.requesterVpcInfo.cidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.requesterVpcInfo.cidrBlockSet.cidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.requesterVpcInfo.ownerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.requesterVpcInfo.peeringOptions.allowDnsResolutionFromRemoteVpc\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.requesterVpcInfo.peeringOptions.allowEgressFromLocalClassicLinkToRemoteVpc\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.requesterVpcInfo.peeringOptions.allowEgressFromLocalVpcToRemoteClassicLink\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.requesterVpcInfo.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.requesterVpcInfo.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.resourceARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.resourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.resourceLifecycleConfig.versionLifecycleConfig.maxAgeRule.deleteSourceFromS3\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.resourceLifecycleConfig.versionLifecycleConfig.maxAgeRule.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.resourceLifecycleConfig.versionLifecycleConfig.maxAgeRule.maxAgeInDays\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.resourceLifecycleConfig.versionLifecycleConfig.maxCountRule.deleteSourceFromS3\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.resourceLifecycleConfig.versionLifecycleConfig.maxCountRule.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.resourceLifecycleConfig.versionLifecycleConfig.maxCountRule.maxCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.restorableNodeTypes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.restrictPublicBuckets\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.revisionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.role\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.roleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.roleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.rolePolicyList.policyDocument\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.rolePolicyList.policyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.rootDeviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.rootDeviceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.routeTableId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.routeTableIds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.routes.destinationCidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.routes.destinationPrefixListId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.routes.gatewayId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.routes.natGatewayId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.routes.origin\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.routes.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.routes.vpcPeeringConnectionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroup.rulesSource.rulesString\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroup.rulesSource.statelessRulesAndCustomActions.customActions.actionDefinition.publishMetricAction.dimensions.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroup.rulesSource.statelessRulesAndCustomActions.customActions.actionName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.actions\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.destinationPorts.fromPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.destinationPorts.toPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.destinations.addressDefinition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.protocols\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.sourcePorts.fromPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.sourcePorts.toPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.sources.addressDefinition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroupResponse.capacity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroupResponse.consumedCapacity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroupResponse.numberOfAssociations\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroupResponse.ruleGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroupResponse.ruleGroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroupResponse.ruleGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroupResponse.ruleGroupStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleGroupResponse.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ruleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.rules.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.rules.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.rules.statement\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"configuration.rules.visibilityConfig.cloudWatchMetricsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.rules.visibilityConfig.metricName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.rules.visibilityConfig.sampledRequestsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.rulesList.action.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.rulesList.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.rulesList.ruleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.rulesList.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.runtime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.s3BucketName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.scheme\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.secondaryAvailabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.securityGroups.groupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.securityGroups.groupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.serial\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.serviceLinkedRoleARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.serviceRole\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.serviceSoftwareOptions.automatedUpdateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.serviceSoftwareOptions.cancellable\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.serviceSoftwareOptions.currentVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.serviceSoftwareOptions.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.serviceSoftwareOptions.newVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.serviceSoftwareOptions.optionalDeployment\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.serviceSoftwareOptions.updateAvailable\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.serviceSoftwareOptions.updateStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.signatureAlgorithm\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.signingAlgorithms\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.snapshotCreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.snapshotId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.snapshotIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.snapshotOptions.automatedSnapshotStartHour\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.snapshotRetentionStartTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.snapshotType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.snsTopicARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.snsTopicName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.solutionStackName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.source.buildSpec\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.source.gitCloneDepth\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.source.gitSubmodulesConfig.fetchSubmodules\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.source.location\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.source.reportBuildStatus\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.source.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.sourceBundle.s3Bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.sourceBundle.s3Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.sourceDBClusterSnapshotArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.sourceDestCheck\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.sourceSecurityGroup.groupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.sourceSecurityGroup.ownerAlias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.sourceVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.spotInstanceRequestId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ssedescription.kmsmasterKeyArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ssedescription.ssetype\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.ssedescription.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.stackId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.stackName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.stackStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.stackStatusReason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.stageName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.stateReason.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.stateReason.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.stateTransitionReason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.state_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.state_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.statistic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.status_message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.storageEncrypted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.storageType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.subject\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.subjectAlternativeNames\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.subnetArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.subnetGroupStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.subnetIds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.subnets.subnetAvailabilityZone.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.subnets.subnetIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.subnets.subnetStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.suspendedProcesses.processName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.suspendedProcesses.suspensionReason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.tableArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.tableId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.tableName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.tableStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.tagSet.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.tagSet.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.tags.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.tags.elasticbeanstalk:environment-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.tags.elasticbeanstalk:environment-name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.tags.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.tags.propagateAtLaunch\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.tags.resourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.tags.resourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.tags.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.targetGroupARNs\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.targetResourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.targetResourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.terminationPolicies\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.threshold\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.throughput\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.tier.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.tier.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.tier.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.timeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.timeoutInMinutes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.totalBackupSizeInMegaBytes\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.totalRuleCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.totalStorageCapacityInMegaBytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.tracingConfig.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.tracingEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.trafficRoutingConfig.timeBasedCanary.canaryInterval\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.trafficRoutingConfig.timeBasedCanary.canaryPercentage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.trafficRoutingConfig.timeBasedLinear.linearInterval\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.trafficRoutingConfig.timeBasedLinear.linearPercentage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.trafficRoutingConfig.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.trafficType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.trailARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.treatMissingData\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.updateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.updateToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.upgradeProcessing\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.userData\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.userId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.userName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.userPolicyList.policyDocument\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.userPolicyList.policyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.versionLabel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.versions\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.virtualizationType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.visibilityConfig.cloudWatchMetricsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.visibilityConfig.metricName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.visibilityConfig.sampledRequestsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.volumeId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.volumeType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.vpcAttachments.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.vpcAttachments.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.vpcConfig.securityGroupIds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.vpcConfig.subnetIds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.vpcEndpointId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.vpcEndpointType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.vpcPeeringConnectionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.vpcSecurityGroups.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.vpcSecurityGroups.vpcSecurityGroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.vpcid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.vpcoptions.availabilityZones\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.vpcoptions.securityGroupIds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.vpcoptions.subnetIds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.vpcoptions.vpcid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.vpczoneIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.vpnGatewayId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configuration.webACLId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configurationItemCaptureTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configurationItemStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configurationItemVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"configurationStateId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"messageType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"newEvaluationResult.annotation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"newEvaluationResult.complianceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"newEvaluationResult.configRuleInvokedTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"newEvaluationResult.evaluationResultIdentifier.evaluationResultQualifier.configRuleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"newEvaluationResult.evaluationResultIdentifier.evaluationResultQualifier.resourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"newEvaluationResult.evaluationResultIdentifier.evaluationResultQualifier.resourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"newEvaluationResult.evaluationResultIdentifier.orderingTimestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"newEvaluationResult.resultRecordedTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"notificationCreationTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"oldEvaluationResult.annotation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"oldEvaluationResult.complianceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"oldEvaluationResult.configRuleInvokedTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"oldEvaluationResult.evaluationResultIdentifier.evaluationResultQualifier.configRuleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"oldEvaluationResult.evaluationResultIdentifier.evaluationResultQualifier.resourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"oldEvaluationResult.evaluationResultIdentifier.evaluationResultQualifier.resourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"oldEvaluationResult.evaluationResultIdentifier.orderingTimestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"oldEvaluationResult.resultRecordedTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"recordVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"relationships.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"relationships.resourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"relationships.resourceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"relationships.resourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resourceCreationTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resourceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.AccessControlList\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketCrossOriginConfiguration.rules.allowedHeaders\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketCrossOriginConfiguration.rules.allowedMethods\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketCrossOriginConfiguration.rules.allowedOrigins\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketCrossOriginConfiguration.rules.exposedHeaders\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketCrossOriginConfiguration.rules.maxAgeSeconds\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketLifecycleConfiguration.rules.abortIncompleteMultipartUpload.daysAfterInitiation\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketLifecycleConfiguration.rules.expirationInDays\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketLifecycleConfiguration.rules.expiredObjectDeleteMarker\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketLifecycleConfiguration.rules.filter.predicate.prefix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketLifecycleConfiguration.rules.filter.predicate.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketLifecycleConfiguration.rules.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketLifecycleConfiguration.rules.noncurrentVersionExpirationInDays\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketLifecycleConfiguration.rules.noncurrentVersionTransitions.days\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketLifecycleConfiguration.rules.noncurrentVersionTransitions.storageClass\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketLifecycleConfiguration.rules.prefix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketLifecycleConfiguration.rules.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketLifecycleConfiguration.rules.transitions.days\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketLifecycleConfiguration.rules.transitions.storageClass\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketLoggingConfiguration.destinationBucketName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketLoggingConfiguration.logFilePrefix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketNotificationConfiguration.configurations.events\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.BucketNotificationConfiguration.configurations\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketNotificationConfiguration.configurations.filter.s3KeyFilter.filterRules.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.BucketNotificationConfiguration.configurations\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketNotificationConfiguration.configurations.filter.s3KeyFilter.filterRules.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.BucketNotificationConfiguration.configurations\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketNotificationConfiguration.configurations.functionARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.BucketNotificationConfiguration.configurations\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketNotificationConfiguration.configurations.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.BucketNotificationConfiguration.configurations\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketPolicy.policyText\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketReplicationConfiguration.roleARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules.deleteMarkerReplication.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules.destinationConfig.accessControlTranslation.owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules.destinationConfig.account\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules.destinationConfig.bucketARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules.destinationConfig.encryptionConfiguration.replicaKmsKeyID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules.destinationConfig.metrics.eventThreshold.minutes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules.destinationConfig.metrics.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules.destinationConfig.replicationTime.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules.destinationConfig.replicationTime.time.minutes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules.filter.predicate.prefix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules.filter.predicate.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules.sourceSelectionCriteria.sseKmsEncryptedObjects.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.BucketReplicationConfiguration.rules\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketTaggingConfiguration.tagSets.tags.Classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketTaggingConfiguration.tagSets.tags.NAME\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketTaggingConfiguration.tagSets.tags.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketTaggingConfiguration.tagSets.tags.SolutionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketTaggingConfiguration.tagSets.tags.Workshop\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketTaggingConfiguration.tagSets.tags.aws:cloudformation:logical-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketTaggingConfiguration.tagSets.tags.aws:cloudformation:stack-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketTaggingConfiguration.tagSets.tags.aws:cloudformation:stack-name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketTaggingConfiguration.tagSets.tags.cost\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketTaggingConfiguration.tagSets.tags.group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketVersioningConfiguration.isMfaDeleteEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketVersioningConfiguration.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketWebsiteConfiguration.errorDocument\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.BucketWebsiteConfiguration.indexDocumentSuffix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Concurrency.reservedConcurrentExecutions\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.ContinuousBackupsDescription.continuousBackupsStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.ContinuousBackupsDescription.pointInTimeRecoveryDescription.pointInTimeRecoveryStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.DBClusterSnapshotAttributes.attributeName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.DBSnapshotAttributes.attributeName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.EnableTerminationProtection\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.IsRequesterPaysEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.KeyRotationStatus\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.LoadBalancerAttributes.accessLog.emitInterval\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.LoadBalancerAttributes.accessLog.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.LoadBalancerAttributes.accessLog.s3BucketName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.LoadBalancerAttributes.additionalAttributes.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.LoadBalancerAttributes.additionalAttributes.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.LoadBalancerAttributes.connectionDraining.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.LoadBalancerAttributes.connectionDraining.timeout\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.LoadBalancerAttributes.connectionSettings.idleTimeout\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.LoadBalancerAttributes.crossZoneLoadBalancing.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.LoadBalancerAttributes.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.LoadBalancerAttributes.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.LoadBalancerPolicies.policyAttributeDescriptions.attributeName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.LoadBalancerPolicies.policyAttributeDescriptions.attributeValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.LoadBalancerPolicies.policyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.LoadBalancerPolicies.policyTypeName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.LoggingStatus.loggingEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.ObjectLockConfiguration.objectLockEnabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.ObjectLockConfiguration.rule.defaultRetention.days\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.ObjectLockConfiguration.rule.defaultRetention.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Parameters.allowedValues\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Parameters.applyType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Parameters.dataType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Parameters.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Parameters.isModifiable\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Parameters.parameterName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Parameters.parameterValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Parameters.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.ParentStackId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Policy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.PublicAccessBlockConfiguration.blockPublicAcls\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.PublicAccessBlockConfiguration.blockPublicPolicy\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.PublicAccessBlockConfiguration.ignorePublicAcls\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.PublicAccessBlockConfiguration.restrictPublicBuckets\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.ServerSideEncryptionConfiguration.rules.applyServerSideEncryptionByDefault.kmsMasterKeyID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.ServerSideEncryptionConfiguration.rules.applyServerSideEncryptionByDefault.sseAlgorithm\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.ServerSideEncryptionConfiguration.rules.bucketKeyEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.StackDriftDetectionInformation.DetectionStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.StackDriftDetectionInformation.DetectionStatusReason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.StackResourceSummaries.deletionPolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.StackResourceSummaries\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.StackResourceSummaries.driftInformation.stackResourceDriftStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.StackResourceSummaries\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.StackResourceSummaries.lastUpdatedTimestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.StackResourceSummaries\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.StackResourceSummaries.logicalResourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.StackResourceSummaries\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.StackResourceSummaries.physicalResourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.StackResourceSummaries\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.StackResourceSummaries.resourceStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.StackResourceSummaries\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.StackResourceSummaries.resourceStatusReason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.StackResourceSummaries\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.StackResourceSummaries.resourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.StackResourceSummaries\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.StackResourceSummaries.updateReplacePolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"supplementaryConfiguration.StackResourceSummaries\"}}},{\"count\":0,\"name\":\"supplementaryConfiguration.Tags.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Tags.Project\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Tags.SolutionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Tags.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Tags.aws:cloudformation:logical-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Tags.aws:cloudformation:stack-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Tags.aws:cloudformation:stack-name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Tags.elasticbeanstalk:environment-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Tags.elasticbeanstalk:environment-name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Tags.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Tags.lambda-console:blueprint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Tags.tagKey\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Tags.tagValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.Tags.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.instanceStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.tags.SolutionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.tags.aws:cloudformation:logical-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.tags.aws:cloudformation:stack-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.tags.aws:cloudformation:stack-name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.unsupportedResources.resourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.unsupportedResources.resourceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"supplementaryConfiguration.unsupportedResources.resourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.AWSNetworkFirewallManaged\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.Classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.Created by Amazon WorkSpaces\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.Description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.Firewall\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.GD-Finding\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.NAME\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.Network\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.Patch Group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.Product\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.Project\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.QuickSetupID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.QuickSetupType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.QuickSetupVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.SolutionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.Workshop\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.aws-cdk:subnet-name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.aws-cdk:subnet-type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.aws:autoscaling:groupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.aws:cloud9:environment\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.aws:cloud9:owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.aws:cloudformation:logical-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.aws:cloudformation:stack-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.aws:cloudformation:stack-name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.aws:ec2:fleet-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.aws:ec2launchtemplate:id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.aws:ec2launchtemplate:version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.aws:ec2spot:fleet-request-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.aws:ecs:clusterName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.aws:ecs:serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.aws:elasticfilesystem:default-backup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.aws:zocalo:alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.awscdk:asset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.cost\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.crypto-aws-encryption\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.elasticbeanstalk:environment-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.elasticbeanstalk:environment-name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.lambda-console:blueprint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.lambda:createdBy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.splunk\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tags.workshop\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-config-*"},"id":"98375620-1dcc-11ec-a057-31536ad7cd1a","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-18T02:29:40.046Z","version":"WzI4MzQyLDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_stream\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccessList\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccessMask\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccountExpires\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AlgorithmName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AttributeLDAPDisplayName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AttributeSyntaxOID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AttributeValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AuditSourceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AuthenticationPackageName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BitlockerUserInputTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ClassId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ClassName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ClientCreationTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CreationUtcTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DSName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DSType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DestAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DestPort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DeviceDescription\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DeviceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DeviceTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DisplayName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DomainBehaviorVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DomainPolicyChanged\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DomainSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.EventSourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.FailureReason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.GroupPolicyApplied\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HandleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HomeDirectory\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HomePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ImpersonationLevel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.IpAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.IpPort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.KeyFilePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.KeyLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.KeyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.KeyType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LmPackageName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LockoutThreshold\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogDroppedPacketsEnabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogSuccessfulConnectionsEnabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogonGuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogonHours\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogonProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogonType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MemberName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MemberSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MixedDomainMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MulticastFlowsEnabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewProcessId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewSd\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewUacValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectClass\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectDN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectGUID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectServer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OemInformation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OldSd\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OldTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OldUacValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OpCorrelationID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OperationMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OperationType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PackageName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PasswordLastSet\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PasswordProperties\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PreviousCreationUtcTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PreviousTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PrimaryGroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PrivilegeList\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessingTimeInMilliseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Profile\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProfileChanged\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProfilePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProfileUsed\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Properties\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProviderName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PuaCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PuaPolicyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.RemoteAdminEnabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ResourceAttributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ResourceManager\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ReturnCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.RuleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.RuleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SamAccountName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ScriptPath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SourceAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SourcePort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.StartTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.StopTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectDomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectLogonId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectUserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectUserSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetDomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetInfo\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetLogonGuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetLogonId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetServerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetUserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetUserSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TaskContent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TaskContentNew\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TaskName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TimeSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TimeSourceRefId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TokenElevationType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TransactionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.UserAccountControl\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.UserParameters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.UserPrincipalName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.UserWorkstations\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.VendorIds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Workstation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.WorkstationName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Channel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Culture\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Keywords.Keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"Event.RenderingInfo.Opcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Task\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Channel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Computer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.EventID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.EventRecordID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Execution.ProcessID\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Execution.ThreadID\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Keywords\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Opcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Provider.Guid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Provider.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Task\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.TimeCreated.SystemTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.SubjectDomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.SubjectLogonId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.SubjectUserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.SubjectUserSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.ServiceShutdown.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":10,\"name\":\"event.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-directory-service-*"},"id":"fa034c70-e6a3-11eb-8e7f-63b315dab53e","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-17T13:55:39.250Z","version":"WzI3Nzg5LDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.CacheClusterId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.CacheNodeId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.ClientAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.ClientName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.Command\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.Duration_us\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.Timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-elasticache-*"},"id":"835bce50-3d2c-11ec-abad-1d2ca14163f1","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-17T14:06:26.512Z","version":"WzI3Nzk0LDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"actions_executed\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"alpn_client_preference_list\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"alpn_fe_protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"backend_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"backend_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"backend_processing_time\",\"type\":\"number\",\"esTypes\":[\"half_float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"backend_status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"chosen_cert_arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"classification_reason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"client_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"client_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"connection_time\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"domain_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elb\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elb_status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.request.method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_query\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"incoming_tls_alert\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"listener\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"listener_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log_entry_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"matched_rule_priority\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"received_bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"request\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"request_creation_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"request_processing_time\",\"type\":\"number\",\"esTypes\":[\"half_float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"request_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"response_processing_time\",\"type\":\"number\",\"esTypes\":[\"half_float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sent_bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ssl_cipher\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ssl_protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_group_arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_port_list\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_processing_time\",\"type\":\"number\",\"esTypes\":[\"half_float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_status_code_list\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tls_cipher\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tls_handshake_time\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tls_protocol_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.query\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.scheme\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"useragent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-elb-*"},"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-17T14:08:59.511Z","version":"WzI3ODE5LDFd"}
+{"attributes":{"columns":["cloud.account.id","cloud.region","event.module","destination.ip","source.ip","source.geo.country_name","elb_status_code","http_method","http_path","user_agent.original"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"search - ELB","version":1},"id":"cb2c8f20-3211-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"search":"7.9.3"},"references":[{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-08-17T08:34:26.948Z","version":"WzI3MTY1LDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@timestamp_received\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccessList\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccessMask\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccountExpires\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BitlockerUserInputTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ClientCreationTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CreationUtcTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DestAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DestPort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DeviceTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HandleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.IpAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.IpPort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectServer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OldTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PasswordLastSet\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PreviousCreationUtcTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PreviousTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessingTimeInMilliseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ResourceAttributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ShareLocalPath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ShareName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SourceAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SourcePort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.StartTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.StopTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectDomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectLogonId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectUserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectUserSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TimeSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TimeSourceRefId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TransactionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"Event.System.Channel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Computer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.EventID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.EventRecordID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Execution.ProcessID\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Execution.ThreadID\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Keywords\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Opcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Provider.Guid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Provider.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Task\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.TimeCreated.SystemTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":10,\"name\":\"event.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"integer\",\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"integer\",\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-fsx-win-*"},"id":"c36e5540-f1b3-11eb-8e7f-63b315dab53e","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-17T14:10:40.362Z","version":"WzI3ODI2LDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@timestamp_received\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Artifact\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"DetectionMechanism\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ResourceTypeAffected\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ThreatFamilyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ThreatPurpose\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"accountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.instance.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"createdAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"destination.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.question.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"findingTypeVersion.present\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.direction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"integer\",\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"integer\",\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.accessKeyDetails.accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.accessKeyDetails.principalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.accessKeyDetails.userName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.accessKeyDetails.userType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.containerDetails.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.containerDetails.image\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.containerDetails.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ebsVolumeDetails.scannedVolumeDetails.deviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ebsVolumeDetails.scannedVolumeDetails.encryptionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ebsVolumeDetails.scannedVolumeDetails.snapshotArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ebsVolumeDetails.scannedVolumeDetails.volumeArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ebsVolumeDetails.scannedVolumeDetails.volumeSizeInGB\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ebsVolumeDetails.scannedVolumeDetails.volumeType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ecsClusterDetails.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ecsClusterDetails.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ecsClusterDetails.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ecsClusterDetails.tags.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ecsClusterDetails.tags.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ecsClusterDetails.taskDetails.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ecsClusterDetails.taskDetails.containers.image\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ecsClusterDetails.taskDetails.containers.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ecsClusterDetails.taskDetails.createdAt\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ecsClusterDetails.taskDetails.definitionArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ecsClusterDetails.taskDetails.startedAt\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ecsClusterDetails.taskDetails.startedBy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ecsClusterDetails.taskDetails.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.eksClusterDetails.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.eksClusterDetails.createdAt\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.eksClusterDetails.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.eksClusterDetails.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.eksClusterDetails.tags.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.eksClusterDetails.tags.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.eksClusterDetails.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.availabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.iamInstanceProfile.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.iamInstanceProfile.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.imageDescription\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.imageId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.instanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.instanceState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.instanceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.launchTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.networkInterfaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.privateDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.privateIpAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.privateIpAddresses.privateDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.publicDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.publicIp\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.securityGroups.groupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.securityGroups.groupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.outpostArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.productCodes.productCodeId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.productCodes.productCodeType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.tags.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.tags.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesUserDetails.groups\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesUserDetails.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesUserDetails.username\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesWorkloadDetails.containers.image\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesWorkloadDetails.containers.imagePrefix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesWorkloadDetails.containers.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesWorkloadDetails.containers.securityContext.privileged\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesWorkloadDetails.containers.volumeMounts.mountPath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesWorkloadDetails.containers.volumeMounts.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesWorkloadDetails.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesWorkloadDetails.namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesWorkloadDetails.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesWorkloadDetails.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesWorkloadDetails.volumes.hostPath.path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesWorkloadDetails.volumes.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.resourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.createdAt\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.defaultServerSideEncryption.encryptionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.defaultServerSideEncryption.kmsMasterKeyArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.owner.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.publicAccess.effectivePermission\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.publicAccess.permissionConfiguration.accountLevelPermissions.blockPublicAccess.blockPublicAcls\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.publicAccess.permissionConfiguration.accountLevelPermissions.blockPublicAccess.blockPublicPolicy\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.publicAccess.permissionConfiguration.accountLevelPermissions.blockPublicAccess.ignorePublicAcls\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.publicAccess.permissionConfiguration.accountLevelPermissions.blockPublicAccess.restrictPublicBuckets\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.publicAccess.permissionConfiguration.bucketLevelPermissions.accessControlList.allowsPublicReadAccess\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.publicAccess.permissionConfiguration.bucketLevelPermissions.accessControlList.allowsPublicWriteAccess\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.publicAccess.permissionConfiguration.bucketLevelPermissions.blockPublicAccess.blockPublicAcls\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.publicAccess.permissionConfiguration.bucketLevelPermissions.blockPublicAccess.blockPublicPolicy\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.publicAccess.permissionConfiguration.bucketLevelPermissions.blockPublicAccess.ignorePublicAcls\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.publicAccess.permissionConfiguration.bucketLevelPermissions.blockPublicAccess.restrictPublicBuckets\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.publicAccess.permissionConfiguration.bucketLevelPermissions.bucketPolicy.allowsPublicReadAccess\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.publicAccess.permissionConfiguration.bucketLevelPermissions.bucketPolicy.allowsPublicWriteAccess\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.tags.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.tags.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.s3BucketDetails.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"schemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.actionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.affectedResources.AWS::CloudTrail::Trail\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.affectedResources.AWS::EC2::Instance\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.affectedResources.AWS::IAM::Role\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.affectedResources.AWS::IAM::User\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.affectedResources.AWS::S3::Bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.api\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.callerType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.domainDetails.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.errorCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteAccountDetails.accountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteAccountDetails.affiliated\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.city.cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.country.countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.geoLocation\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.ipAddressV4\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.ipAddressV6\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.organization.asn\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.organization.isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.organization.org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.dnsRequestAction.blocked\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.dnsRequestAction.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.dnsRequestAction.protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.parameters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.city.cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.country.countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.geoLocation.lat\",\"type\":\"number\",\"esTypes\":[\"float\",\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.geoLocation.lon\",\"type\":\"number\",\"esTypes\":[\"float\",\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.organization.asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.organization.asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.organization.isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.organization.org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.requestUri\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.sourceIPs\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.statusCode\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.userAgent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.verb\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.blocked\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.connectionDirection\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.localIpDetails.ipAddressV4\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.localPortDetails.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.localPortDetails.portName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.city.cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.country.countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.geoLocation\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.ipAddressV4\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.organization.asn\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.organization.isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.organization.org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remotePortDetails.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remotePortDetails.portName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.portProbeAction.blocked\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.portProbeAction.portProbeDetails.localIpDetails.ipAddressV4\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.portProbeAction.portProbeDetails.localPortDetails.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.portProbeAction.portProbeDetails.localPortDetails.portName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.portProbeAction.portProbeDetails.remoteIpDetails.city.cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.portProbeAction.portProbeDetails.remoteIpDetails.country.countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.portProbeAction.portProbeDetails.remoteIpDetails.geoLocation\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.portProbeAction.portProbeDetails.remoteIpDetails.ipAddressV4\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.portProbeAction.portProbeDetails.remoteIpDetails.organization.asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.portProbeAction.portProbeDetails.remoteIpDetails.organization.asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.portProbeAction.portProbeDetails.remoteIpDetails.organization.isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.portProbeAction.portProbeDetails.remoteIpDetails.organization.org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.anomalies.anomalousAPIs\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.apiCalls.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.apiCalls.firstSeen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.apiCalls.lastSeen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.apiCalls.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.inBytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.localPort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.newPolicy.allowUsersToChangePassword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.newPolicy.hardExpiry\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.newPolicy.maxPasswordAge\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.newPolicy.minimumPasswordLength\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.newPolicy.passwordReusePrevention\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.newPolicy.requireLowercaseCharacters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.newPolicy.requireNumbers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.newPolicy.requireSymbols\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.newPolicy.requireUppercaseCharacters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.oldPolicy.allowUsersToChangePassword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.oldPolicy.hardExpiry\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.oldPolicy.maxPasswordAge\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.oldPolicy.minimumPasswordLength\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.oldPolicy.passwordReusePrevention\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.oldPolicy.requireLowercaseCharacters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.oldPolicy.requireNumbers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.oldPolicy.requireSymbols\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.oldPolicy.requireUppercaseCharacters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.outBytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.portsScannedSample\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.frequentProfiledAPIsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.frequentProfiledAPIsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.frequentProfiledASNsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.frequentProfiledASNsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.frequentProfiledBucketsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.frequentProfiledUserAgentsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.frequentProfiledUserAgentsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.frequentProfiledUserNamesAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.frequentProfiledUserNamesBucketProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.frequentProfiledUserTypesAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.infrequentProfiledAPIsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.infrequentProfiledAPIsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.infrequentProfiledASNsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.infrequentProfiledASNsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.infrequentProfiledUserAgentsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.infrequentProfiledUserAgentsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.infrequentProfiledUserNamesAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.numberOfHistoricalDailyAvgAPIsBucketProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.numberOfHistoricalDailyAvgAPIsBucketUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.numberOfHistoricalDailyAvgAPIsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.numberOfHistoricalDailyMaxAPIsBucketProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.numberOfHistoricalDailyMaxAPIsBucketUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.numberOfHistoricalDailyMaxAPIsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.rareProfiledAPIsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.rareProfiledAPIsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.rareProfiledASNsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.rareProfiledASNsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.rareProfiledUserAgentsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.rareProfiledUserAgentsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.rareProfiledUserNamesAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.profiledBehavior.rareProfiledUserTypesAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.recentApiCalls.api\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.recentApiCalls.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.recentCredentials.accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.recentCredentials.ipAddressV4\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.recentCredentials.principalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.sample\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.scannedPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.threatListName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.threatName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.unusual\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"service.additionalInfo.unusualBehavior.isUnusualUserIdentity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.unusualBehavior.numberOfPast24HoursAPIsBucketProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.unusualBehavior.numberOfPast24HoursAPIsBucketUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.unusualBehavior.numberOfPast24HoursAPIsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.unusualBehavior.unusualAPIsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.unusualBehavior.unusualAPIsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.unusualBehavior.unusualASNsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.unusualBehavior.unusualASNsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.unusualBehavior.unusualBucketsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.unusualBehavior.unusualUserAgentsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.unusualBehavior.unusualUserAgentsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.unusualBehavior.unusualUserNamesAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.unusualProtocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.userAgent.fullUserAgent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.userAgent.userAgentCategory\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.archived\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.awsApiCallAction.api\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.awsApiCallAction.callerType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.awsApiCallAction.errorCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.awsApiCallAction.remoteIpDetails.city.cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.awsApiCallAction.remoteIpDetails.country.countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.awsApiCallAction.remoteIpDetails.geoLocation.lat\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.awsApiCallAction.remoteIpDetails.geoLocation.lon\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.awsApiCallAction.remoteIpDetails.ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.awsApiCallAction.remoteIpDetails.organization.asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.awsApiCallAction.remoteIpDetails.organization.asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.awsApiCallAction.remoteIpDetails.organization.isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.awsApiCallAction.remoteIpDetails.organization.org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.awsApiCallAction.serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.detectorId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanCompletedAt\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.highestSeverityThreatDetails.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.highestSeverityThreatDetails.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.highestSeverityThreatDetails.threatName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.scannedItemCount.files\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.scannedItemCount.totalGb\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.scannedItemCount.volumes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.itemCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.shortened\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.filePaths.fileName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.filePaths.filePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.filePaths.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.filePaths.volumeArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.itemCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.uniqueThreatNameCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatsDetectedItemCount.files\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanStartedAt\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.sources\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.triggerFindingId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.eventFirstSeen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.eventLastSeen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.evidence.threatIntelligenceDetails.threatListName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.evidence.threatIntelligenceDetails.threatNames\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.featureName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.resourceRole\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severitylabel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"title\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"updatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-guardduty-*"},"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-18T07:24:55.848Z","version":"WzI5MDU3LDFd"}
+{"attributes":{"columns":["cloud.account.id","severitylabel","type","cloud.instance.id","service.count","source.ip","source.geo.country_name"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[["@timestamp","desc"]],"title":"search - GuardDuty","version":1},"id":"476df210-8707-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"search":"7.9.3"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-08-18T07:12:29.263Z","version":"WzI5MDM3LDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.instance.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.awsAccountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.findingArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.firstObservedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScore\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScoreDetails.adjustedCvss.adjustments.metric\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScoreDetails.adjustedCvss.adjustments.reason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScoreDetails.adjustedCvss.cvssSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScoreDetails.adjustedCvss.score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScoreDetails.adjustedCvss.scoreSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScoreDetails.adjustedCvss.scoringVector\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScoreDetails.adjustedCvss.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.lastObservedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.networkReachabilityDetails.networkPath.steps.componentId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.networkReachabilityDetails.networkPath.steps.componentType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.networkReachabilityDetails.openPortRange.begin\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.networkReachabilityDetails.openPortRange.end\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.networkReachabilityDetails.protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.cvss.baseScore\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.cvss\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.cvss.scoringVector\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.cvss\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.cvss.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.cvss\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.cvss.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.cvss\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.referenceUrls\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.sourceUrl\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vendorCreatedAt\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vendorSeverity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vendorUpdatedAt\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerabilityId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.arch\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.epoch\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.filePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.packageManager\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.release\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.sourceLayerHash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.remediation.recommendation.text\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.remediation.recommendation.url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.iamInstanceProfileArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.imageId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.ipV4Addresses\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.keyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.launchedAt\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.architecture\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.imageHash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.imageTags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.pushedAt\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.registry\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.repositoryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.tags.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.tags.aws:cloud9:environment\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.tags.aws:cloud9:owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.tags.aws:cloudformation:logical-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.tags.aws:cloudformation:stack-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.tags.aws:cloudformation:stack-name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.title\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.updatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-inspector-*"},"id":"08c8d9f0-b48a-11ec-bdf3-e93adf30fff9","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-18T03:27:09.670Z","version":"WzQ3MzQ3LDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_stream\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.instance.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"pid\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"proc\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"syslog_message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"syslog_timestamp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-linux-os-*"},"id":"ee2256c0-1b7a-11eb-a71f-fde35cddfd48","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-18T07:41:17.967Z","version":"WzI5MDY4LDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_stream\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.instance.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":10,\"name\":\"event.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"pid\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"proc\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"syslog_message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"syslog_timestamp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-linux-secure-*"},"id":"52214a80-8cee-11ea-8245-b5a58f1d6758","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-18T07:41:26.614Z","version":"WzI5MDcyLDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_stream\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.instance.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":10,\"name\":\"event.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"pid\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"proc\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"syslog_message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"syslog_timestamp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-linux-*"},"id":"d8c71190-f7dd-11eb-9883-27ce34bd4410","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-18T07:39:18.314Z","version":"WzI5MDY0LDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_stream\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Artifact\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"AuthType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"AwsAccountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"BucketOwner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"BundleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"BytesSent\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"CipherSuite\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"CompanyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Compliance.RelatedRequirements\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Compliance.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Compliance.StatusReasons.Description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Compliance.StatusReasons.ReasonCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ComputerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Confidence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ConnectionState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ConnectionStateCheckTimestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"CreatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"DetectionMechanism\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"DirectoryId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"EndPoint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ErrorCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccessList\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccessMask\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccountExpires\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AuthenticationPackageName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BitlockerUserInputTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ClientCreationTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CreationUtcTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DestAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DestPort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DeviceTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HandleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ImpersonationLevel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.IpAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.IpPort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.KeyLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogonGuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogonProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogonType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewProcessId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewSd\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectServer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OldSd\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OldTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OperationType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PasswordLastSet\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PreviousCreationUtcTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PreviousTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PrivilegeList\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessingTimeInMilliseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Properties\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SourceAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SourcePort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.StartTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.StopTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectDomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectLogonId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectUserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectUserSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetDomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetLogonId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetUserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetUserSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TimeSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TimeSourceRefId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TokenElevationType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Channel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Culture\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Keywords.Keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"Event.RenderingInfo.Opcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Task\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Channel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Computer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.EventID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.EventRecordID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Execution.ProcessID\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Execution.ThreadID\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Keywords\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Opcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Provider.Guid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Provider.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Task\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.TimeCreated.SystemTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"FindingProviderFields.Severity.Label\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"FindingProviderFields.Severity.Normalized\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"FindingProviderFields.Severity.Original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"FindingProviderFields.Severity.Product\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"FindingProviderFields.Types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"FirstObservedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"GeneratorId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"HTTPstatus\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"HostId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"IpAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"LastKnownUserConnectionTimestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"LastObservedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"NetworkPath.ComponentId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"NetworkPath.ComponentType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ObjectSize\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.FailedCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.InstalledCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.InstalledOtherCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.InstalledPendingReboot\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.InstalledRejectedCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.MissingCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.Operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.OperationEndTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.OperationStartTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.ControlId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.JobArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.JobId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.PatchManagerHash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.RecommendationUrl\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.RelatedAWSResources:0/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.RelatedAWSResources:0/type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.RelatedAWSResources:1/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.RelatedAWSResources:1/type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.Resources:0/Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.RuleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Bucket.allowsUnencryptedObjectUploads\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Bucket.effectivePermission\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Object.Extension\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Object.Path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Object.PublicAccess\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Object.Size\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Object.StorageClass\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.StandardsArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.StandardsControlArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.StandardsGuideArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.StandardsGuideSubscriptionArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.StandardsSubscriptionArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/ACL\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/BENCHMARK_ID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/BENCHMARK_RULE_ID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/CIS_BENCHMARK_PROFILE\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/CIS_WEIGHT\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/CVE_ID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/CVSS2_SCORE\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/CVSS2_VECTOR\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/CVSS3_SCORE\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/CVSS3_VECTOR\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/ELB\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/ELB2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/ENI\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/IGW\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/INSTANCE_ID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/PORT\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/PORT_GROUP_NAME\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/PROTOCOL\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/REACHABILITY_TYPE\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/RULE_TYPE\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/SECURITY_GROUP\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/TCP_PORTS\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/VPC\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.attributes/package_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/actionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/affectedResources/AWS::CloudTrail::Trail\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/affectedResources/AWS::EC2::Instance\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/affectedResources/AWS::IAM::Role\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/affectedResources/AWS::IAM::User\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/affectedResources/AWS::S3::Bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/api\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/callerType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/errorCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteAccountDetails/accountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteAccountDetails/affiliated\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/city/cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/country/countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/geoLocation/lat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/geoLocation/lon\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/organization/asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/organization/asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/organization/isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/organization/org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/dnsRequestAction/blocked\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/dnsRequestAction/domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/dnsRequestAction/protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/parameters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/city/cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/country/countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/geoLocation/lat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/geoLocation/lon\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/organization/asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/organization/asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/organization/isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/organization/org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/requestUri\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/sourceIPs.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/statusCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/userAgent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/verb\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/blocked\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/connectionDirection\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/localIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/localPortDetails/port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/localPortDetails/portName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/city/cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/country/countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/geoLocation/lat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/geoLocation/lon\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/organization/asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/organization/asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/organization/isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/organization/org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remotePortDetails/port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remotePortDetails/portName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/blocked\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/localIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/localPortDetails/port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/localPortDetails/portName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/city/cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/country/countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/geoLocation/lat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/geoLocation/lon\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/organization/asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/organization/asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/organization/isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/organization/org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/localIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/localPortDetails/port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/localPortDetails/portName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/city/cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/country/countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/geoLocation/lat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/geoLocation/lon\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/organization/asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/organization/asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/organization/isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/organization/org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/anomalies/anomalousAPIs\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.0_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.0_/firstSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.0_/lastSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.0_/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.1_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.1_/firstSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.1_/lastSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.1_/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.2_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.2_/firstSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.2_/lastSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.2_/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.3_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.3_/firstSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.3_/lastSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.3_/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.4_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.4_/firstSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.4_/lastSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.4_/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.5_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.5_/firstSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.5_/lastSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.5_/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.6_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.6_/firstSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.6_/lastSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.6_/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.7_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.7_/firstSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.7_/lastSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.7_/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/inBytes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/localPort\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/allowUsersToChangePassword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/hardExpiry\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/maxPasswordAge\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/minimumPasswordLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/passwordReusePrevention\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/requireLowercaseCharacters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/requireNumbers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/requireSymbols\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/requireUppercaseCharacters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/allowUsersToChangePassword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/hardExpiry\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/maxPasswordAge\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/minimumPasswordLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/passwordReusePrevention\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/requireLowercaseCharacters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/requireNumbers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/requireSymbols\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/requireUppercaseCharacters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/outBytes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.10_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.11_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.12_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.13_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.14_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.15_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.16_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.17_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.18_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.19_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.1_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.2_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.3_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.4_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.5_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.6_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.7_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.8_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.9_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledAPIsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledAPIsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledASNsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledASNsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledUserAgentsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledUserAgentsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledUserNamesAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledUserTypesAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/infrequentProfiledAPIsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/infrequentProfiledAPIsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/infrequentProfiledASNsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/infrequentProfiledASNsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/infrequentProfiledUserAgentsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/infrequentProfiledUserAgentsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledAPIsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledAPIsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledASNsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledUserAgentsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledUserAgentsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledUserNamesAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledUserTypesAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentApiCalls.0_/api\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentApiCalls.0_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentApiCalls.1_/api\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentApiCalls.1_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.0_/accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.0_/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.0_/principalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.1_/accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.1_/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.1_/principalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.2_/accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.2_/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.2_/principalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.3_/accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.3_/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.3_/principalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/sample\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/scannedPort\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/threatListName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/threatName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/countries.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/countries.1_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/countries.2_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/countries.3_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/hoursOfDay.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/isps\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/userNames.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusualBehavior/unusualAPIsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusualBehavior/unusualAPIsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusualBehavior/unusualASNsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusualBehavior/unusualASNsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusualProtocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/userAgent/fullUserAgent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/userAgent/userAgentCategory\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/archived\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/detectorId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/eventFirstSeen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/eventLastSeen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/evidence/threatIntelligenceDetails.0_/threatListName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/evidence/threatIntelligenceDetails.0_/threatNames.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/resourceRole\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/FindingStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/ProductVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/RulesPackageName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/inspectorScore\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/packageVulnerabilityDetails/vulnerablePackages/1/sourceLayerHash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/packageVulnerabilityDetails/vulnerablePackages/2/sourceLayerHash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/packageVulnerabilityDetails/vulnerablePackages/3/sourceLayerHash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/packageVulnerabilityDetails/vulnerablePackages/4/sourceLayerHash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/packageVulnerabilityDetails/vulnerablePackages/sourceLayerHashes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/resources/1/resourceDetails/awsEc2InstanceDetails/platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/resources/1/resourceDetails/awsEcrContainerImageDetails/platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/securityhub/CompanyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/securityhub/FindingId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/securityhub/ProductName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/securityhub/annotation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.serviceAttributes/assessmentRunArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.serviceAttributes/rulesPackageArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.serviceAttributes/schemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RecordState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Referrer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Remediation.Recommendation.Text\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Remediation.Recommendation.Url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RemoteIP\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RequestDateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RequestID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RequestURI_httpProtoversion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RequestURI_key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RequestURI_operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Requester\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ResourceTypeAffected\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.DetailedResultsLocation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.AdditionalOccurrences\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Occurrences.Cells.CellReference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Occurrences.Cells.Column\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Occurrences.Cells.ColumnName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Occurrences.Cells.Row\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.TotalCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.MimeType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Cells.CellReference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Cells.Column\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Cells.ColumnName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Cells.Row\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.LineRanges.End\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.LineRanges.Start\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.LineRanges.StartColumn\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Pages.PageNumber\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Records.JsonPath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Records.RecordIndex\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.TotalCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SizeClassified\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.Status.Code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.CreatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.DomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.ResourceRecord.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.ResourceRecord.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.ResourceRecord.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.ValidationDomain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.ValidationMethod\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.ValidationStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.ExtendedKeyUsages.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.ExtendedKeyUsages.OId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.InUseBy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.IssuedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.Issuer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.KeyAlgorithm\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.KeyUsages.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.NotAfter\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.NotBefore\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.Options.CertificateTransparencyLoggingPreference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalEligibility\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.DomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.ResourceRecord.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.ResourceRecord.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.ResourceRecord.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.ValidationDomain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.ValidationMethod\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.ValidationStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.RenewalStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.UpdatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.Serial\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.SignatureAlgorithm\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.Subject\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.SubjectAlternativeNames\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.CloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.CloudWatchLogsRoleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.HasCustomEventSelectors\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.HomeRegion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.IncludeGlobalServiceEvents\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.IsMultiRegionTrail\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.IsOrganizationTrail\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.KmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.LogFileValidationEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.S3BucketName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.SnsTopicName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.AllocationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.Domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.NetworkBorderGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.PublicIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.PublicIpv4Pool\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.IamInstanceProfileArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.ImageId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.IpV4Addresses\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.KeyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.LaunchedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.NetworkInterfaces.NetworkInterfaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.SubnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Associations.NetworkAclAssociationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Associations.NetworkAclId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Associations.SubnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Entries.CidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Entries.Egress\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Entries.Protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Entries.RuleAction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Entries.RuleNumber\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.IsDefault\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.NetworkAclId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.OwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.GroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.GroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissions.FromPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissions.IpProtocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissions.IpRanges.CidrIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissions.ToPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissions.UserIdGroupPairs.GroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissions.UserIdGroupPairs.UserId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissionsEgress.IpProtocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissionsEgress.IpRanges.CidrIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.OwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.AssignIpv6AddressOnCreation\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.AvailabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.AvailabilityZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.AvailableIpAddressCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.CidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.DefaultForAz\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.MapPublicIpOnLaunch\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.OwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.State\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.SubnetArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.SubnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Attachments.AttachTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Attachments.DeleteOnTermination\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Attachments.InstanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Attachments.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.CreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Encrypted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.SnapshotId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Vpc.CidrBlockAssociationSet.AssociationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Vpc.CidrBlockAssociationSet.CidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Vpc.CidrBlockAssociationSet.CidrBlockState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Vpc.DhcpOptionsId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Vpc.State\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcrContainerImage.Architecture\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcrContainerImage.ImageDigest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcrContainerImage.ImagePublishedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcrContainerImage.ImageTags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcrContainerImage.RegistryId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcrContainerImage.RepositoryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEksCluster.Arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEksCluster.ClusterStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEksCluster.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.AvailabilityZones.SubnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.AvailabilityZones.ZoneName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.CanonicalHostedZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.CreatedTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.DNSName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.IpAddressType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.Scheme\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.SecurityGroups\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.State.Code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamAccessKey.PrincipalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamAccessKey.PrincipalName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamAccessKey.PrincipalType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.AttachmentCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.CreateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.DefaultVersionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.IsAttachable\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.Path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.PermissionsBoundaryUsageCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.PolicyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.PolicyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.PolicyVersionList.CreateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.PolicyVersionList.IsDefaultVersion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.PolicyVersionList.VersionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.UpdateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.AssumeRolePolicyDocument\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.AttachedManagedPolicies.PolicyArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.AttachedManagedPolicies.PolicyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.CreateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.CreateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.InstanceProfileId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.InstanceProfileName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Roles.Arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Roles.AssumeRolePolicyDocument\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Roles.CreateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Roles.Path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Roles.RoleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Roles.RoleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.Path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.RoleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.RoleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.RolePolicyList.PolicyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamUser.AttachedManagedPolicies.PolicyArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamUser.AttachedManagedPolicies.PolicyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamUser.CreateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamUser.Path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamUser.UserId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamUser.UserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKmsKey.AWSAccountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKmsKey.CreationDate\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKmsKey.KeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKmsKey.KeyManager\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKmsKey.KeyState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKmsKey.Origin\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.CodeSha256\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.DeadLetterConfig.TargetArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.FunctionName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.Handler\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.LastModified\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.MemorySize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.RevisionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.Role\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.Runtime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.Timeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.TracingConfig.Mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.Version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.ActivityStreamStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.AllocatedStorage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.AvailabilityZones\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.BackupRetentionPeriod\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.ClusterCreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.CopyTagsToSnapshot\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.CrossAccountClone\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterMembers.DbClusterParameterGroupStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterMembers.DbInstanceIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterMembers.IsClusterWriter\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterMembers.PromotionTier\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterParameterGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterResourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbSubnetGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DeletionProtection\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.EnabledCloudWatchLogsExports\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.Endpoint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.Engine\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.EngineMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.EngineVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.HostedZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.HttpEndpointEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.IamDatabaseAuthenticationEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.KmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.MasterUsername\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.MultiAz\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.Port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.PreferredBackupWindow\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.PreferredMaintenanceWindow\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.ReaderEndpoint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.StorageEncrypted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.VpcSecurityGroups.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.VpcSecurityGroups.VpcSecurityGroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.AllocatedStorage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.AvailabilityZones\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.ClusterCreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.Engine\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.EngineVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.KmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.LicenseModel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.MasterUsername\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.PercentProgress\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.Port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.SnapshotCreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.SnapshotType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.StorageEncrypted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.AllocatedStorage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.AutoMinorVersionUpgrade\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.AvailabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.BackupRetentionPeriod\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.CACertificateIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.CopyTagsToSnapshot\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DBClusterIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DBInstanceClass\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DBInstanceIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbInstancePort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbInstanceStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbParameterGroups.DbParameterGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbParameterGroups.ParameterApplyStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.DbSubnetGroupDescription\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.DbSubnetGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.SubnetGroupStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.Subnets.SubnetAvailabilityZone.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.Subnets.SubnetIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.Subnets.SubnetStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbiResourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DeletionProtection\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.EnabledCloudWatchLogsExports\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.Endpoint.Address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.Endpoint.HostedZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.Endpoint.Port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.Engine\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.EngineVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.EnhancedMonitoringResourceArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.IAMDatabaseAuthenticationEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.InstanceCreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.KmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.LicenseModel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.MasterUsername\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.MonitoringInterval\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.MonitoringRoleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.MultiAz\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.OptionGroupMemberships.OptionGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.OptionGroupMemberships.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PerformanceInsightsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PerformanceInsightsKmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PerformanceInsightsRetentionPeriod\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PreferredBackupWindow\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PreferredMaintenanceWindow\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PromotionTier\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PubliclyAccessible\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.StorageEncrypted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.StorageType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.VpcSecurityGroups.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.VpcSecurityGroups.VpcSecurityGroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.CreatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.OwnerAccountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.OwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.OwnerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.PublicAccessBlockConfiguration.BlockPublicAcls\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.PublicAccessBlockConfiguration.BlockPublicPolicy\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.PublicAccessBlockConfiguration.IgnorePublicAcls\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.PublicAccessBlockConfiguration.RestrictPublicBuckets\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.ServerSideEncryptionConfiguration.Rules.ApplyServerSideEncryptionByDefault.KMSMasterKeyID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.ServerSideEncryptionConfiguration.Rules.ApplyServerSideEncryptionByDefault.SSEAlgorithm\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Object.ETag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Object.LastModified\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Object.ServerSideEncryption\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSecretsManagerSecret.Deleted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSecretsManagerSecret.Description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSecretsManagerSecret.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSecretsManagerSecret.RotationEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.Action Granted\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.Condition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.External Principal\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.External Principal Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.kubernetesDetails/kubernetesUserDetails/groups.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.kubernetesDetails/kubernetesUserDetails/groups.1_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.kubernetesDetails/kubernetesUserDetails/uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.kubernetesDetails/kubernetesUserDetails/username\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.kubernetesDetails/kubernetesWorkloadDetails\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.Division\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingEKSClusterTag1\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingEKSClusterTag2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingEKSClusterTag3\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag1\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag3\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag5\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag6\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag7\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag8\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag9\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.Team\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.aws:cloudformation:logical-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.aws:cloudformation:stack-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.aws:cloudformation:stack-name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.foo\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"S3AccessPointARN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Severity.Label\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Severity.Normalized\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Severity.Original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Severity.Product\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SigV\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SourceUrl\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"State\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SubnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"TLSVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ThreatFamilyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ThreatPurpose\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Title\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"TotalTime\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"TurnAroundTime\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"UpdatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"UserAgent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"UserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"VersionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Cvss.BaseScore\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Cvss.BaseVector\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Cvss.Source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Cvss.Version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.ReferenceUrls\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Vendor.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Vendor.Url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Vendor.VendorCreatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Vendor.VendorSeverity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Vendor.VendorUpdatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.Architecture\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.Epoch\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.FilePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.PackageManager\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.Release\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.Version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Workflow.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkflowState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkspaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkspaceProperties.ComputeTypeName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkspaceProperties.RootVolumeSizeGib\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkspaceProperties.RunningMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkspaceProperties.RunningModeAutoStopTimeoutInMinutes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkspaceProperties.UserVolumeSizeGib\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"accountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"account_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"actionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"actions_executed\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"answers.Class\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"answers.Rdata\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"answers.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"availability_zone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"az_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"backend_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"backend_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"backend_processing_time\",\"type\":\"number\",\"esTypes\":[\"half_float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"backend_status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"c_country\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"c_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"c_ip_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"c_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cache_behavior_path_pattern\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"chosen_cert_arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"classification_reason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientIpAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientPlatform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"client_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"client_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.client-ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.client-vpn-endpoint-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.common-name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-attempt-failure-reason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-attempt-status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-duration-seconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-end-time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-last-update-time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-log-type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-reset-status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.connection-start-time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.device-ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.device-type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.egress-bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.egress-packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.ingress-bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.ingress-packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.transport-protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientvpn.username\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.availability_zone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.instance.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.service.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.cluster_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.command_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.command_type_hex\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.host_time\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.host_time_usec\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.hsm_error\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.hsm_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.hsm_return\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.key_handle\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.local_time\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.local_time_usec\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.log_type_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.opcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.opcode_hex\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.priv_secret_key_handle\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.propagation_delay\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.public_key_handle\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.reboot_counter\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.response\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.sequence_no\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.session_handle\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.timestamp\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.timestamp_usec\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.unknown_field_value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.user_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.user_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.user_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.user_type_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloudhsm.version_no\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"connection_time\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"createdAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_accept\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_accept_encoding\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_header_names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_headers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_headers_count\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_protocol_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_referer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_uri_query\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_uri_stem\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cs_user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"date_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"destination.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"directoryId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"distribution_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.class\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.data\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.question.class\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.question.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.question.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.response_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"domain_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dstaddr\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dstport\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.CacheClusterId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.CacheNodeId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.ClientAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.ClientName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.Command\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.Duration_us\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elasticache.Timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elb\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"elb_status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":10,\"name\":\"event.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.alert.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.alert.rev\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.alert.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.alert.signature\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.alert.signature_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.app_proto\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.dest_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.dest_port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.event_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.flow_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.http.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.http.http_method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.http.http_user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.http.length\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.http.protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.http.url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.age\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.max_ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.min_ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.pkts\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.proto\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.src_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.src_port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.ack\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.fin\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.psh\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.rst\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.syn\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.tcp_flag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.tcp_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tls.sni\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tls.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event_timestamp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"firewall_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"flow_direction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"formatVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.request.method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.request.referrer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.clientIp\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.country\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.accept\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.accept_encoding\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.accept_language\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.cache_control\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.connection\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.content_length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.content_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.cookie\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.dnt\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.from\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.pragma\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.referer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.upgrade_insecure_requests\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.headers.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.headers.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.httpMethod\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.httpVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.requestId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.uri\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpSourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpSourceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_query\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.awsAccountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.findingArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.firstObservedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScore\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScoreDetails.adjustedCvss.cvssSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScoreDetails.adjustedCvss.score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScoreDetails.adjustedCvss.scoreSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScoreDetails.adjustedCvss.scoringVector\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.inspectorScoreDetails.adjustedCvss.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.lastObservedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.networkReachabilityDetails.networkPath.steps.componentId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.networkReachabilityDetails.networkPath.steps.componentType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.networkReachabilityDetails.openPortRange.begin\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.networkReachabilityDetails.openPortRange.end\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.networkReachabilityDetails.protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.cvss.baseScore\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.cvss\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.cvss.scoringVector\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.cvss\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.cvss.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.cvss\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.cvss.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.cvss\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.referenceUrls\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.sourceUrl\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vendorCreatedAt\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vendorSeverity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vendorUpdatedAt\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerabilityId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.arch\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.epoch\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.filePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.packageManager\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.release\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.sourceLayerHash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.packageVulnerabilityDetails.vulnerablePackages.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"inspector.packageVulnerabilityDetails.vulnerablePackages\"}}},{\"count\":0,\"name\":\"inspector.remediation.recommendation.text\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.remediation.recommendation.url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.iamInstanceProfileArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.imageId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.ipV4Addresses\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.keyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.launchedAt\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEc2Instance.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.architecture\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.imageHash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.imageTags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.pushedAt\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.registry\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.details.awsEcrContainerImage.repositoryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.tags.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.resources.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.title\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"inspector.updatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"instance_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"listener\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"listener_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log_entry_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log_status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"loginTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"matched_rule_priority\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.broker_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.cluster_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.group_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.log_level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.max_lag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"msk.sum_lag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.time_lag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.timestamp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.topic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.command\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.database\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.lock_time\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.log_level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"mysql.object\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.query\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"mysql.query_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.query_time\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.queryid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.retcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.serverhost\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.source_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.thread_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.username\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.direction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.transport\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"nonTerminatingMatchingRules.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"nonTerminatingMatchingRules.ruleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_cluster_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_format_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_node_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_node_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_request_body\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"opensearch.audit_request_effective_user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_request_effective_user_is_admin\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_request_layer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_request_origin\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_request_privilege\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_request_remote_address\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Accept\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Accept-Encoding\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Connection\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Content-Encoding\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Content-Length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Content-Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.User-Agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.x-opaque-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.x-opensearch-product-origin\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.filter_path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.metric\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.page_size\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_trace_doc_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_trace_indices\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_trace_resolved_indices\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_trace_shard_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_trace_task_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_transport_headers._system_index_access_allowed\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_transport_request_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"packets\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"pkt_dst_aws_service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"pkt_dstaddr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"pkt_src_aws_service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"pkt_srcaddr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.database\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.duration_ms\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.log_level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"postgresql.pid\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.query\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"postgresql.query_step\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.session_time_seconds\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.source_address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.source_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.thread_id\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"protocol\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query_class\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rds.cluster_identifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rds.database_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rds.instance_identifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rds.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":10,\"name\":\"rds.query\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":10,\"name\":\"rds.query_time\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"received_bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"request\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"request_creation_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"request_processing_time\",\"type\":\"number\",\"esTypes\":[\"half_float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"request_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.accessKeyDetails.accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.accessKeyDetails.principalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.accessKeyDetails.userName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.accessKeyDetails.userType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ebsVolumeDetails.scannedVolumeDetails.deviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ebsVolumeDetails.scannedVolumeDetails.encryptionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ebsVolumeDetails.scannedVolumeDetails.snapshotArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ebsVolumeDetails.scannedVolumeDetails.volumeArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ebsVolumeDetails.scannedVolumeDetails.volumeSizeInGB\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.ebsVolumeDetails.scannedVolumeDetails.volumeType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.eksClusterDetails.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.eksClusterDetails.createdAt\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.eksClusterDetails.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.eksClusterDetails.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.eksClusterDetails.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.availabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.iamInstanceProfile.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.iamInstanceProfile.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.imageDescription\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.imageId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.instanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.instanceState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.instanceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.launchTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.networkInterfaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.privateDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.privateIpAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.privateIpAddresses.privateDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.publicDnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.publicIp\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.securityGroups.groupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.securityGroups.groupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.subnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.networkInterfaces.vpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.tags.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.instanceDetails.tags.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesUserDetails.groups\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesUserDetails.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.kubernetesDetails.kubernetesUserDetails.username\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.resourceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"response_processing_time\",\"type\":\"number\",\"esTypes\":[\"half_float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.ruleset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ruleGroupList.excludedRules.exclusionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ruleGroupList.excludedRules.ruleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ruleGroupList.ruleGroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ruleGroupList.terminatingRule.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ruleGroupList.terminatingRule.ruleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sc-range-end\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sc-range-start\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sc_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sc_content_len\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sc_content_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sc_status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"schemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sent_bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.actionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.api\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.callerType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.city.cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.country.countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.geoLocation\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.ipAddressV4\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.ipAddressV6\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.organization.asn\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.organization.isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.remoteIpDetails.organization.org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.awsApiCallAction.serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.dnsRequestAction.blocked\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.dnsRequestAction.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.dnsRequestAction.protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.country.countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.geoLocation.lat\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.geoLocation.lon\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.organization.asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.organization.asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.organization.isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.remoteIpDetails.organization.org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.requestUri\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.sourceIPs\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.statusCode\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.userAgent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.kubernetesApiCallAction.verb\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.blocked\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.connectionDirection\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.localIpDetails.ipAddressV4\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.localPortDetails.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.localPortDetails.portName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.city.cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.country.countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.geoLocation\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.ipAddressV4\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.organization.asn\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.organization.isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remoteIpDetails.organization.org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remotePortDetails.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.networkConnectionAction.remotePortDetails.portName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.portProbeAction.portProbeDetails.localIpDetails.ipAddressV4\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.portProbeAction.portProbeDetails.remoteIpDetails.geoLocation\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.action.portProbeAction.portProbeDetails.remoteIpDetails.ipAddressV4\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.apiCalls.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.apiCalls.firstSeen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.apiCalls.lastSeen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.apiCalls.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.inBytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.localPort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.newPolicy.maxPasswordAge\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.newPolicy.minimumPasswordLength\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.newPolicy.passwordReusePrevention\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.oldPolicy.maxPasswordAge\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.oldPolicy.minimumPasswordLength\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.oldPolicy.passwordReusePrevention\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.outBytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.recentCredentials.ipAddressV4\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.threatListName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.threatName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.additionalInfo.unusual\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"service.additionalInfo.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.archived\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.detectorId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanCompletedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.highestSeverityThreatDetails.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.highestSeverityThreatDetails.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.highestSeverityThreatDetails.threatName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.scannedItemCount.files\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.scannedItemCount.totalGb\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.scannedItemCount.volumes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.itemCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.shortened\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.filePaths.fileName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.filePaths.filePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.filePaths.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.filePaths.volumeArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.itemCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.uniqueThreatNameCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanDetections.threatsDetectedItemCount.files\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.scanStartedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.sources\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ebsVolumeScanDetails.triggerFindingId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.eventFirstSeen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.eventLastSeen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.evidence.threatIntelligenceDetails.threatListName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.evidence.threatIntelligenceDetails.threatNames\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.featureName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.node.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.resourceRole\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severitylabel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"srcaddr\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"srcids.instance\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"srcport\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ssl_cipher\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ssl_protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"subnet_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_group_arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_port_list\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_processing_time\",\"type\":\"number\",\"esTypes\":[\"half_float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target_status_code_list\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tcp_flags\",\"type\":\"number\",\"esTypes\":[\"byte\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"terminatingRuleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"terminatingRuleMatchDetails.conditionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"terminatingRuleMatchDetails.location\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"terminatingRuleMatchDetails.matchedData\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"terminatingRuleType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"time_taken\",\"type\":\"number\",\"esTypes\":[\"half_float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"time_to_first_byte\",\"type\":\"number\",\"esTypes\":[\"half_float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"title\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tls_cipher\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tls_handshake_time\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tls_protocol_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traffic_path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transport\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.account\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check.description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"trustedadvisor.check.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check.metadata\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check_ja.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check_ja.description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"trustedadvisor.check_ja.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check_ja.metadata\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check_ja.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.creation_date\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.refreshable\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.requestid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.categorySpecificSummary.costOptimizing.estimatedMonthlySavings\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.categorySpecificSummary.costOptimizing.estimatedPercentMonthlySavings\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.checkId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResource.isSuppressed\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResource.metadata\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResource.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResource.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResource.resourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResource.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResources.isSuppressed\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResources.metadata\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResources.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResources.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResources.resourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResources.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.resourcesSummary.resourcesFlagged\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.resourcesSummary.resourcesIgnored\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.resourcesSummary.resourcesProcessed\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.resourcesSummary.resourcesSuppressed\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"updatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.query\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.scheme\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"useragent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vpc_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"webaclId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"workspacesClientProductName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"x_edge_detailed_result_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"x_edge_location\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"x_edge_request_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"x_edge_response_result_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"x_edge_result_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"x_host_header\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-*"},"id":"6566d020-92c9-11ea-8245-b5a58f1d6758","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-18T06:56:31.580Z","version":"WzExMzcsMV0="}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"activity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"activity_id\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"activity_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.request.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.response.error\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.response.error_message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.response.error_message.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"api.response.error_message\"}}},{\"count\":0,\"name\":\"api.response.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.response.message.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"api.response.message\"}}},{\"count\":0,\"name\":\"api.response.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.service.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"category_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"category_uid\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"class_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"class_uid\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.account_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"end_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.created_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.first_seen_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.last_seen_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.modified_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.title\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_request.user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.invoked_by\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.session.created_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.session.issuer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.session.mfa\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.user.account_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.user.credential_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.user.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.user.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.user.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"message.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"message\"}}},{\"count\":0,\"name\":\"metadata.logged_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.modified_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.processed_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.product.feature.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.product.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.product.vendor_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.product.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.profiles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"origin.cloud.account_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"origin.cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"product.lang\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"product.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"product.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"product.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ref_event_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ref_time\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.account_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"response_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severity_id\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"start_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status_id\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"timezone_offset\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"type_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"type_uid\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"unmapped_original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"update_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-ocsf-cloud-*"},"id":"3e63cdd0-2399-11ed-a223-392f5fb66add","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-12-04T05:04:28.859Z","version":"WzExODYsMV0="}
+{"attributes":{"columns":["cloud.account.id","cloud.region","api.service.name","api.operation","api.response.message","src_endpoint.domain","src_endpoint.ip","source.geo.country_name"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"search - OCSF CloudActivity","version":1},"id":"a727b640-23af-11ed-8158-55dbbfbae4a1","migrationVersion":{"search":"7.9.3"},"references":[{"id":"3e63cdd0-2399-11ed-a223-392f5fb66add","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-12-04T00:31:12.011Z","version":"WzExNTcsMV0="}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"activity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"activity_id\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"activity_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.request.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.response.error\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.response.error_message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.response.error_message.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"api.response.error_message\"}}},{\"count\":0,\"name\":\"api.response.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.response.message.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"api.response.message\"}}},{\"count\":0,\"name\":\"api.response.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"category_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"category_uid\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"class_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"class_uid\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.account_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"compliance.requirements\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"compliance.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"compliance.status_detail\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"end_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.created_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.desc\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.first_seen_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.last_seen_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.modified_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.remediation.desc\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.remediation.kb_articles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.src_url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.title\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_request.user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.session.created_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.user.account_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"message.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"message\"}}},{\"count\":0,\"name\":\"metadata.logged_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.modified_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.processed_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.product.feature.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.product.feature.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.product.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.product.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.product.vendor_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.product.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"origin.cloud.account_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"origin.cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.file.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.file.type_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"product.lang\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"product.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"product.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"product.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ref_time\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.cloud_partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.details\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.labels\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"response_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severity_id\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"start_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"state_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status_id\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"timezone_offset\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"type_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"type_uid\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"unmapped_original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"update_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerabilities.cve.cvss.base_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerabilities.cve.cvss.vector_string\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerabilities.cve.cvss.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerabilities.cve.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerabilities.kb_articles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerabilities.references\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerabilities.vendor_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-ocsf-findings-*"},"id":"7040e570-72e2-11ed-9487-0fbb9f2dc2d0","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-12-04T05:04:42.448Z","version":"WzExODcsMV0="}
+{"attributes":{"columns":["cloud.account.id","cloud.region","metadata.product.feature.name","state","finding.title"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"search - OCSF Findings","version":1},"id":"ce47ad60-72e3-11ed-9487-0fbb9f2dc2d0","migrationVersion":{"search":"7.9.3"},"references":[{"id":"7040e570-72e2-11ed-9487-0fbb9f2dc2d0","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-12-03T08:23:46.229Z","version":"WzQyMSwxXQ=="}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":1,\"name\":\"activity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"activity_id\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"activity_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"answers.class\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"answers.rdata\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"answers.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.request.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.response.error\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.response.error_message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.response.error_message.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"api.response.error_message\"}}},{\"count\":0,\"name\":\"api.response.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.response.message.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"api.response.message\"}}},{\"count\":0,\"name\":\"api.response.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"category_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"category_uid\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"class_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"class_uid\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.account_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.instance.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.zone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"connection_info.boundary\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"connection_info.boundary_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"connection_info.direction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"connection_info.direction_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"connection_info.protocol_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"connection_info.protocol_num\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"connection_info.protocol_ver\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"connection_info.tcp_flags\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.instance_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.interface_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.intermediate_ips\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.subnet_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.svc_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.vpc_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"end_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.created_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.first_seen_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.last_seen_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.modified_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.title\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_request.user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.session.created_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.user.account_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"message.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"message\"}}},{\"count\":0,\"name\":\"metadata.logged_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.modified_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.processed_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.product.feature.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":2,\"name\":\"metadata.product.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.product.vendor_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.product.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.profiles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"origin.cloud.account_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"origin.cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"product.lang\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"product.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"product.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"product.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query.class\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rcode_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ref_time\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"response_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severity_id\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.instance_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.interface_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.intermediate_ips\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"src_endpoint.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.subnet_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.svc_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.vpc_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"start_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status_id\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"timezone_offset\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traffic.bytes\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traffic.packets\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"type_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"type_uid\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"unmapped_original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"update_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-ocsf-network-*"},"id":"5281cc40-2399-11ed-8158-55dbbfbae4a1","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-12-04T05:11:19.748Z","version":"WzExOTcsMV0="}
+{"attributes":{"columns":["cloud.account.id","cloud.region","src_endpoint.ip","source.geo.country_name","src_endpoint.port","dst_endpoint.ip","dst_endpoint.port","activity_name"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"class_name\",\"params\":{\"query\":\"Network Activity\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"class_name\":\"Network Activity\"}},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"search - OCSF NetworkActivity","version":1},"id":"32aa0460-23b1-11ed-8158-55dbbfbae4a1","migrationVersion":{"search":"7.9.3"},"references":[{"id":"5281cc40-2399-11ed-8158-55dbbfbae4a1","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"5281cc40-2399-11ed-8158-55dbbfbae4a1","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"search","updated_at":"2022-12-04T05:11:51.274Z","version":"WzExOTgsMV0="}
+{"attributes":{"columns":["cloud.account.id","cloud.region","metadata.product.name","src_endpoint.ip","query.hostname","query.type","activity_name"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"class_name\",\"params\":{\"query\":\"DNS Activity\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"class_name\":\"DNS Activity\"}},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"search - OCSF DnsActivity","version":1},"id":"2f60e240-72e1-11ed-9487-0fbb9f2dc2d0","migrationVersion":{"search":"7.9.3"},"references":[{"id":"5281cc40-2399-11ed-8158-55dbbfbae4a1","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"5281cc40-2399-11ed-8158-55dbbfbae4a1","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"search","updated_at":"2022-12-03T08:08:06.298Z","version":"WzM5OCwxXQ=="}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"activity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"activity_id\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"activity_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"answers.class\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"answers.rdata\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"answers.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.request.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.response.error\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.response.error_message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.response.error_message.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"api.response.error_message\"}}},{\"count\":0,\"name\":\"api.response.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.response.message.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"api.response.message\"}}},{\"count\":0,\"name\":\"api.response.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.service.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"api.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"category_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"category_uid\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"class_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"class_uid\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.account_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.instance.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.zone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"compliance.requirements\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"compliance.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"compliance.status_detail\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"connection_info.boundary\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"connection_info.boundary_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"connection_info.direction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"connection_info.direction_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"connection_info.protocol_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"connection_info.protocol_num\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"connection_info.protocol_ver\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"connection_info.tcp_flags\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.instance_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.interface_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.intermediate_ips\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.subnet_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.svc_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dst_endpoint.vpc_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"end_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.created_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.desc\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.first_seen_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.last_seen_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.modified_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.remediation.desc\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.remediation.kb_articles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.src_url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.title\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"finding.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http_request.user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.invoked_by\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.session.created_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.session.issuer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.session.mfa\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.user.account_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.user.credential_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.user.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.user.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"identity.user.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"message.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"message\"}}},{\"count\":0,\"name\":\"metadata.logged_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.modified_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.processed_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.product.feature.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.product.feature.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.product.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.product.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.product.vendor_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.product.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.profiles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metadata.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"origin.cloud.account_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"origin.cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.file.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.file.type_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"product.lang\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"product.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"product.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"product.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query.class\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rcode_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ref_event_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ref_time\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.account_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.cloud_partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.details\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.labels\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resources.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"response_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severity_id\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.instance_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.interface_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.intermediate_ips\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.subnet_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.svc_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"src_endpoint.vpc_uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"start_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"state_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status_id\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"timezone_offset\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traffic.bytes\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traffic.packets\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"type_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"type_uid\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"unmapped_original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"update_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerabilities.cve.cvss.base_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerabilities.cve.cvss.vector_string\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerabilities.cve.cvss.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerabilities.cve.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerabilities.kb_articles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerabilities.references\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerabilities.vendor_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-ocsf-*"},"id":"2fc262b0-238e-11ed-8158-55dbbfbae4a1","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-12-04T05:04:13.847Z","version":"WzExODUsMV0="}
+{"attributes":{"fieldFormatMap":"{\"metricset.period\":{\"id\":\"duration\",\"params\":{\"parsedUrl\":{\"origin\":\"https://search-aes-siem-benozaf4rfsjtt5seg7e7llqii.ap-northeast-1.es.amazonaws.com\",\"pathname\":\"/_dashboards/app/management/opensearch-dashboards/indexPatterns/patterns/7647d070-97b7-11ec-83e7-856989243e56\",\"basePath\":\"/_dashboards\"},\"inputFormat\":\"milliseconds\",\"outputFormat\":\"asSeconds\",\"outputPrecision\":0}},\"opensearch.index.primaries.merges.total_size_in_bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"https://search-aes-siem-benozaf4rfsjtt5seg7e7llqii.ap-northeast-1.es.amazonaws.com\",\"pathname\":\"/_dashboards/app/management/opensearch-dashboards/indexPatterns/patterns/7647d070-97b7-11ec-83e7-856989243e56\",\"basePath\":\"/_dashboards\"},\"pattern\":\"0,0.[0] b\"}},\"opensearch.index.primaries.store.size_in_bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"https://search-aes-siem-benozaf4rfsjtt5seg7e7llqii.ap-northeast-1.es.amazonaws.com\",\"pathname\":\"/_dashboards/app/management/opensearch-dashboards/indexPatterns/patterns/7647d070-97b7-11ec-83e7-856989243e56\",\"basePath\":\"/_dashboards\"},\"pattern\":\"0,0.[0] b\"}},\"opensearch.index.total.fielddata.memory_size_in_bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"https://search-aes-siem-benozaf4rfsjtt5seg7e7llqii.ap-northeast-1.es.amazonaws.com\",\"pathname\":\"/_dashboards/app/management/opensearch-dashboards/indexPatterns/patterns/7647d070-97b7-11ec-83e7-856989243e56\",\"basePath\":\"/_dashboards\"},\"pattern\":\"0,0.[0] b\"}},\"opensearch.index.total.merges.total_size_in_bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"https://search-aes-siem-benozaf4rfsjtt5seg7e7llqii.ap-northeast-1.es.amazonaws.com\",\"pathname\":\"/_dashboards/app/management/opensearch-dashboards/indexPatterns/patterns/7647d070-97b7-11ec-83e7-856989243e56\",\"basePath\":\"/_dashboards\"},\"pattern\":\"0,0.[0] b\"}},\"opensearch.index.total.store.size_in_bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"https://search-aes-siem-benozaf4rfsjtt5seg7e7llqii.ap-northeast-1.es.amazonaws.com\",\"pathname\":\"/_dashboards/app/management/opensearch-dashboards/indexPatterns/patterns/7647d070-97b7-11ec-83e7-856989243e56\",\"basePath\":\"/_dashboards\"},\"pattern\":\"0,0.[0] b\"}},\"opensearch.shard.store.size_in_bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"https://search-aes-siem-benozaf4rfsjtt5seg7e7llqii.ap-northeast-1.es.amazonaws.com\",\"pathname\":\"/_dashboards/app/management/opensearch-dashboards/indexPatterns/patterns/7647d070-97b7-11ec-83e7-856989243e56\",\"basePath\":\"/_dashboards\"},\"pattern\":\"0,0.[0] b\"}}}","fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.dataset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metricset.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"metricset.period\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.cluster.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.cluster.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.creation.date\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.end_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.hidden\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.index_status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.primaries.docs.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.primaries.docs.deleted\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.primaries.indexing.index_time_in_millis\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.primaries.indexing.index_total\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.primaries.indexing.throttle_time_in_millis\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.primaries.merges.total_size_in_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.primaries.refresh.total_time_in_millis\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.primaries.segments.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.primaries.store.size_in_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.shards.primaries\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.shards.total\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.start_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.storage_tier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.docs.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.docs.deleted\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.fielddata.memory_size_in_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.indexing.index_time_in_millis\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.indexing.index_total\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.indexing.throttle_time_in_millis\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.merges.total_size_in_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.refresh.total_time_in_millis\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.search.query_time_in_millis\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.search.query_total\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.segments.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.segments.doc_values_memory_in_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.segments.fixed_bit_set_memory_in_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.segments.index_writer_memory_in_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.segments.memory_in_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.segments.norms_memory_in_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.segments.points_memory_in_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.segments.stored_fields_memory_in_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.segments.term_vectors_memory_in_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.segments.terms_memory_in_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.segments.version_map_memory_in_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.total.store.size_in_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.index.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.node.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.shard.docs.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.shard.number\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.shard.primary\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.shard.source_node.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.shard.source_node.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.shard.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.shard.store.size_in_bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"metrics-*"},"id":"7647d070-97b7-11ec-83e7-856989243e56","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-07-30T07:35:13.793Z","version":"WzQwNzIyLDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@timestamp_received\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.broker_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.cluster_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.log_level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.max_lag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"msk.sum_lag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.time_lag\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"msk.timestamp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-msk-*"},"id":"c43aa9e0-7839-11eb-9f5d-6b88a95347ff","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-18T08:01:35.897Z","version":"WzI5MDg2LDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"availability_zone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.availability_zone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":10,\"name\":\"event.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.alert.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.alert.rev\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.alert.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.alert.signature\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.alert.signature_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.app_proto\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.dest_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.dest_port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.event_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.files.filename\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.files.gaps\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.files.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.files.state\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.files.stored\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.files.tx_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.flow_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.http.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.http.http_method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.http.http_port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.http.http_user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.http.length\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.http.protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.http.url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.icmp_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.icmp_type\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.age\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.max_ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.min_ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.pkts\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.netflow.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.proto\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.src_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.src_port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.ack\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.cwr\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.ecn\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.fin\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.psh\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.rst\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.syn\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.tcp_flag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.tcp_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.tcp.urg\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event_timestamp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"firewall_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.request.method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.transport\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.node.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-networkfirewall-*"},"id":"a091f6b0-800e-11eb-8df6-bfc8c422de10","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-18T08:00:51.874Z","version":"WzI5MDg1LDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_stream\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"esTypes\":[\"_type\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_cluster_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_compliance_doc_version\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_compliance_operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_format_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_node_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_node_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_request_body\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"opensearch.audit_request_effective_user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_request_effective_user_is_admin\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_request_initiating_user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_request_layer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_request_origin\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_request_privilege\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_request_remote_address\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Accept\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Accept-Charset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Accept-Encoding\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Accept-Language\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Cache-Control\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Connection\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Content-Encoding\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Content-Length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Content-Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Cookie\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Referer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.Transfer-Encoding\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.User-Agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.origin\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.sec-fetch-dest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.sec-fetch-mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.sec-fetch-site\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.sec-fetch-user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.upgrade-insecure-requests\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.x-datadog-parent-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.x-datadog-sampling-priority\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.x-datadog-trace-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.x-opaque-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_headers.x-opensearch-product-origin\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.XDEBUG_SESSION_START\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params._source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params._source_includes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.allow_no_indices\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.cmd\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.expand_wildcards\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.fields\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.filter_path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.from\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.h\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.if_primary_term\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.if_seq_no\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.ignore\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.ignore_unavailable\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.lang\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.metric\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.page_size\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.policyID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.preference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.pretty\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.queryString\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.refresh\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.requestname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.rest_total_hits_as_int\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.s\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.size\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.sortField\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.sortOrder\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.timeout\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.track_total_hits\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_params.url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_rest_request_path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_trace_doc_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_trace_indices\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_trace_resolved_indices\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_trace_shard_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_trace_task_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_trace_task_parent_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_transport_headers._system_index_access_allowed\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.audit_transport_request_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"opensearch.timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-opensearch-*"},"id":"56478780-4455-11ec-af44-af5d52827e11","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-18T03:08:51.341Z","version":"WzI4NzExLDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"account_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"answers.Class\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"answers.Rdata\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"answers.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.class\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.data\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.question.class\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.question.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.question.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.response_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query_class\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"query_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"srcaddr\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"srcids.instance\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"srcport\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transport\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vpc_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-r53resolver-*"},"id":"f3845ec0-efe1-11ea-99e6-53b5a9b5c41b","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-18T07:49:29.675Z","version":"WzI5MDc5LDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_stream\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":10,\"name\":\"event.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.command\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.lock_time\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"mysql.object\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.query\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"mysql.query_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.query_time\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.queryid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.retcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.serverhost\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.source_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.thread_id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"mysql.username\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.database\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.duration_ms\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.log_level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"postgresql.pid\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.query\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"postgresql.query_step\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.session_time_seconds\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.source_address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.source_port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.thread_id\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"postgresql.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rds.cluster_identifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rds.database_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rds.instance_identifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rds.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":10,\"name\":\"rds.query\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":10,\"name\":\"rds.query_time\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-rds-*"},"id":"afcae450-6c38-11eb-9f5d-6b88a95347ff","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-18T07:58:54.907Z","version":"WzI5MDgzLDFd"}
+{"attributes":{"columns":["event.category","log.level","rds.instance_identifier","rds.database_name","user.name","source.address","rds.message"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"search - RDS","version":1},"id":"8a4a46c0-6f81-11eb-9f5d-6b88a95347ff","migrationVersion":{"search":"7.9.3"},"references":[{"id":"afcae450-6c38-11eb-9f5d-6b88a95347ff","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-08-18T03:08:51.341Z","version":"WzI4NzE0LDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"AuthType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"BucketOwner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"BytesSent\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"CipherSuite\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"EndPoint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ErrorCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"HTTPstatus\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"HostId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ObjectSize\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Referrer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RemoteIP\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RequestDateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RequestID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RequestURI_httpProtoversion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RequestURI_key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RequestURI_operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Requester\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SigV\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"TLSVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"TotalTime\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"TurnAroundTime\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"UserAgent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.request.method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.request.referrer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-s3accesslog-*"},"id":"4f75abd0-b7ca-11ea-9044-07f9c61c294e","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-18T07:57:39.584Z","version":"WzI5MDgyLDFd"}
+{"attributes":{"columns":["cloud.account.id","cloud.region","source.ip","Bucket","Operation"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"search - S3Accesslog","version":1},"id":"c04ab4e0-773b-11ec-aa44-650c320a3c76","migrationVersion":{"search":"7.9.3"},"references":[{"id":"4f75abd0-b7ca-11ea-9044-07f9c61c294e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-08-18T03:08:51.341Z","version":"WzI4NzE2LDFd"}
+{"attributes":{"columns":["cloud.account.id","@log_type","event.module","rule.name","source.ip","source.geo.country_name","cloud.instance.id","user.id","user.name"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[["@timestamp","desc"]],"title":"search - _ECS Fields","version":1},"id":"51adce40-a6c3-11ea-8f8c-f562992caf43","migrationVersion":{"search":"7.4.0"},"references":[{"id":"36049c40-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2021-05-09T01:25:55.004Z","version":"WzEwMjc0LDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Artifact\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"AwsAccountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"CompanyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Compliance.AssociatedStandards.StandardsId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Compliance.RelatedRequirements\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Compliance.SecurityControlId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Compliance.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Compliance.StatusReasons.Description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Compliance.StatusReasons.ReasonCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"CreatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"DetectionMechanism\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"FindingProviderFields.Severity.Label\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"FindingProviderFields.Severity.Normalized\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"FindingProviderFields.Severity.Original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"FindingProviderFields.Severity.Product\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"FindingProviderFields.Types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"FirstObservedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"GeneratorId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"LastObservedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"LastUpdatedBy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"NetworkPath.ComponentId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"NetworkPath.ComponentType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"NetworkPath.Ingress.Destination.PortRanges.Begin\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"NetworkPath.Ingress.Destination.PortRanges.End\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"NetworkPath.Ingress.Protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.FailedCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.InstalledCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.InstalledOtherCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.InstalledPendingReboot\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.InstalledRejectedCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.MissingCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.Operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.OperationEndTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"PatchSummary.OperationStartTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProcessedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.ArchivalReasons:0/Description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.ArchivalReasons:0/ReasonCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.ControlId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.JobArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.JobId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.PatchManagerHash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.RecommendationUrl\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.RelatedAWSResources:0/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.RelatedAWSResources:0/type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.RelatedAWSResources:1/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.RelatedAWSResources:1/type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.ResourceOwnerAccount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.Resources:0/Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.RuleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Bucket.allowsUnencryptedObjectUploads\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Bucket.effectivePermission\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Object.Extension\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Object.Path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Object.PublicAccess\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Object.Size\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.S3Object.StorageClass\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.StandardsArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.StandardsControlArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.StandardsGuideArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.StandardsGuideSubscriptionArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.StandardsSubscriptionArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/config/ConfigComplianceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/config/ConfigRuleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/config/ConfigRuleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/actionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/affectedResources/AWS::CloudTrail::Trail\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/affectedResources/AWS::EC2::Instance\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/affectedResources/AWS::S3::Bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/api\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/callerType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/errorCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteAccountDetails/accountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteAccountDetails/affiliated\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/city/cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/country/countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/geoLocation/lat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/geoLocation/lon\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/organization/asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/organization/asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/organization/isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/remoteIpDetails/organization/org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/awsApiCallAction/serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/dnsRequestAction/blocked\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/dnsRequestAction/domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/dnsRequestAction/protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/parameters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/city/cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/country/countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/geoLocation/lat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/geoLocation/lon\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/organization/asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/organization/asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/organization/isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/remoteIpDetails/organization/org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/requestUri\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/sourceIPs.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/statusCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/userAgent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/kubernetesApiCallAction/verb\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/blocked\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/connectionDirection\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/localIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/localPortDetails/port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/localPortDetails/portName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/city/cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/country/countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/geoLocation/lat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/geoLocation/lon\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/organization/asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/organization/asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/organization/isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remoteIpDetails/organization/org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remotePortDetails/port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/networkConnectionAction/remotePortDetails/portName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/blocked\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/localIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/localPortDetails/port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/localPortDetails/portName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/city/cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/country/countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/geoLocation/lat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/geoLocation/lon\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/organization/asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/organization/asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/organization/isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.0_/remoteIpDetails/organization/org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/localIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/localPortDetails/port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/localPortDetails/portName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/city/cityName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/country/countryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/geoLocation/lat\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/geoLocation/lon\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/organization/asn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/organization/asnOrg\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/organization/isp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/action/portProbeAction/portProbeDetails.1_/remoteIpDetails/organization/org\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/anomalies/anomalousAPIs\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.0_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.0_/firstSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.0_/lastSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.0_/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.1_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.1_/firstSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.1_/lastSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.1_/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.2_/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.2_/firstSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.2_/lastSeen\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/apiCalls.2_/name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/inBytes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/localPort\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/allowUsersToChangePassword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/hardExpiry\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/maxPasswordAge\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/minimumPasswordLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/passwordReusePrevention\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/requireLowercaseCharacters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/requireNumbers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/requireSymbols\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/newPolicy/requireUppercaseCharacters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/allowUsersToChangePassword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/hardExpiry\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/maxPasswordAge\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/minimumPasswordLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/passwordReusePrevention\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/requireLowercaseCharacters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/requireNumbers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/requireSymbols\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/oldPolicy/requireUppercaseCharacters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/outBytes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.10_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.11_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.12_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.13_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.14_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.15_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.16_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.17_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.18_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.19_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.1_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.2_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.3_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.4_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.5_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.6_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.7_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.8_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/portsScannedSample.9_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledAPIsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledAPIsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledASNsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledUserAgentsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledUserNamesAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/frequentProfiledUserTypesAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/infrequentProfiledAPIsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/infrequentProfiledAPIsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledAPIsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledAPIsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledASNsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledUserAgentsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledUserAgentsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledUserNamesAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/profiledBehavior/rareProfiledUserTypesAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.0_/accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.0_/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.0_/principalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.1_/accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.1_/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.1_/principalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.2_/accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.2_/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.2_/principalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.3_/accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.3_/ipAddressV4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/recentCredentials.3_/principalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/sample\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/scannedPort\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/threatListName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/threatName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/countries.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/countries.1_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/countries.2_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/countries.3_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/hoursOfDay.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/isps\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusual/userNames.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusualBehavior/unusualAPIsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusualBehavior/unusualAPIsUserIdentityProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusualBehavior/unusualASNsAccountProfiling\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/unusualProtocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/userAgent/fullUserAgent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/userAgent/userAgentCategory\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/additionalInfo/value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/archived\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/detectorId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/eventFirstSeen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/eventLastSeen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/evidence/threatIntelligenceDetails.0_/threatListName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/evidence/threatIntelligenceDetails.0_/threatNames.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/resourceRole\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/guardduty/service/serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/FindingStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/ProductVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/inspectorScore\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/instanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/packageVulnerabilityDetails/vulnerablePackages/sourceLayerHashes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/resources/1/resourceDetails/awsEc2InstanceDetails/platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/inspector/resources/1/resourceDetails/awsEcrContainerImageDetails/platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/securityhub/CompanyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/securityhub/FindingId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/securityhub/ProductName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductFields.aws/securityhub/annotation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ProductName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"RecordState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Remediation.Recommendation.Text\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Remediation.Recommendation.Url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ResourceTypeAffected\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.DetailedResultsLocation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.AdditionalOccurrences\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Occurrences.Cells.CellReference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Occurrences.Cells.Column\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Occurrences.Cells.ColumnName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.Detections.Occurrences.Cells.Row\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.CustomDataIdentifiers.TotalCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.MimeType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Cells.CellReference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Cells.Column\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Cells.ColumnName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Cells.Row\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.LineRanges.End\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.LineRanges.Start\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.LineRanges.StartColumn\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Pages.PageNumber\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Records.JsonPath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Occurrences.Records.RecordIndex\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.Detections.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SensitiveData.TotalCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.SizeClassified\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.DataClassification.Result.Status.Code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.CreatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.DomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.ResourceRecord.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.ResourceRecord.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.ResourceRecord.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.ValidationDomain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.ValidationMethod\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.DomainValidationOptions.ValidationStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.ExtendedKeyUsages.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.ExtendedKeyUsages.OId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.ImportedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.InUseBy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.IssuedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.Issuer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.KeyAlgorithm\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.KeyUsages.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.NotAfter\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.NotBefore\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.Options.CertificateTransparencyLoggingPreference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalEligibility\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.DomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.ResourceRecord.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.ResourceRecord.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.ResourceRecord.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.ValidationDomain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.ValidationMethod\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.DomainValidationOptions.ValidationStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.RenewalStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.RenewalSummary.UpdatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.Serial\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.SignatureAlgorithm\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.Subject\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.SubjectAlternativeNames\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCertificateManagerCertificate.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudFormationStack.CreationTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudFormationStack.Description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudFormationStack.DisableRollback\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudFormationStack.DriftInformation.StackDriftStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudFormationStack.EnableTerminationProtection\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudFormationStack.Outputs.Description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudFormationStack.Outputs.OutputKey\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudFormationStack.Outputs.OutputValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudFormationStack.StackId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudFormationStack.StackName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudFormationStack.StackStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.CloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.CloudWatchLogsRoleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.HasCustomEventSelectors\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.HomeRegion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.IncludeGlobalServiceEvents\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.IsMultiRegionTrail\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.IsOrganizationTrail\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.KmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.LogFileValidationEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.S3BucketName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudTrailTrail.SnsTopicName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudWatchAlarm.ActionsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudWatchAlarm.AlarmArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudWatchAlarm.AlarmConfigurationUpdatedTimestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudWatchAlarm.AlarmDescription\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudWatchAlarm.AlarmName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudWatchAlarm.ComparisonOperator\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudWatchAlarm.Dimensions.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudWatchAlarm.Dimensions.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudWatchAlarm.EvaluationPeriods\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudWatchAlarm.MetricName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudWatchAlarm.Namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudWatchAlarm.Period\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudWatchAlarm.Statistic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsCloudWatchAlarm.Threshold\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.AllocationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.AssociationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.Domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.InstanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.NetworkBorderGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.NetworkInterfaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.NetworkInterfaceOwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.PrivateIpAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.PublicIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Eip.PublicIpv4Pool\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.IamInstanceProfileArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.ImageId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.IpV4Addresses\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.KeyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.LaunchedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.MetadataOptions.HttpEndpoint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.MetadataOptions.HttpPutResponseHopLimit\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.MetadataOptions.HttpTokens\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.Monitoring.State\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.NetworkInterfaces.NetworkInterfaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.SubnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.VirtualizationType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Instance.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Associations.NetworkAclAssociationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Associations.NetworkAclId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Associations.SubnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Entries.CidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Entries.Egress\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Entries.Protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Entries.RuleAction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.Entries.RuleNumber\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.IsDefault\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.NetworkAclId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.OwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2NetworkAcl.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.GroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.GroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissions.FromPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissions.IpProtocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissions.IpRanges.CidrIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissions.ToPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissions.UserIdGroupPairs.GroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissions.UserIdGroupPairs.UserId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissionsEgress.FromPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissionsEgress.IpProtocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissionsEgress.IpRanges.CidrIp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissionsEgress.ToPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissionsEgress.UserIdGroupPairs.GroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.IpPermissionsEgress.UserIdGroupPairs.UserId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.OwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2SecurityGroup.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.AssignIpv6AddressOnCreation\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.AvailabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.AvailabilityZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.AvailableIpAddressCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.CidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.DefaultForAz\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.MapPublicIpOnLaunch\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.OwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.State\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.SubnetArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.SubnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Subnet.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Attachments.AttachTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Attachments.DeleteOnTermination\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Attachments.InstanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Attachments.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.CreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Encrypted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.KmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.SnapshotId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Volume.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Vpc.CidrBlockAssociationSet.AssociationId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Vpc.CidrBlockAssociationSet.CidrBlock\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Vpc.CidrBlockAssociationSet.CidrBlockState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Vpc.DhcpOptionsId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEc2Vpc.State\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcrContainerImage.Architecture\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcrContainerImage.ImageDigest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcrContainerImage.ImagePublishedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcrContainerImage.ImageTags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcrContainerImage.RegistryId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcrContainerImage.RepositoryName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsCluster.CapacityProviders\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsCluster.ClusterSettings.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsCluster.ClusterSettings.Value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsTaskDefinition.ContainerDefinitions.Cpu\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsTaskDefinition.ContainerDefinitions.Essential\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsTaskDefinition.ContainerDefinitions.Image\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsTaskDefinition.ContainerDefinitions.LogConfiguration.LogDriver\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsTaskDefinition.ContainerDefinitions.LogConfiguration.Options.Awslogs-group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsTaskDefinition.ContainerDefinitions.LogConfiguration.Options.Awslogs-region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsTaskDefinition.ContainerDefinitions.LogConfiguration.Options.Awslogs-stream-prefix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsTaskDefinition.ContainerDefinitions.Memory\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsTaskDefinition.ContainerDefinitions.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsTaskDefinition.ContainerDefinitions.PortMappings.ContainerPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsTaskDefinition.ContainerDefinitions.PortMappings.HostPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsTaskDefinition.ContainerDefinitions.PortMappings.Protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsTaskDefinition.Cpu\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsTaskDefinition.ExecutionRoleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsTaskDefinition.Family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsTaskDefinition.Memory\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsTaskDefinition.NetworkMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsTaskDefinition.RequiresCompatibilities\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEcsTaskDefinition.TaskRoleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEksCluster.Arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEksCluster.ClusterStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsEksCluster.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbLoadBalancer.AvailabilityZones\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbLoadBalancer.CanonicalHostedZoneName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbLoadBalancer.CanonicalHostedZoneNameID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbLoadBalancer.CreatedTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbLoadBalancer.DnsName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbLoadBalancer.ListenerDescriptions.Listener.InstancePort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbLoadBalancer.ListenerDescriptions.Listener.InstanceProtocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbLoadBalancer.ListenerDescriptions.Listener.LoadBalancerPort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbLoadBalancer.ListenerDescriptions.Listener.Protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbLoadBalancer.ListenerDescriptions.Listener.SslCertificateId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbLoadBalancer.ListenerDescriptions.PolicyNames\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbLoadBalancer.LoadBalancerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbLoadBalancer.Policies.OtherPolicies\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbLoadBalancer.Scheme\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbLoadBalancer.SecurityGroups\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbLoadBalancer.SourceSecurityGroup.GroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbLoadBalancer.SourceSecurityGroup.OwnerAlias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbLoadBalancer.Subnets\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.AvailabilityZones.SubnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.AvailabilityZones.ZoneName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.CanonicalHostedZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.CreatedTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.DNSName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.IpAddressType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.Scheme\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.SecurityGroups\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.State.Code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsElbv2LoadBalancer.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamAccessKey.PrincipalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamAccessKey.PrincipalName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamAccessKey.PrincipalType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamGroup.CreateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamGroup.GroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamGroup.GroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamGroup.Path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.AttachmentCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.CreateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.DefaultVersionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.Description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.IsAttachable\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.Path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.PermissionsBoundaryUsageCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.PolicyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.PolicyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.PolicyVersionList.CreateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.PolicyVersionList.IsDefaultVersion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.PolicyVersionList.VersionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamPolicy.UpdateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.AssumeRolePolicyDocument\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.AttachedManagedPolicies.PolicyArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.AttachedManagedPolicies.PolicyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.CreateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.CreateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.InstanceProfileId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.InstanceProfileName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Roles.Arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Roles.AssumeRolePolicyDocument\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Roles.CreateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Roles.Path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Roles.RoleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.InstanceProfileList.Roles.RoleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.Path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.PermissionsBoundary.PermissionsBoundaryArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.PermissionsBoundary.PermissionsBoundaryType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.RoleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.RoleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamRole.RolePolicyList.PolicyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamUser.AttachedManagedPolicies.PolicyArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamUser.AttachedManagedPolicies.PolicyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamUser.CreateDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamUser.Path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamUser.UserId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsIamUser.UserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKinesisStream.Arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKinesisStream.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKinesisStream.RetentionPeriodHours\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKinesisStream.ShardCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKmsKey.AWSAccountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKmsKey.CreationDate\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKmsKey.Description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKmsKey.KeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKmsKey.KeyManager\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKmsKey.KeyState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsKmsKey.Origin\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.Architectures\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.CodeSha256\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.DeadLetterConfig.TargetArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.FunctionName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.Handler\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.LastModified\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.Layers.Arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.Layers.CodeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.MemorySize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.PackageType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.RevisionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.Role\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.Runtime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.Timeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.TracingConfig.Mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsLambdaFunction.Version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.ActivityStreamStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.AllocatedStorage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.AvailabilityZones\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.BackupRetentionPeriod\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.ClusterCreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.CopyTagsToSnapshot\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.CrossAccountClone\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterMembers.DbClusterParameterGroupStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterMembers.DbInstanceIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterMembers.IsClusterWriter\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterMembers.PromotionTier\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterParameterGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbClusterResourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DbSubnetGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.DeletionProtection\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.EnabledCloudWatchLogsExports\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.Endpoint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.Engine\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.EngineMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.EngineVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.HostedZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.HttpEndpointEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.IamDatabaseAuthenticationEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.KmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.MasterUsername\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.MultiAz\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.Port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.PreferredBackupWindow\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.PreferredMaintenanceWindow\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.ReaderEndpoint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.StorageEncrypted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.VpcSecurityGroups.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbCluster.VpcSecurityGroups.VpcSecurityGroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.AllocatedStorage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.AvailabilityZones\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.ClusterCreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.Engine\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.EngineVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.KmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.LicenseModel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.MasterUsername\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.PercentProgress\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.Port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.SnapshotCreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.SnapshotType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.StorageEncrypted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbClusterSnapshot.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.AllocatedStorage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.AutoMinorVersionUpgrade\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.AvailabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.BackupRetentionPeriod\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.CACertificateIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.CopyTagsToSnapshot\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DBClusterIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DBInstanceClass\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DBInstanceIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DBName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbInstancePort\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbInstanceStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbParameterGroups.DbParameterGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbParameterGroups.ParameterApplyStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.DbSubnetGroupDescription\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.DbSubnetGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.SubnetGroupStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.Subnets.SubnetAvailabilityZone.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.Subnets.SubnetIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.Subnets.SubnetStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbSubnetGroup.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DbiResourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.DeletionProtection\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.EnabledCloudWatchLogsExports\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.Endpoint.Address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.Endpoint.HostedZoneId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.Endpoint.Port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.Engine\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.EngineVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.EnhancedMonitoringResourceArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.IAMDatabaseAuthenticationEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.InstanceCreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.KmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.LatestRestorableTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.LicenseModel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.MasterUsername\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.MaxAllocatedStorage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.MonitoringInterval\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.MonitoringRoleArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.MultiAz\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.OptionGroupMemberships.OptionGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.OptionGroupMemberships.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PerformanceInsightsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PerformanceInsightsKmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PerformanceInsightsRetentionPeriod\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PreferredBackupWindow\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PreferredMaintenanceWindow\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PromotionTier\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.PubliclyAccessible\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.SecondaryAvailabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.StorageEncrypted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.StorageType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.VpcSecurityGroups.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbInstance.VpcSecurityGroups.VpcSecurityGroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.AllocatedStorage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.AvailabilityZone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.DbInstanceIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.DbSnapshotIdentifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.DbiResourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.Encrypted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.Engine\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.EngineVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.IamDatabaseAuthenticationEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.InstanceCreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.KmsKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.LicenseModel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.MasterUsername\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.OptionGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.PercentProgress\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.Port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.SnapshotCreateTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.SnapshotType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.StorageType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsRdsDbSnapshot.VpcId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.CreatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.OwnerAccountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.OwnerId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.OwnerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.PublicAccessBlockConfiguration.BlockPublicAcls\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.PublicAccessBlockConfiguration.BlockPublicPolicy\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.PublicAccessBlockConfiguration.IgnorePublicAcls\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.PublicAccessBlockConfiguration.RestrictPublicBuckets\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.ServerSideEncryptionConfiguration.Rules.ApplyServerSideEncryptionByDefault.KMSMasterKeyID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Bucket.ServerSideEncryptionConfiguration.Rules.ApplyServerSideEncryptionByDefault.SSEAlgorithm\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Object.ETag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Object.LastModified\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsS3Object.ServerSideEncryption\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSecretsManagerSecret.Deleted\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSecretsManagerSecret.Description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSecretsManagerSecret.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSecretsManagerSecret.RotationEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSsmPatchCompliance.Patch.ComplianceSummary.ComplianceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSsmPatchCompliance.Patch.ComplianceSummary.CompliantCriticalCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSsmPatchCompliance.Patch.ComplianceSummary.CompliantHighCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSsmPatchCompliance.Patch.ComplianceSummary.CompliantInformationalCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSsmPatchCompliance.Patch.ComplianceSummary.CompliantLowCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSsmPatchCompliance.Patch.ComplianceSummary.CompliantMediumCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSsmPatchCompliance.Patch.ComplianceSummary.CompliantUnspecifiedCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSsmPatchCompliance.Patch.ComplianceSummary.ExecutionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSsmPatchCompliance.Patch.ComplianceSummary.NonCompliantCriticalCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSsmPatchCompliance.Patch.ComplianceSummary.NonCompliantHighCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSsmPatchCompliance.Patch.ComplianceSummary.NonCompliantInformationalCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSsmPatchCompliance.Patch.ComplianceSummary.NonCompliantLowCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSsmPatchCompliance.Patch.ComplianceSummary.NonCompliantMediumCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSsmPatchCompliance.Patch.ComplianceSummary.NonCompliantUnspecifiedCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSsmPatchCompliance.Patch.ComplianceSummary.OverallSeverity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSsmPatchCompliance.Patch.ComplianceSummary.PatchBaselineId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsSsmPatchCompliance.Patch.ComplianceSummary.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsWafv2WebAcl.Arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsWafv2WebAcl.Capacity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsWafv2WebAcl.Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsWafv2WebAcl.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsWafv2WebAcl.Rules.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsWafv2WebAcl.Rules.Priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsWafv2WebAcl.Rules.VisibilityConfig.CloudWatchMetricsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsWafv2WebAcl.Rules.VisibilityConfig.MetricName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsWafv2WebAcl.Rules.VisibilityConfig.SampledRequestsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsWafv2WebAcl.VisibilityConfig.CloudWatchMetricsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsWafv2WebAcl.VisibilityConfig.MetricName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.AwsWafv2WebAcl.VisibilityConfig.SampledRequestsEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.Action Granted\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.Condition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.External Principal\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.External Principal Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.kubernetesDetails/kubernetesUserDetails/groups.0_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.kubernetesDetails/kubernetesUserDetails/groups.1_\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.kubernetesDetails/kubernetesUserDetails/uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.kubernetesDetails/kubernetesUserDetails/username\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Details.Other.kubernetesDetails/kubernetesWorkloadDetails\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.Division\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingEKSClusterTag1\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingEKSClusterTag2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingEKSClusterTag3\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag1\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag3\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag5\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag6\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag7\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag8\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.GeneratedFindingInstaceTag9\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.Team\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.aws:cloud9:environment\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.aws:cloud9:owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.aws:cloudformation:logical-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.aws:cloudformation:stack-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.aws:cloudformation:stack-name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Tags.foo\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Resources.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Sample\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Severity.Label\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Severity.Normalized\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Severity.Original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Severity.Product\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SourceUrl\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ThreatFamilyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ThreatPurpose\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Title\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"UpdatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Cvss.Adjustments.Metric\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Cvss.Adjustments.Reason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Cvss.BaseScore\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Cvss.BaseVector\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Cvss.Source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Cvss.Version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.FixAvailable\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.ReferenceUrls\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.RelatedVulnerabilities\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Vendor.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Vendor.Url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Vendor.VendorCreatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Vendor.VendorSeverity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.Vendor.VendorUpdatedAt\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.Architecture\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.Epoch\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.FilePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.FixedInVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.PackageManager\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.Release\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.Remediation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.SourceLayerArn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Vulnerabilities.VulnerablePackages.Version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Workflow.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkflowState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.instance.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"consolidated_control_findings\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"consolidated_controls_view\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.question.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.direction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-securityhub-*"},"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2023-04-09T05:04:24.380Z","version":"WzEwMTksMV0="}
+{"attributes":{"columns":["cloud.account.id","event.module","rule.name","source.ip","source.geo.country_name","cloud.instance.id","user.id","user.name"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[["@timestamp","desc"]],"title":"search - SecurityHub","version":1},"id":"fbd60240-2d67-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"search":"7.9.3"},"references":[{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2023-04-09T04:40:11.186Z","version":"WzY5MSwxXQ=="}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check.description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"trustedadvisor.check.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check.metadata\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check_ja.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check_ja.description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"trustedadvisor.check_ja.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check_ja.metadata\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.check_ja.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.creation_date\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.refreshable\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.requestid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.categorySpecificSummary.costOptimizing.estimatedMonthlySavings\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.categorySpecificSummary.costOptimizing.estimatedPercentMonthlySavings\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.checkId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResource.isSuppressed\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResource.metadata\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResource.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResource.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResource.resourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResource.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResources.isSuppressed\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResources.metadata\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResources.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResources.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResources.resourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.flaggedResources.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.resourcesSummary.resourcesFlagged\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.resourcesSummary.resourcesIgnored\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.resourcesSummary.resourcesProcessed\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.resourcesSummary.resourcesSuppressed\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trustedadvisor.result.timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-trustedadvisor-*"},"id":"6aac1030-8d64-11ec-ab36-279e9b45c74d","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-18T08:00:22.000Z","version":"WzI5MDg0LDFd"}
+{"attributes":{"columns":["cloud.account.id","cloud.region","event.kind","event.category","check.category","check.name","check.description","result.timestamp","result.flaggedResource.region","result.status","cloud.instance.id","cloud.service.name"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"search - TrustedAdvisor","version":1},"id":"d5c762b0-8d65-11ec-ab36-279e9b45c74d","migrationVersion":{"search":"7.9.3"},"references":[{"id":"6aac1030-8d64-11ec-ab36-279e9b45c74d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-08-18T03:08:51.341Z","version":"WzI4NzIxLDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"account_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"az_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.instance.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dstaddr\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dstport\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":10,\"name\":\"event.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"flow_direction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"instance_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log_status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.direction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.transport\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"packets\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"packets_lost_blackhole\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"packets_lost_mtu_exceeded\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"packets_lost_no_route\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"packets_lost_ttl_expired\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"pkt_dst_aws_service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"pkt_dstaddr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"pkt_src_aws_service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"pkt_srcaddr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"protocol\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"srcaddr\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"srcport\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"subnet_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tcp_flags\",\"type\":\"number\",\"esTypes\":[\"byte\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tgw_attachment_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tgw_dst_az_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tgw_dst_eni\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tgw_dst_subnet_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tgw_dst_vpc_account_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tgw_dst_vpc_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tgw_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tgw_pair_attachment_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tgw_src_az_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tgw_src_eni\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tgw_src_subnet_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tgw_src_vpc_account_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tgw_src_vpc_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traffic_path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vpc_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-vpcflowlogs-*"},"id":"99f81900-806f-11ea-945d-8d0868f4a377","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-11-28T03:13:41.081Z","version":"Wzc0MiwzXQ=="}
+{"attributes":{"columns":["source.ip","source.port","destination.ip","dstport","action","flow_direction"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"log_status\",\"params\":{\"query\":\"OK\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"log_status\":\"OK\"}},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"search - VPCFlowLogsCustom","version":1},"id":"662bb3e0-6572-11ec-8f03-4771d7b9c8b5","migrationVersion":{"search":"7.9.3"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"search","updated_at":"2022-08-18T03:08:51.341Z","version":"WzI4NzIzLDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@timestamp_received\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":10,\"name\":\"event.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"formatVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.request.method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.request.referrer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.clientIp\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.country\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header. connection\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.accept\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.accept_charset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.accept_datetime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.accept_encoding\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.accept_language\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.accept_ranges\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.access_control_request_method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.amp_cache_transform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.authentication\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.authority\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.bearer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.body\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.bs_real_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.c\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.cache_control\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.cdn_loop\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.cf_connecting_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.cf_ipcountry\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.cf_ray\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.client_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.cloudfront_is_desktop_viewer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.cloudfront_is_mobile_viewer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.cloudfront_is_smarttv_viewer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.cloudfront_is_tablet_viewer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.cloudfront_viewer_address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.cloudfront_viewer_country\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.connection\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.connection_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.contact\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.content_length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.content_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.cookie\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.date\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.depth\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.dnt\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.expect\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.expect_ct\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.expires\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.forwarded\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.forwarded_for\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.forwarded_for_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.forwarded_proto\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.from\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.ftx_key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.ftx_sign\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.ftx_ts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.if_modified_since\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.if_none_match\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.kc_api_key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.kc_api_key_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.kc_api_passphrase\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.kc_api_sign\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.kc_api_timestamp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.keep_alive\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.l5d_dtab\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.lixuan_sima\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.magic_value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.max_forwards\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.mclient_x_tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.meta_brandcd\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.meta_consumerapp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.origin\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.originating_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.password\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.pragma\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.prefix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.proxy_authorization\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.proxy_connection\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.proxyheadercheck\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.range\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.referer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.sec_ch_ua\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.sec_ch_ua_mobile\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.sec_ch_ua_platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.sec_dest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.sec_fetch_dest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.sec_fetch_mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.sec_fetch_site\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.sec_fetch_user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.sec_gpc\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.sec_site\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.sec_websocket_key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.sec_websocket_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.server\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.sign\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.soapaction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.spring.cloud.function.routing_expression\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.suffix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.te\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.timeout\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.timestamp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.title\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.transfer_encoding\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.true_client_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.ua_cpu\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.upgrade\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.upgrade_insecure_requests\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.useragent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.via\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.warning\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_aggregate_auth\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_amz_cf_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_amz_id_2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_amzn_trace_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_anyconnect_platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_api_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_att_deviceid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_auth_key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_client_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_correlation_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_csrf_token\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_csrftoken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_datadog_parent_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_datadog_sampling_priority\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_datadog_trace_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_devicemodel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_devtools_emulate_network_conditions_client_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_do_not_track\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_f5_auth_token\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_flt\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_foo\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_foo_bar\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_forward_for\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_forward_proto\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_forwarded\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_forwarded_by\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_forwarded_for\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_forwarded_for_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_forwarded_for_original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_forwarded_host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_forwarded_port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_forwarded_proto\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_forwarded_protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_forwarded_scheme\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_forwarded_server\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_forwarded_ssl\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_forwarder_for\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_frame_options\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_from\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_geoip_country\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_http_destinationurl\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_http_host_override\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_http_method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_http_method_override\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_http_path_override\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_https\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_htx_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_hub_signature\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_if\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_if_unmodified_since\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_ignorecerterrors\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_imbo_test_config\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_insight\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_ip_trail\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_kc\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_ldap_basedn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_ldap_bindpass\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_ldap_url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_leakix\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_loop_control\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_operatingsystem\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_originating_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_proxyuser_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_real_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_remote_addr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_remote_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_request_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_requested_for\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_requested_with\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_transcend_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_true_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_uidh\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_unity_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_wap_profile\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.x_xsrf_token\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.header.xaccept_encoding\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.headers.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.headers.value\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.httpMethod\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.httpVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.requestId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpRequest.uri\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpSourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"httpSourceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"labels.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"integer\",\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"nonTerminatingMatchingRules.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"nonTerminatingMatchingRules.ruleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"oversizeFields\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"integer\",\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.ruleset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ruleGroupList.excludedRules.exclusionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ruleGroupList.excludedRules.ruleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ruleGroupList.nonTerminatingMatchingRules.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ruleGroupList.nonTerminatingMatchingRules.ruleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ruleGroupList.ruleGroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ruleGroupList.terminatingRule.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ruleGroupList.terminatingRule.ruleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"terminatingRuleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"terminatingRuleMatchDetails.conditionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"terminatingRuleMatchDetails.location\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"terminatingRuleMatchDetails.matchedData\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"terminatingRuleType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.query\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"webaclId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-waf-*"},"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-18T07:36:21.380Z","version":"WzI5MDYwLDFd"}
+{"attributes":{"columns":["cloud.account.id","cloud.region","httpSourceName","rule.ruleset","terminatingRuleId","action","source.ip","source.geo.country_name"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"search - AWSWAF","version":1},"id":"8a161670-0aaf-11eb-b53e-8512e4ebda3e","migrationVersion":{"search":"7.9.3"},"references":[{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-08-18T03:08:51.341Z","version":"WzI4NzI1LDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_stream\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Binary\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccessList\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccessMask\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccountExpires\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccountName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AdvancedOptions\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AlgorithmName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Application\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AuthenticationPackageName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BitlockerUserInputTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BootAppStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BootMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BootStatusPolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BootType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BugcheckCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BugcheckParameter1\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BugcheckParameter2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BugcheckParameter3\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BugcheckParameter4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BuildVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CallerProcessId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CallerProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Caption\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Checkpoint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ClientCreationTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ClientProcessId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ComputerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Config\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ConfigAccessPolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ConnectedStandbyInProgress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CorruptionActionState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CountNew\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CountOfCredentialsReturned\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CountOld\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CreationUtcTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CsEntryScenarioInstanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CurrentStratumNumber\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DCName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DestAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DestPort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DeviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DeviceNameLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DeviceTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DeviceVersionMajor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DeviceVersionMinor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Direction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DirtyPages\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DisableIntegrityChecks\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DisplayName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DomainPolicyChanged\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DomainSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DriveName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ElevatedToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.EnableDisableReason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.EnabledNew\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ExtraInfoLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ExtraInfoString\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.FailureReason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.FilterID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.FilterRTID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.FinalStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.FlightSigning\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ForceLogoff\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HandleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HiveName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HiveNameLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HomeDirectory\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HomePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HypervisorDebug\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HypervisorLaunchType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.IdleImplementation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.IdleStateCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ImagePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ImpersonationLevel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Interface\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.IpAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.IpPort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.IsTestConfig\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.KernelDebug\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.KeyFilePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.KeyLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.KeyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.KeyType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.KeysUpdated\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LastBootGood\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LastBootId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LastShutdownGood\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LayerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LayerRTID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LmPackageName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LoadOptions\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogonGuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogonHours\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogonProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogonType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MachineAccountQuota\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MajorVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MandatoryLabel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MaximumPerformancePercent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MemberName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MemberSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MinPasswordAge\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MinimumPasswordLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MinimumPasswordLengthAudit\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MinimumPerformancePercent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MinimumThrottlePercent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MinorVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MixedDomainMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NetStatusCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewProcessId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewSchemeGuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewSd\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewSize\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewTargetUserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewUacValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NominalFrequency\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NumberOfGroupPolicyObjects\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OSEditionID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OSName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OSbuildversion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OSmajorversion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OSminorversion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OSservicepackmajorversion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OSservicepackminorversion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectServer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OldSchemeGuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OldSd\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OldTargetUserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OldTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OldUacValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OperationType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OriginalSize\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PackageName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ParentProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PasswordHistoryLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PasswordLastSet\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PerformanceImplementation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PowerButtonTimestamp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PreAuthType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PreviousCreationUtcTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PreviousTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PrimaryGroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PrivilegeList\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessCreationTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessPath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessPid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessingMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessingTimeInMilliseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProfilePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Properties\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProtocolType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProviderName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PuaCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PuaPolicyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.QfeVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ReadOperation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Reason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.RemoteEventLogging\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ResourceManager\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.RestrictedAdminMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.RestrictedSidCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ReturnCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SamAccountName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ScriptPath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ServiceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ServiceSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ServiceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ServiceVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SessionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ShareName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ShutdownActionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ShutdownEventCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ShutdownReason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SleepInProgress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SourceAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SourcePort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.StartTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.StartType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.State\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.StopTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectDomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectLogonId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectUserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectUserSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SupportInfo1\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SupportInfo2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SystemSleepTransitionsToOn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TSId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetDomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetInfo\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetLinkedLogonId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetLogonGuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetLogonId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetProcessId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetServerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetUserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetUserSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TaskContent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TaskName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TestSigning\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TicketEncryptionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TicketOptions\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TimeDifferenceMilliseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TimeSampleSeconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TimeSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TimeSourceRefId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TokenElevationType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TransactionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.UpdateReason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.UserAccountControl\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.UserParameters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.UserSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.UserWorkstations\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.VirtualAccount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.VsmLaunchType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.VsmPolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Workstation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.WorkstationName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param1\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param10\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param11\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param3\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param5\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param6\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param7\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param8\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param9\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.serviceGuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.updateGuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.updateRevisionNumber\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.updateTitle\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Channel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Culture\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Keywords.Keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"Event.RenderingInfo.Opcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Task\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Channel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Computer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Correlation.ActivityID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.EventID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.EventRecordID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Execution.ProcessID\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Execution.ThreadID\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Keywords\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Opcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Provider.EventSourceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Provider.Guid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Provider.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Qualifiers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Security.UserID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Task\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.TimeCreated.SystemTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.#text\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.AddServiceID.AddServiceStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.AddServiceID.DeviceInstanceID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.AddServiceID.DriverFileName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.AddServiceID.PrimaryService\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.AddServiceID.ServiceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.AddServiceID.UpdateService\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.AddServiceID.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.AuditEventsDropped.Reason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.AuditEventsDropped.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InitChannelPublisherEnableFailure.ChannelPath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InitChannelPublisherEnableFailure.Error.Code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InitChannelPublisherEnableFailure.PublisherGuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InitChannelPublisherEnableFailure.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.DeviceInstanceID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.DriverDescription\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.DriverName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.DriverProvider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.DriverVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.InstallStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.IsDriverOEM\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.RebootOption\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.SetupClass\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.UpgradeDevice\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.#text\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.Channel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.SubjectDomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.SubjectLogonId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.SubjectUserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.SubjectUserSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.xmlns:auto-ns3\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.ServiceShutdown.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.instance.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":10,\"name\":\"event.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-win-event-*"},"id":"fec0f2b0-f1b3-11eb-8e7f-63b315dab53e","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-18T03:42:27.619Z","version":"WzQ3MzkwLDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_stream\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Binary\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccessGranted\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccessList\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccessMask\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccessRemoved\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccountExpires\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AccountName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AdditionalInfo\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AdditionalInfo2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AdvancedOptions\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AlgorithmName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Application\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AttributeLDAPDisplayName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AttributeSyntaxOID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AttributeValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AuditPolicyChanges\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AuditSourceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.AuthenticationPackageName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BitlockerUserInputTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BootAppStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BootMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BootStatusPolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BootType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BugcheckCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BugcheckParameter1\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BugcheckParameter2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BugcheckParameter3\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BugcheckParameter4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.BuildVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CallerProcessId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CallerProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Caption\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CategoryId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Checkpoint\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ClassId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ClassName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ClientCreationTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ClientProcessId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ComputerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Config\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ConfigAccessPolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ConnectedStandbyInProgress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CorruptionActionState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CountNew\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CountOfCredentialsReturned\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CountOld\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CreationUtcTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CsEntryScenarioInstanceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.CurrentStratumNumber\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DCName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DSName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DSType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DestAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DestPort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DeviceDescription\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DeviceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DeviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DeviceNameLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DeviceTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DeviceVersionMajor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DeviceVersionMinor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Direction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DirtyPages\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DisableIntegrityChecks\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DisplayName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DnsHostName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DomainBehaviorVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DomainPolicyChanged\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DomainSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.DriveName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ElevatedToken\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.EnableDisableReason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.EnabledNew\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.EventSourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ExtraInfoLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ExtraInfoString\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.FailureReason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.FilterID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.FilterRTID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.FinalStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.FlightSigning\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ForceLogoff\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.GroupPolicyApplied\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HandleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HiveName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HiveNameLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HomeDirectory\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HomePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HypervisorDebug\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.HypervisorLaunchType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.IdleImplementation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.IdleStateCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ImagePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ImpersonationLevel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Interface\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.IpAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.IpPort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.IsTestConfig\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.KerberosPolicyChange\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.KernelDebug\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.KeyFilePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.KeyLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.KeyName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.KeyType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.KeysUpdated\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LastBootGood\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LastBootId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LastShutdownGood\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LayerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LayerRTID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LmPackageName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LoadOptions\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LockoutThreshold\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogDroppedPacketsEnabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogSuccessfulConnectionsEnabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogonGuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogonHours\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogonProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.LogonType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MachineAccountQuota\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MajorVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MandatoryLabel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MaximumPerformancePercent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MemberName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MemberSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MinPasswordAge\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MinimumPasswordLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MinimumPasswordLengthAudit\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MinimumPerformancePercent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MinimumThrottlePercent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MinorVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MixedDomainMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.MulticastFlowsEnabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NetStatusCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewProcessId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewSchemeGuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewSd\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewSize\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewTargetUserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NewUacValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NominalFrequency\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.NumberOfGroupPolicyObjects\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OSEditionID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OSName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OSbuildversion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OSmajorversion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OSminorversion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OSservicepackmajorversion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OSservicepackminorversion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectClass\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectDN\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectGUID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectServer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ObjectType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OemInformation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OldSchemeGuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OldSd\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OldTargetUserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OldTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OldUacValue\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OpCorrelationID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OperationMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OperationType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.OriginalSize\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PackageName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ParentProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PasswordHistoryLength\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PasswordLastSet\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PasswordProperties\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PerformanceImplementation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PowerButtonTimestamp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PreAuthType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PreviousCreationUtcTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PreviousTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PrimaryGroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PrivilegeList\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessCreationTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessPath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessPid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessingMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProcessingTimeInMilliseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Profile\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProfileChanged\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProfilePath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProfileUsed\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Properties\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProtocolType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ProviderName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PuaCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.PuaPolicyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.QfeVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ReadOperation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Reason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.RemoteAdminEnabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.RemoteEventLogging\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ResourceAttributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ResourceManager\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.RestrictedAdminMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.RestrictedSidCount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ReturnCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.RuleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.RuleName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SamAccountName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ScriptPath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ServiceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ServicePrincipalNames\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ServiceSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ServiceType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ServiceVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SessionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ShareLocalPath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ShareName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ShutdownActionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ShutdownEventCode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.ShutdownReason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SleepInProgress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SourceAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SourcePort\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.StartTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.StartType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.State\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.StopTime\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubcategoryGuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubcategoryId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectDomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectLogonId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectUserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SubjectUserSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SupportInfo1\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SupportInfo2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.SystemSleepTransitionsToOn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TSId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetDomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetInfo\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetLinkedLogonId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetLogonGuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetLogonId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetProcessId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetProcessName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetServerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetUserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TargetUserSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TaskContent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TaskContentNew\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TaskName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TestSigning\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TicketEncryptionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TicketOptions\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TimeDifferenceMilliseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TimeSampleSeconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TimeSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TimeSourceRefId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TokenElevationType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TransactionId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.TreeDelete\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.UpdateReason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.UserAccountControl\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.UserParameters\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.UserPrincipalName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.UserSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.UserWorkstations\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.VendorIds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.VirtualAccount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.VsmLaunchType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.VsmPolicy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.Workstation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.WorkstationName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param1\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param10\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param11\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param3\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param4\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param5\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param6\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param7\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param8\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.param9\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.serviceGuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.updateGuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.updateRevisionNumber\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Data.updateTitle\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.EventData.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Channel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Culture\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Keywords.Keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"Event.RenderingInfo.Opcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.RenderingInfo.Task\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Channel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Computer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Correlation.ActivityID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.EventID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.EventRecordID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Execution.ProcessID\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Execution.ThreadID\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Keywords\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Opcode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Provider.EventSourceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Provider.Guid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Provider.Name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Qualifiers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Security.UserID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Task\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.TimeCreated.SystemTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.System.Version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.#text\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.AddServiceID.AddServiceStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.AddServiceID.DeviceInstanceID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.AddServiceID.DriverFileName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.AddServiceID.PrimaryService\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.AddServiceID.ServiceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.AddServiceID.UpdateService\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.AddServiceID.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.AuditEventsDropped.Reason\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.AuditEventsDropped.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InitChannelPublisherEnableFailure.ChannelPath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InitChannelPublisherEnableFailure.Error.Code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InitChannelPublisherEnableFailure.PublisherGuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InitChannelPublisherEnableFailure.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.DeviceInstanceID\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.DriverDescription\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.DriverName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.DriverProvider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.DriverVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.InstallStatus\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.IsDriverOEM\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.RebootOption\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.SetupClass\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.UpgradeDevice\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.InstallDeviceID.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.#text\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.Channel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.SubjectDomainName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.SubjectLogonId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.SubjectUserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.SubjectUserSid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.LogFileCleared.xmlns:auto-ns3\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.UserData.ServiceShutdown.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"Event.xmlns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.instance.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":10,\"name\":\"event.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"integer\",\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"integer\",\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-win-*"},"id":"e1736c10-f1b3-11eb-8e7f-63b315dab53e","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-18T03:41:40.213Z","version":"WzQ3Mzg5LDFd"}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@log_s3key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"@log_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"BundleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ComputerName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ConnectionState\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ConnectionStateCheckTimestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"DirectoryId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"IpAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"LastKnownUserConnectionTimestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SchemaVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"State\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"SubnetId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"UserName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkspaceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkspaceProperties.ComputeTypeName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkspaceProperties.RootVolumeSizeGib\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkspaceProperties.RunningMode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkspaceProperties.RunningModeAutoStopTimeoutInMinutes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"WorkspaceProperties.UserVolumeSizeGib\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"actionType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"base.tags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientIpAddress\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientPlatform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"clientVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"container.image.tag\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwe_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cwl_timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"destination.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"directoryId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.answers.ttl\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.header_flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"dns.resolved_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"ecs.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"error.message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.ingested\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.outcome\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.risk_score_norm\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.sequence\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"event.severity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.timezone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.accessed\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.attributes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.created\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.ctime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.gid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.inode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mode\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.mtime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"file.uid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"group.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.read.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.disk.write.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.hostname\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.egress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.network.ingress.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"host.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.request.body.content\"}}},{\"count\":10,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"http.response.body.content\"}}},{\"count\":10,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"http.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.alias\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"interface.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.level\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.origin.file.line\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.facility.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.priority\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.syslog.severity.code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"loginTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.bytes\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.community_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"network.forwarded_ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.iana_number\",\"type\":\"number\",\"esTypes\":[\"short\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"network.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.serial_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observer.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"organization.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.full\"}}},{\"count\":0,\"name\":\"os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"os.name\"}}},{\"count\":0,\"name\":\"os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.args_count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.command_line.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"process.command_line\"}}},{\"count\":0,\"name\":\"process.entity_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.exit_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.pgid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"process.pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.ppid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.thread.id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"process.uptime\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"related.hash\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.hosts\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"related.user\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.author\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"rule.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.uuid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"rule.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.ephemeral_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"service.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.as.number\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.as.organization.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"source.nat.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"source.port\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.enrichments.indicator.confidence\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.email.address\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.first_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.last_seen\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.marking.tlp\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.modified_at\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.scanner_stats\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.sightings\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.indicator.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.atomic\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.field\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.occurred\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":0,\"name\":\"threat.enrichments.matched.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"threat.enrichments\"}}},{\"count\":10,\"name\":\"threat.matched.indicators\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.names\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"threat.matched.providers\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"threat.matched.types\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"transaction.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"url.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.full.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.full\"}}},{\"count\":0,\"name\":\"url.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"url.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"url.original\"}}},{\"count\":10,\"name\":\"url.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user.roles\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.device.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":10,\"name\":\"user_agent.original\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.original.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.original\"}}},{\"count\":0,\"name\":\"user_agent.os.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.family.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.family\"}}},{\"count\":0,\"name\":\"user_agent.os.full\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.kernel\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.name.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"user_agent.os.name\"}}},{\"count\":0,\"name\":\"user_agent.os.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.os.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"user_agent.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vlan.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.classification\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.description.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"multi\":{\"parent\":\"vulnerability.description\"}}},{\"count\":0,\"name\":\"vulnerability.enumeration\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.reference\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.report_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.scanner.vendor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.base\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.environmental\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.temporal\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.score.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"vulnerability.severity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"workspacesClientProductName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"log-aws-workspaces-*"},"id":"bdcb4920-da4f-11eb-8e7f-63b315dab53e","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-08-18T07:56:26.520Z","version":"WzI5MDgxLDFd"}
+{"attributes":{"columns":["WorkspaceId","related.user","ComputerName","State","ConnectionState","LastKnownUserConnectionTimestamp"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"@log_type\",\"negate\":false,\"params\":{\"query\":\"workspaces-inventory\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"@log_type\":\"workspaces-inventory\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"search - WorkSpaces inventory","version":1},"id":"53583640-fe79-11eb-8e7f-63b315dab53e","migrationVersion":{"search":"7.9.3"},"references":[{"id":"bdcb4920-da4f-11eb-8e7f-63b315dab53e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"bdcb4920-da4f-11eb-8e7f-63b315dab53e","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"search","updated_at":"2022-08-18T03:08:51.341Z","version":"WzI4NzI5LDFd"}
+{"attributes":{"columns":["actionType","WorkspaceId","source.ip","source.geo.country_name","source.as.organization.name","clientPlatform"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"@log_type\",\"params\":{\"query\":\"workspaces-event\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"@log_type\":\"workspaces-event\"}},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"search - WorkSpaces event","version":1},"id":"60103e60-fe78-11eb-8e7f-63b315dab53e","migrationVersion":{"search":"7.9.3"},"references":[{"id":"bdcb4920-da4f-11eb-8e7f-63b315dab53e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"bdcb4920-da4f-11eb-8e7f-63b315dab53e","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"search","updated_at":"2022-08-18T03:08:51.341Z","version":"WzI4NzMwLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":true,\"params\":{\"query\":\"failure\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"failure\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Connections","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":\"desc\"}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Connections\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-last-update-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Update Time\"},\"schema\":\"metric\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"clientvpn.connection-id\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Connection ID\"},\"schema\":\"bucket\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.username\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"User Name\"},\"schema\":\"metric\"},{\"id\":\"7\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.device-ip\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Source IP\"},\"schema\":\"metric\"},{\"id\":\"8\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"source.geo.country_name\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Country\"},\"schema\":\"metric\"},{\"id\":\"11\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"source.geo.city_name\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"City\"},\"schema\":\"metric\"},{\"id\":\"9\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-start-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"asc\",\"customLabel\":\"Start Time\"},\"schema\":\"metric\"},{\"id\":\"10\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-end-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"End Time\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"854ac790-dfc3-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-05-30T10:52:32.354Z","version":"Wzg4NTIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"ClientVPN - Login Success (markdown)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ClientVPN - Login Success (markdown)\",\"type\":\"markdown\",\"aggs\":[],\"params\":{\"fontSize\":24,\"openLinksInNewTab\":false,\"markdown\":\"Login Success\"}}"},"id":"bbb512e0-e004-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-05-30T10:39:07.534Z","version":"Wzg3NjcsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"success\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"success\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Success Count (line chart)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ClientVPN - Login Success Count (line chart)\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-7d\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"6724a680-e00b-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:13:43.685Z","version":"WzEwMjgwLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"success\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"success\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Success Count by User","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Login Success Count by User\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Login Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":1000,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"NO NAME\",\"customLabel\":\"User Name\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-start-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Last Login Time\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"d376e490-de5a-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:14:42.451Z","version":"WzEwMzQyLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"success\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"success\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Success Count by Source IP","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Login Success Count by Source IP\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source IP\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Country\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.city_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"City\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.as.organization.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"ISP\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"e11a3710-de59-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:14:33.282Z","version":"WzEwMzIyLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"success\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"success\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Success by Device Type","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ClientVPN - Login Success by Device Type\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"clientvpn.device-type\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"283847d0-de5b-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:15:08.010Z","version":"WzEwMzU3LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"success\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"success\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Success Src Country(Pie)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ClientVPN - Login Success Src Country(Pie)\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"bbcaa230-de4d-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:15:38.232Z","version":"WzEwMzgyLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"success\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"success\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Success Src Country(Geo)","uiStateJSON":"{\"mapZoom\":2,\"mapCenter\":[30.094512943110125,2.266144752502442]}","version":1,"visState":"{\"title\":\"ClientVPN - Login Success Src Country(Geo)\",\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":15,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"emsHotLink\":\"?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"attribution\":\"\",\"format\":\"image/png\",\"layers\":\"\",\"styles\":\"\",\"transparent\":true,\"version\":\"\"},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":10,\"minZoom\":0,\"origin\":\"elastic_maps_service\"},\"url\":\"\"}}}"},"id":"5cda0e20-de5a-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:16:04.264Z","version":"WzEwMzk4LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"success\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"success\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Success Src Country(Table)","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Login Success Src Country(Table)\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":15,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"26508e50-de56-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:16:58.801Z","version":"WzEwNDE5LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-reset\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-reset\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Top 10 Network Transfer","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Top 10 Network Transfer\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"network.bytes\",\"customLabel\":\"Bytes\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"clientvpn.connection-id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Connection ID\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"clientvpn.username\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"No Name\",\"customLabel\":\"User Name\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-start-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Start Time\"},\"schema\":\"metric\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-end-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"End Time\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"6a3fc1d0-e00e-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:20:22.330Z","version":"WzEwNDQzLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-reset\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-reset\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Top 10 Long Duration","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Top 10 Long Duration\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"event.duration\",\"customLabel\":\"Duration\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"clientvpn.connection-id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Connection ID\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"clientvpn.username\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"No Name\",\"customLabel\":\"User Name\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-start-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Start Time\"},\"schema\":\"metric\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-end-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"End Time\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"percentageCol\":\"\",\"showMetricsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"}}"},"id":"83d788e0-e00d-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:21:02.922Z","version":"WzEwNDYzLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"ClientVPN - Login Failure (markdown)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ClientVPN - Login Failure (markdown)\",\"type\":\"markdown\",\"aggs\":[],\"params\":{\"fontSize\":24,\"openLinksInNewTab\":false,\"markdown\":\"Login Failure\"}}"},"id":"87a43a80-de5b-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-05-28T07:55:24.072Z","version":"WzM5MTgsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"failure\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"failure\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Failure Count (line chart)","uiStateJSON":"{\"vis\":{\"colors\":{\"Count\":\"#E24D42\"}}}","version":1,"visState":"{\"title\":\"ClientVPN - Login Failure Count (line chart)\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-7d\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":false,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{},\"type\":\"category\"}],\"grid\":{\"categoryLines\":false},\"labels\":{},\"legendPosition\":\"right\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"stacked\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"thresholdLine\":{\"color\":\"#E7664C\",\"show\":false,\"style\":\"full\",\"value\":10,\"width\":1},\"times\":[],\"type\":\"line\",\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Count\"},\"type\":\"value\"}]}}"},"id":"7332b300-e00a-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:21:34.909Z","version":"WzEwNDc5LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"failure\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"failure\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Failure Src Country(Pie)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ClientVPN - Login Failure Src Country(Pie)\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":15,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"c175cf80-de56-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:36:30.679Z","version":"WzEwNTAyLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"failure\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"failure\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Failure Src Country(Table)","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Login Failure Src Country(Table)\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":15,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source Country\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"0b1f89a0-de57-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:36:54.498Z","version":"WzEwNTI5LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"failure\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"failure\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Failure Count by User","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Login Failure Count by User\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"clientvpn.username\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"No Name\",\"customLabel\":\"User Name\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"95b41510-e008-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:37:15.247Z","version":"WzEwNTU0LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"failure\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"failure\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Failure by Certification","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Login Failure by Certification\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"clientvpn.common-name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"No Certification\",\"customLabel\":\"Certification Common Name\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"4fff62e0-e008-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:37:34.390Z","version":"WzEwNTc0LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"failure\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"failure\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Failure by IP address","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Login Failure by IP address\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"},\"schema\":\"metric\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"source.geo.country_name\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Country\"},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"source.geo.city_name\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"City\"},\"schema\":\"metric\"},{\"id\":\"7\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"source.as.organization.name\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"ISP\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"clientvpn.device-ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source IP\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-last-update-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"asc\",\"customLabel\":\"First Seen\"},\"schema\":\"metric\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-last-update-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Last Seen\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"eded4480-e009-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:38:49.982Z","version":"WzEwNjEzLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"ClientVPN - Details(markdown)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ClientVPN - Details(markdown)\",\"type\":\"markdown\",\"aggs\":[],\"params\":{\"fontSize\":24,\"openLinksInNewTab\":false,\"markdown\":\"Details\"}}"},"id":"5dfe40e0-e01d-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-05-30T13:36:26.406Z","version":"WzEwMTE2LDFd"}
+{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{},\"gridData\":{\"h\":14,\"i\":\"9a8d40d3-c4e2-49c7-8fe4-af313c0aa426\",\"w\":48,\"x\":0,\"y\":0},\"panelIndex\":\"9a8d40d3-c4e2-49c7-8fe4-af313c0aa426\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{\"hidePanelTitles\":true},\"gridData\":{\"h\":3,\"i\":\"c6e0d6e7-7910-453c-bf04-c5e3c51467d3\",\"w\":48,\"x\":0,\"y\":14},\"panelIndex\":\"c6e0d6e7-7910-453c-bf04-c5e3c51467d3\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"7454ab88-2699-4af2-9553-cdee0e34b3a5\",\"w\":48,\"x\":0,\"y\":17},\"panelIndex\":\"7454ab88-2699-4af2-9553-cdee0e34b3a5\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":14,\"i\":\"d96627e0-7709-4199-b48a-f18b2a254c35\",\"w\":14,\"x\":0,\"y\":26},\"panelIndex\":\"d96627e0-7709-4199-b48a-f18b2a254c35\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":14,\"i\":\"7862d506-b8f7-4e58-9e62-d31372bbe477\",\"w\":22,\"x\":14,\"y\":26},\"panelIndex\":\"7862d506-b8f7-4e58-9e62-d31372bbe477\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":7,\"i\":\"c28dc991-a426-4e84-9f77-9cbe6c228616\",\"w\":12,\"x\":36,\"y\":26},\"panelIndex\":\"c28dc991-a426-4e84-9f77-9cbe6c228616\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":7,\"i\":\"0b6992da-a824-4e2c-ba29-9e4825158775\",\"w\":12,\"x\":36,\"y\":33},\"panelIndex\":\"0b6992da-a824-4e2c-ba29-9e4825158775\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_6\"},{\"embeddableConfig\":{\"mapCenter\":null,\"mapZoom\":null},\"gridData\":{\"h\":17,\"i\":\"37bef3d5-f9fd-4e1e-9b80-cd85c8f88a40\",\"w\":36,\"x\":0,\"y\":40},\"panelIndex\":\"37bef3d5-f9fd-4e1e-9b80-cd85c8f88a40\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_7\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":17,\"i\":\"d78d5a28-caf9-46d9-a771-8997394938b9\",\"w\":12,\"x\":36,\"y\":40},\"panelIndex\":\"d78d5a28-caf9-46d9-a771-8997394938b9\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_8\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"7ebb918b-54b6-48a9-a4e7-01b85d07ef82\",\"w\":24,\"x\":0,\"y\":57},\"panelIndex\":\"7ebb918b-54b6-48a9-a4e7-01b85d07ef82\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_9\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"4b8e70cf-d692-4b02-95a3-6dd8879e00fc\",\"w\":24,\"x\":24,\"y\":57},\"panelIndex\":\"4b8e70cf-d692-4b02-95a3-6dd8879e00fc\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_10\"},{\"embeddableConfig\":{\"hidePanelTitles\":true},\"gridData\":{\"h\":3,\"i\":\"259518e1-9fc7-4c0d-ab96-cbeba1846989\",\"w\":48,\"x\":0,\"y\":72},\"panelIndex\":\"259518e1-9fc7-4c0d-ab96-cbeba1846989\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_11\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":8,\"i\":\"d2f1d814-6ae6-4637-a1be-658e9c13148e\",\"w\":48,\"x\":0,\"y\":75},\"panelIndex\":\"d2f1d814-6ae6-4637-a1be-658e9c13148e\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_12\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"a043c505-ec87-4bdd-9e79-eb5ea4860b0d\",\"w\":15,\"x\":0,\"y\":83},\"panelIndex\":\"a043c505-ec87-4bdd-9e79-eb5ea4860b0d\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_13\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"5ba1c59c-65e3-4497-93e9-092c4b244aa1\",\"w\":11,\"x\":15,\"y\":83},\"panelIndex\":\"5ba1c59c-65e3-4497-93e9-092c4b244aa1\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_14\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"f553dfe8-265b-4b1f-a44a-8d3881407ff7\",\"w\":11,\"x\":26,\"y\":83},\"panelIndex\":\"f553dfe8-265b-4b1f-a44a-8d3881407ff7\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_15\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"d5dd9469-5bb6-4043-bda7-d1b6e9e89df0\",\"w\":11,\"x\":37,\"y\":83},\"panelIndex\":\"d5dd9469-5bb6-4043-bda7-d1b6e9e89df0\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_16\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":10,\"i\":\"1948c3a5-b886-4783-87f3-d1da7dd4f151\",\"w\":48,\"x\":0,\"y\":98},\"panelIndex\":\"1948c3a5-b886-4783-87f3-d1da7dd4f151\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_17\"},{\"embeddableConfig\":{\"hidePanelTitles\":true},\"gridData\":{\"h\":3,\"i\":\"d12b43d3-c88a-4a04-b889-08fa76f32d0c\",\"w\":48,\"x\":0,\"y\":108},\"panelIndex\":\"d12b43d3-c88a-4a04-b889-08fa76f32d0c\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_18\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":21,\"i\":\"40b28a32-362e-4eab-bcab-4d51fecfef68\",\"w\":48,\"x\":0,\"y\":111},\"panelIndex\":\"40b28a32-362e-4eab-bcab-4d51fecfef68\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_19\"}]","timeRestore":false,"title":"ClientVPN - Summary","version":1},"id":"d5882440-de4d-11ec-9f8e-d90a7585513a","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"854ac790-dfc3-11ec-9f8e-d90a7585513a","name":"panel_0","type":"visualization"},{"id":"bbb512e0-e004-11ec-9f8e-d90a7585513a","name":"panel_1","type":"visualization"},{"id":"6724a680-e00b-11ec-9f8e-d90a7585513a","name":"panel_2","type":"visualization"},{"id":"d376e490-de5a-11ec-9f8e-d90a7585513a","name":"panel_3","type":"visualization"},{"id":"e11a3710-de59-11ec-9f8e-d90a7585513a","name":"panel_4","type":"visualization"},{"id":"283847d0-de5b-11ec-9f8e-d90a7585513a","name":"panel_5","type":"visualization"},{"id":"bbcaa230-de4d-11ec-9f8e-d90a7585513a","name":"panel_6","type":"visualization"},{"id":"5cda0e20-de5a-11ec-9f8e-d90a7585513a","name":"panel_7","type":"visualization"},{"id":"26508e50-de56-11ec-9f8e-d90a7585513a","name":"panel_8","type":"visualization"},{"id":"6a3fc1d0-e00e-11ec-9f8e-d90a7585513a","name":"panel_9","type":"visualization"},{"id":"83d788e0-e00d-11ec-9f8e-d90a7585513a","name":"panel_10","type":"visualization"},{"id":"87a43a80-de5b-11ec-9f8e-d90a7585513a","name":"panel_11","type":"visualization"},{"id":"7332b300-e00a-11ec-9f8e-d90a7585513a","name":"panel_12","type":"visualization"},{"id":"c175cf80-de56-11ec-9f8e-d90a7585513a","name":"panel_13","type":"visualization"},{"id":"0b1f89a0-de57-11ec-9f8e-d90a7585513a","name":"panel_14","type":"visualization"},{"id":"95b41510-e008-11ec-9f8e-d90a7585513a","name":"panel_15","type":"visualization"},{"id":"4fff62e0-e008-11ec-9f8e-d90a7585513a","name":"panel_16","type":"visualization"},{"id":"eded4480-e009-11ec-9f8e-d90a7585513a","name":"panel_17","type":"visualization"},{"id":"5dfe40e0-e01d-11ec-9f8e-d90a7585513a","name":"panel_18","type":"visualization"},{"id":"af416290-e00c-11ec-9f8e-d90a7585513a","name":"panel_19","type":"search"}],"type":"dashboard","updated_at":"2022-06-02T01:39:08.325Z","version":"WzEwNjMyLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - AWS Account(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}},\"title\":\"CloudFront - AWS Account(Bar)\"}"},"id":"08b846e0-0945-11eb-8e67-0fbaab367426","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-07T13:05:21.865Z","version":"WzQ3MDYsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - Edge Location(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"x_edge_location\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Edge Location\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"x_edge_location\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}},\"title\":\"CloudFront - Edge Location(Bar)\"}"},"id":"68e3a710-0947-11eb-8e67-0fbaab367426","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-07T13:05:21.865Z","version":"WzQ3MDcsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - Distribution Domain Name","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"CloudFront - Distribution Domain Name\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"distribution_id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Distribution ID\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"url.domain\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"URL Domain Name\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"27e41770-02c3-11eb-8e67-0fbaab367426","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-08T13:12:44.821Z","version":"WzU5MjAsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - Status Code Trend","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudFront - Status Code Trend\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"http.response.status_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-3y\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\" \"},\"schema\":\"segment\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"caf00e90-fd5c-11ea-83ab-a79b83592ee0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-08T07:10:41.011Z","version":"WzU0MjQsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - Request Size","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudFront - Request Size\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"http.request.bytes\",\"json\":\"{\\n \\\"script\\\": \\\"doc['http.request.bytes'].value / 1024.0 / 1024.0 / 1024.0\\\"\\n}\",\"customLabel\":\"Request Size(GiB)\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-3y\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\" \"},\"schema\":\"segment\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Request Size(GiB)\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"Request Size(GiB)\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"bottom\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"528e1870-fd70-11ea-83ab-a79b83592ee0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-08T07:13:40.889Z","version":"WzU1MjQsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - Status Code (Pie)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudFront - Status Code (Pie)\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"http.response.status_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"2ded1a30-171c-11ed-809e-cd7826f779da","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-08T13:15:31.539Z","version":"WzU5NjYsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - Result Type(Pie)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudFront - Result Type(Pie)\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"x_edge_result_type\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"8aaa10a0-0910-11eb-8e67-0fbaab367426","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-08T13:17:53.100Z","version":"WzYwMDUsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - Response Size","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudFront - Response Size\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"http.response.bytes\",\"json\":\"{\\n \\\"script\\\": \\\"doc['http.response.bytes'].value / 1024.0 / 1024.0 / 1024.0\\\"\\n}\",\"customLabel\":\"Response Size(GiB)\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-3y\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"　\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\",\"defaultYExtents\":false,\"setYExtents\":true,\"max\":null},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Response Size(GiB)\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"Response Size(GiB)\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"bottom\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"9a05c240-fd6e-11ea-83ab-a79b83592ee0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-08T07:13:04.617Z","version":"WzU0OTYsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - Response Time (seconds)","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"percentiles\",\"schema\":\"metric\",\"params\":{\"field\":\"time_taken\",\"percents\":[50,95,99],\"customLabel\":\"Response Time\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"x_edge_result_type\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Result Type\"}}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"},\"title\":\"CloudFront - Response Time (seconds)\"}"},"id":"ddf9df10-fd76-11ea-83ab-a79b83592ee0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-07T13:05:21.865Z","version":"WzQ3MTIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - URL Scheme(Pie)","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"url.scheme\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"title\":\"CloudFront - URL Scheme(Pie)\"}"},"id":"5a5785c0-0949-11eb-8e67-0fbaab367426","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-07T13:05:21.865Z","version":"WzQ3MTUsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - SSL Protocol(Pie)","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ssl_protocol\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"title\":\"CloudFront - SSL Protocol(Pie)\"}"},"id":"a522b570-0949-11eb-8e67-0fbaab367426","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-07T13:05:21.865Z","version":"WzQ3MTYsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - SSL Cipher","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"ssl_cipher\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":30,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"SSL Cipher\"}}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"},\"title\":\"CloudFront - SSL Cipher\"}"},"id":"154cc390-02c4-11eb-8e67-0fbaab367426","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-07T13:05:21.865Z","version":"WzQ3MTcsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - Source IP(Pie)","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"title\":\"CloudFront - Source IP(Pie)\"}"},"id":"42738990-fd5f-11ea-83ab-a79b83592ee0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-07T13:05:21.865Z","version":"WzQ3MTMsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - Top 10 Access","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":3,\"direction\":\"desc\"}}}}","version":1,"visState":"{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"http.request.method\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Method\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"url.domain\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Domain\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"url.path\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Path\"}}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"},\"title\":\"CloudFront - Top 10 Access\"}"},"id":"159ec780-fd5b-11ea-83ab-a79b83592ee0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-07T13:05:21.865Z","version":"WzQ3MTksMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - Source Country(Pie)","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"source.geo.country_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"title\":\"CloudFront - Source Country(Pie)\"}"},"id":"32b187f0-08f4-11eb-8e67-0fbaab367426","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-07T13:05:21.865Z","version":"WzQ3MTQsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - Top 10 Referer","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"http.request.referrer\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Referer\"}}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"},\"title\":\"CloudFront - Top 10 Referer\"}"},"id":"adb29610-fd73-11ea-83ab-a79b83592ee0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-07T13:05:21.865Z","version":"WzQ3MjAsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - Top 10 UserAgent","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"user_agent.original\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"UserAgent\"}}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"},\"title\":\"CloudFront - Top 10 UserAgent\"}"},"id":"7eba2950-fd72-11ea-83ab-a79b83592ee0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-07T13:05:21.865Z","version":"WzQ3MjEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - UserAgent (PIE)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudFront - UserAgent (PIE)\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user_agent.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Others\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":false,\"last_level\":true,\"truncate\":100}}}"},"id":"32ae7e00-16c8-11ed-a231-f1a0aecfc2f9","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-08T13:19:57.225Z","version":"WzYwMzksMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - UserAgent OS","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudFront - UserAgent OS\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user_agent.os.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other2\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":false,\"last_level\":true,\"truncate\":100}}}"},"id":"208cf660-16c9-11ed-a231-f1a0aecfc2f9","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-08T13:20:29.441Z","version":"WzYwNzMsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - UserAgent Device","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudFront - UserAgent Device\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user_agent.device.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other2\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":false,\"last_level\":true,\"truncate\":100}}}"},"id":"eed37860-16c8-11ed-a231-f1a0aecfc2f9","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-08T13:26:51.416Z","version":"WzYxMzEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - Source Country","uiStateJSON":"{\"mapZoom\":2,\"mapCenter\":[52.05249047600099,0]}","version":1,"visState":"{\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"source.geo.country_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Blues\",\"emsHotLink\":\"https://maps.elastic.co/v7.7?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"format\":\"image/png\",\"transparent\":true},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":10,\"minZoom\":0,\"origin\":\"elastic_maps_service\"}}},\"title\":\"CloudFront - Source Country\"}"},"id":"40f2e030-fd63-11ea-83ab-a79b83592ee0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-07T13:05:21.865Z","version":"WzQ3MjIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - Source Country (Table)","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"CloudFront - Source Country (Table)\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source Country\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"595423a0-16ed-11ed-a231-f1a0aecfc2f9","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-08T07:52:01.309Z","version":"WzU3MDMsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - Maximum Latency per Country","uiStateJSON":"{\"mapZoom\":2,\"mapCenter\":[52.05249047600099,0]}","version":1,"visState":"{\"title\":\"CloudFront - Maximum Latency per Country\",\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"max\",\"params\":{\"field\":\"time_taken\",\"customLabel\":\"Maximum Latency (seconds)\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Green to Red\",\"emsHotLink\":\"https://maps.elastic.co/v7.7?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"format\":\"image/png\",\"transparent\":true},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":10,\"minZoom\":0,\"origin\":\"elastic_maps_service\"}}}}"},"id":"1b6c66a0-08f9-11eb-8e67-0fbaab367426","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-08T07:54:30.326Z","version":"WzU3MzAsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudFront - Maximum Latency per Country (Table)","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"CloudFront - Maximum Latency per Country (Table)\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"max\",\"params\":{\"field\":\"time_taken\",\"customLabel\":\"Maximum Latency (seconds)\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source Country\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"8deab470-16ee-11ed-a231-f1a0aecfc2f9","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eacb9d40-f0de-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-08T07:48:55.735Z","version":"WzU2NzUsMV0="}
+{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{},\"gridData\":{\"h\":6,\"i\":\"1e6c50bd-32b4-4ff3-98e0-7126b93c05c3\",\"w\":24,\"x\":0,\"y\":0},\"panelIndex\":\"1e6c50bd-32b4-4ff3-98e0-7126b93c05c3\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":6,\"i\":\"8d4d14ff-58fc-42cd-a20d-3d77b02424c1\",\"w\":24,\"x\":24,\"y\":0},\"panelIndex\":\"8d4d14ff-58fc-42cd-a20d-3d77b02424c1\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":10,\"i\":\"fc274f3a-01c1-4055-a9cb-1edab03a9cc3\",\"w\":24,\"x\":0,\"y\":6},\"panelIndex\":\"fc274f3a-01c1-4055-a9cb-1edab03a9cc3\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":10,\"i\":\"de06dfe4-2a62-4806-92c9-7b576eba698f\",\"w\":24,\"x\":24,\"y\":6},\"panelIndex\":\"de06dfe4-2a62-4806-92c9-7b576eba698f\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":10,\"i\":\"40afc896-4cf4-426b-998b-4d3413e58307\",\"w\":24,\"x\":0,\"y\":16},\"panelIndex\":\"40afc896-4cf4-426b-998b-4d3413e58307\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":10,\"i\":\"16f21f43-03b8-438b-ba7c-d35eb41614f9\",\"w\":12,\"x\":24,\"y\":16},\"panelIndex\":\"16f21f43-03b8-438b-ba7c-d35eb41614f9\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":10,\"i\":\"de156635-5ea4-4d0f-814b-6643631b128b\",\"w\":12,\"x\":36,\"y\":16},\"panelIndex\":\"de156635-5ea4-4d0f-814b-6643631b128b\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_6\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":10,\"i\":\"6431c11f-134f-414c-b94a-e0b431c11df2\",\"w\":24,\"x\":0,\"y\":26},\"panelIndex\":\"6431c11f-134f-414c-b94a-e0b431c11df2\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_7\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":10,\"i\":\"017f82c1-83be-4160-a91f-235fdd18d234\",\"w\":24,\"x\":24,\"y\":26},\"panelIndex\":\"017f82c1-83be-4160-a91f-235fdd18d234\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_8\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":10,\"i\":\"c5080c60-4b34-472d-b7be-7ec347830403\",\"w\":12,\"x\":0,\"y\":36},\"panelIndex\":\"c5080c60-4b34-472d-b7be-7ec347830403\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_9\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":10,\"i\":\"fd925940-cff4-402a-920c-f1efa0a9f23c\",\"w\":12,\"x\":12,\"y\":36},\"panelIndex\":\"fd925940-cff4-402a-920c-f1efa0a9f23c\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_10\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":10,\"i\":\"f1299a32-853c-4ad5-80b8-aa70acadd674\",\"w\":12,\"x\":24,\"y\":36},\"panelIndex\":\"f1299a32-853c-4ad5-80b8-aa70acadd674\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_11\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":12,\"i\":\"ca826268-0877-45dc-8479-7a4de446283c\",\"w\":12,\"x\":36,\"y\":36},\"panelIndex\":\"ca826268-0877-45dc-8479-7a4de446283c\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_12\"},{\"embeddableConfig\":{\"params\":{\"sort\":{\"columnIndex\":3,\"direction\":\"asc\"}},\"vis\":{\"params\":{\"sort\":{\"columnIndex\":3,\"direction\":\"desc\"}}}},\"gridData\":{\"h\":14,\"i\":\"7cd90e0a-d1fb-41b3-8980-055bae653bf0\",\"w\":36,\"x\":0,\"y\":46},\"panelIndex\":\"7cd90e0a-d1fb-41b3-8980-055bae653bf0\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_13\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":12,\"i\":\"66cd79fe-54a8-4cb1-aa21-b89921c46ce7\",\"w\":12,\"x\":36,\"y\":48},\"panelIndex\":\"66cd79fe-54a8-4cb1-aa21-b89921c46ce7\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_14\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":12,\"i\":\"5cdc4326-e085-4e9d-9124-449e8cef0199\",\"w\":24,\"x\":0,\"y\":60},\"panelIndex\":\"5cdc4326-e085-4e9d-9124-449e8cef0199\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_15\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":12,\"i\":\"305524dc-4564-4649-a081-a7e28a2a76cc\",\"w\":24,\"x\":24,\"y\":60},\"panelIndex\":\"305524dc-4564-4649-a081-a7e28a2a76cc\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_16\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":14,\"i\":\"2cc97841-a01c-4d69-bc70-cd3d5e2142c2\",\"w\":16,\"x\":0,\"y\":72},\"panelIndex\":\"2cc97841-a01c-4d69-bc70-cd3d5e2142c2\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_17\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":14,\"i\":\"4a585906-ba34-4873-86c9-410862af2fc5\",\"w\":16,\"x\":16,\"y\":72},\"panelIndex\":\"4a585906-ba34-4873-86c9-410862af2fc5\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_18\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":14,\"i\":\"6906234d-a181-48db-8a6f-62f70fe7729a\",\"w\":16,\"x\":32,\"y\":72},\"panelIndex\":\"6906234d-a181-48db-8a6f-62f70fe7729a\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_19\"},{\"embeddableConfig\":{\"mapCenter\":null,\"mapZoom\":2},\"gridData\":{\"h\":16,\"i\":\"52fb3e11-566f-48fb-bde1-95af9e45d786\",\"w\":33,\"x\":0,\"y\":86},\"panelIndex\":\"52fb3e11-566f-48fb-bde1-95af9e45d786\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_20\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":16,\"i\":\"50b159df-0e84-4a65-8913-cc055368e41a\",\"w\":15,\"x\":33,\"y\":86},\"panelIndex\":\"50b159df-0e84-4a65-8913-cc055368e41a\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_21\"},{\"embeddableConfig\":{\"mapCenter\":null,\"mapZoom\":2},\"gridData\":{\"h\":16,\"i\":\"8cec221d-4bd7-4cf7-8732-23b3b0a49571\",\"w\":33,\"x\":0,\"y\":102},\"panelIndex\":\"8cec221d-4bd7-4cf7-8732-23b3b0a49571\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_22\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":16,\"i\":\"bb6650d7-4737-43b9-8785-c3ad8f2da488\",\"w\":15,\"x\":33,\"y\":102},\"panelIndex\":\"bb6650d7-4737-43b9-8785-c3ad8f2da488\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_23\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":23,\"i\":\"2ce3a1a8-35a6-4cc4-a388-dd7c836e15b9\",\"w\":48,\"x\":0,\"y\":118},\"panelIndex\":\"2ce3a1a8-35a6-4cc4-a388-dd7c836e15b9\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_24\"}]","timeRestore":false,"title":"CloudFront Summary","version":1},"id":"895a6640-fd77-11ea-83ab-a79b83592ee0","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"08b846e0-0945-11eb-8e67-0fbaab367426","name":"panel_0","type":"visualization"},{"id":"68e3a710-0947-11eb-8e67-0fbaab367426","name":"panel_1","type":"visualization"},{"id":"27e41770-02c3-11eb-8e67-0fbaab367426","name":"panel_2","type":"visualization"},{"id":"caf00e90-fd5c-11ea-83ab-a79b83592ee0","name":"panel_3","type":"visualization"},{"id":"528e1870-fd70-11ea-83ab-a79b83592ee0","name":"panel_4","type":"visualization"},{"id":"2ded1a30-171c-11ed-809e-cd7826f779da","name":"panel_5","type":"visualization"},{"id":"8aaa10a0-0910-11eb-8e67-0fbaab367426","name":"panel_6","type":"visualization"},{"id":"9a05c240-fd6e-11ea-83ab-a79b83592ee0","name":"panel_7","type":"visualization"},{"id":"ddf9df10-fd76-11ea-83ab-a79b83592ee0","name":"panel_8","type":"visualization"},{"id":"5a5785c0-0949-11eb-8e67-0fbaab367426","name":"panel_9","type":"visualization"},{"id":"a522b570-0949-11eb-8e67-0fbaab367426","name":"panel_10","type":"visualization"},{"id":"154cc390-02c4-11eb-8e67-0fbaab367426","name":"panel_11","type":"visualization"},{"id":"42738990-fd5f-11ea-83ab-a79b83592ee0","name":"panel_12","type":"visualization"},{"id":"159ec780-fd5b-11ea-83ab-a79b83592ee0","name":"panel_13","type":"visualization"},{"id":"32b187f0-08f4-11eb-8e67-0fbaab367426","name":"panel_14","type":"visualization"},{"id":"adb29610-fd73-11ea-83ab-a79b83592ee0","name":"panel_15","type":"visualization"},{"id":"7eba2950-fd72-11ea-83ab-a79b83592ee0","name":"panel_16","type":"visualization"},{"id":"32ae7e00-16c8-11ed-a231-f1a0aecfc2f9","name":"panel_17","type":"visualization"},{"id":"208cf660-16c9-11ed-a231-f1a0aecfc2f9","name":"panel_18","type":"visualization"},{"id":"eed37860-16c8-11ed-a231-f1a0aecfc2f9","name":"panel_19","type":"visualization"},{"id":"40f2e030-fd63-11ea-83ab-a79b83592ee0","name":"panel_20","type":"visualization"},{"id":"595423a0-16ed-11ed-a231-f1a0aecfc2f9","name":"panel_21","type":"visualization"},{"id":"1b6c66a0-08f9-11eb-8e67-0fbaab367426","name":"panel_22","type":"visualization"},{"id":"8deab470-16ee-11ed-a231-f1a0aecfc2f9","name":"panel_23","type":"visualization"},{"id":"8ca57a50-16da-11ed-a61a-0b0a6420bb69","name":"panel_24","type":"search"}],"type":"dashboard","updated_at":"2022-08-08T13:35:14.342Z","version":"WzYyOTksMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"CloudHSM - eventName (CloudTrail)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudHSM - eventName (CloudTrail)\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"eventName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"00ff9690-c4f3-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c4423070-c4f0-11ec-ab71-6f054bb9d785","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-04-25T23:54:11.449Z","version":"WzE1NjA0LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"CloudHSM - IAM User (CloudTrail)","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"CloudHSM - IAM User (CloudTrail)\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"IAM User\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source IP\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source Country\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"@timestamp\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Last Seen\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"b74ac370-c4f3-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c4423070-c4f0-11ec-ab71-6f054bb9d785","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-04-26T00:01:53.186Z","version":"WzE1NjQzLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"CloudHSM - AWS Account Region","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"CloudHSM - AWS Account Region\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"72fc6230-d350-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c4423070-c4f0-11ec-ab71-6f054bb9d785","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-05-14T06:38:22.162Z","version":"WzE4MzcxLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"CloudHSM - Log Filter","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudHSM - Log Filter\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1650886828252\",\"fieldName\":\"cloud.account.id\",\"parent\":\"\",\"label\":\"AWS Account\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":false,\"dynamicOptions\":false,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1650886897560\",\"fieldName\":\"cloud.region\",\"parent\":\"\",\"label\":\"Cloud Region\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_1_index_pattern\"},{\"id\":\"1650887018076\",\"fieldName\":\"cloudhsm.cluster_id\",\"parent\":\"1650886897560\",\"label\":\"Cluster Name\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_2_index_pattern\"},{\"id\":\"1650929226519\",\"fieldName\":\"cloudhsm.hsm_id\",\"parent\":\"1650887018076\",\"label\":\"Instance Name\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_3_index_pattern\"}],\"updateFiltersOnChange\":false,\"useTimeFilter\":false,\"pinFilters\":false}}"},"id":"37cc6e20-c48d-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"control_0_index_pattern","type":"index-pattern"},{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"control_1_index_pattern","type":"index-pattern"},{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"control_2_index_pattern","type":"index-pattern"},{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"control_3_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2022-05-14T01:15:35.147Z","version":"WzE3NzYyLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - HSM Command Type","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudHSM - HSM Command Type\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.command_type\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"row\":false}}"},"id":"e09cec40-c4e8-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-25T22:41:42.148Z","version":"WzE1MzkzLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - CloudHSM Log Type","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudHSM - CloudHSM Log Type\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.log_type\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":15,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"row\":true}}"},"id":"047a5150-c4e6-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-05-02T13:46:46.679Z","version":"WzE3MDkzLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - HSM Opcode","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudHSM - HSM Opcode\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.opcode\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"586e4b10-c4e9-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-25T22:45:03.169Z","version":"WzE1NDI4LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - Generate Symmetric Keys","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudHSM - Generate Symmetric Keys\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"cloudhsm.priv_secret_key_handle\",\"customLabel\":\"\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"cloudhsm.opcode:CN_GENERATE_KEY AND event.outcome:success\",\"language\":\"kuery\"},\"label\":\"\"}]},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":false},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"a1e29590-d348-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-05-14T06:03:37.987Z","version":"WzE4MTE5LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - Generate Asymmetric Keys","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudHSM - Generate Asymmetric Keys\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"cloudhsm.priv_secret_key_handle\",\"customLabel\":\"Private\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"cloudhsm.opcode:CN_GENERATE_KEY_PAIR AND event.outcome:success\",\"language\":\"kuery\"},\"label\":\" \"}]},\"schema\":\"group\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"cloudhsm.public_key_handle\",\"customLabel\":\"Public\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"ef52a680-d348-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-05-14T06:02:33.228Z","version":"WzE4MTAwLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - Delete Keys","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudHSM - Delete Keys\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"cloudhsm.key_handle\",\"customLabel\":\"Private\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"cloudhsm.opcode:(CN_TOMBSTONE_OBJECT OR CN_DESTROY_OBJECT) AND event.outcome:success\",\"language\":\"kuery\"},\"label\":\" \"}]},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":false},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"e124a030-d349-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-05-14T06:01:52.918Z","version":"WzE4MDk2LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - Share Keys","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudHSM - Share Keys\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"cloudhsm.key_handle\",\"customLabel\":\"Private\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"cloudhsm.opcode:CN_SHARE_OBJECT AND event.outcome:success\",\"language\":\"kuery\"},\"label\":\" \"}]},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":false},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"b7097120-d34b-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-05-14T06:04:28.850Z","version":"WzE4MTM2LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - Create HSM User","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":7,\"direction\":\"desc\"}}}}","version":1,"visState":"{\"title\":\"CloudHSM - Create HSM User\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"cloudhsm.opcode: (CN_CREATE_USER OR CN_CREATE_CO) AND event.outcome:success\",\"language\":\"kuery\"},\"label\":\"-\"}]},\"schema\":\"bucket\"},{\"id\":\"9\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"AWS Account\"},\"schema\":\"bucket\"},{\"id\":\"10\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Region\"},\"schema\":\"bucket\"},{\"id\":\"11\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.cluster_id\",\"orderBy\":\"_key\",\"order\":\"asc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Cluster Name\"},\"schema\":\"bucket\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.target.name\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Name\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.target.id\",\"orderBy\":\"_key\",\"order\":\"asc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"?\",\"customLabel\":\"ID\"},\"schema\":\"bucket\"},{\"id\":\"7\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.target.roles\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Type\"},\"schema\":\"bucket\"},{\"id\":\"8\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"@timestamp\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Created\"},\"schema\":\"bucket\"},{\"id\":\"12\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.id\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"?\",\"customLabel\":\"Created By\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"d6d20080-d364-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-05-14T09:04:19.592Z","version":"WzE4NzgwLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - HSM Login Success vs Failure","uiStateJSON":"{\"vis\":{\"colors\":{\" - failure\":\"#E24D42\",\" - success\":\"#7EB26D\"}}}","version":1,"visState":"{\"title\":\"CloudHSM - HSM Login Success vs Failure\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"cloudhsm.opcode: CN_LOGIN\",\"language\":\"kuery\"},\"label\":\" \"}]},\"schema\":\"group\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-1y\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"event.outcome\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":3,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"adf169f0-c4e4-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-25T23:50:00.309Z","version":"WzE1NTczLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - HSM User Login Success","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"CloudHSM - HSM User Login Success\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"},\"schema\":\"metric\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"cloudhsm.opcode_hex: 0xd AND cloudhsm.hsm_return: SUCCESS\",\"language\":\"kuery\"},\"label\":\"Login Success\"}]},\"schema\":\"bucket\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.user_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"HSM User\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.user_type\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"HSM User Type\"},\"schema\":\"bucket\"},{\"id\":\"7\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"@timestamp\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"asc\",\"customLabel\":\"First Seen\"},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"@timestamp\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Last Seen\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"54a1b450-c489-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-25T11:17:45.108Z","version":"WzE1MTI5LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - HSM User Login Issue","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"CloudHSM - HSM User Login Issue\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"},\"schema\":\"metric\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"cloudhsm.opcode_hex: 0xd AND NOT cloudhsm.hsm_return: SUCCESS\",\"language\":\"kuery\"},\"label\":\"Login Issue\"}]},\"schema\":\"bucket\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.user_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"HSM User\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.user_type\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"HSM User Type\"},\"schema\":\"bucket\"},{\"id\":\"7\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"@timestamp\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"asc\",\"customLabel\":\"First Seen\"},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"@timestamp\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Last Seen\"},\"schema\":\"metric\"},{\"id\":\"8\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.hsm_error\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"377085b0-c2d0-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-25T21:52:44.242Z","version":"WzE1MzA1LDFd"}
+{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"1.2.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":15,\"i\":\"c1e7bd46-8879-4833-870d-4c35a00bbc91\"},\"panelIndex\":\"c1e7bd46-8879-4833-870d-4c35a00bbc91\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":24,\"y\":0,\"w\":24,\"h\":15,\"i\":\"60539bde-802e-4bfb-9de7-63dbdcf5db42\"},\"panelIndex\":\"60539bde-802e-4bfb-9de7-63dbdcf5db42\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":0,\"y\":15,\"w\":15,\"h\":15,\"i\":\"320c92e0-3d4d-485a-b6bb-0e753512d930\"},\"panelIndex\":\"320c92e0-3d4d-485a-b6bb-0e753512d930\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":15,\"y\":15,\"w\":33,\"h\":15,\"i\":\"bd811213-a118-4b57-b03a-379e3f8ec0da\"},\"panelIndex\":\"bd811213-a118-4b57-b03a-379e3f8ec0da\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":0,\"y\":30,\"w\":48,\"h\":7,\"i\":\"82803b59-7e2c-49fa-8269-07294ece9f89\"},\"panelIndex\":\"82803b59-7e2c-49fa-8269-07294ece9f89\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":0,\"y\":37,\"w\":14,\"h\":17,\"i\":\"597320a4-59a2-43b6-990f-76c1729fa585\"},\"panelIndex\":\"597320a4-59a2-43b6-990f-76c1729fa585\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":14,\"y\":37,\"w\":16,\"h\":17,\"i\":\"8a88c3d7-0aeb-4ffc-b7e2-0eeee39d438f\"},\"panelIndex\":\"8a88c3d7-0aeb-4ffc-b7e2-0eeee39d438f\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":30,\"y\":37,\"w\":18,\"h\":17,\"i\":\"64cb783c-478c-4e84-b53b-25349dd6cb49\"},\"panelIndex\":\"64cb783c-478c-4e84-b53b-25349dd6cb49\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":0,\"y\":54,\"w\":11,\"h\":7,\"i\":\"a6112cd6-d3c6-43b8-8d2f-ce6e6e3166e7\"},\"panelIndex\":\"a6112cd6-d3c6-43b8-8d2f-ce6e6e3166e7\",\"embeddableConfig\":{},\"panelRefName\":\"panel_8\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":11,\"y\":54,\"w\":15,\"h\":7,\"i\":\"bbdd8113-50b4-4785-ba74-e5ab1e75b235\"},\"panelIndex\":\"bbdd8113-50b4-4785-ba74-e5ab1e75b235\",\"embeddableConfig\":{},\"panelRefName\":\"panel_9\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":26,\"y\":54,\"w\":11,\"h\":7,\"i\":\"fb8ba371-ab66-417e-8e22-08f394b61b99\"},\"panelIndex\":\"fb8ba371-ab66-417e-8e22-08f394b61b99\",\"embeddableConfig\":{},\"panelRefName\":\"panel_10\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":37,\"y\":54,\"w\":11,\"h\":7,\"i\":\"58585690-757a-4e9f-b4f1-1ba73bea2a0d\"},\"panelIndex\":\"58585690-757a-4e9f-b4f1-1ba73bea2a0d\",\"embeddableConfig\":{},\"panelRefName\":\"panel_11\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":0,\"y\":61,\"w\":48,\"h\":15,\"i\":\"f55d3b7f-7b9a-4613-96bf-8942a4a179ef\"},\"panelIndex\":\"f55d3b7f-7b9a-4613-96bf-8942a4a179ef\",\"embeddableConfig\":{},\"panelRefName\":\"panel_12\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":0,\"y\":76,\"w\":48,\"h\":9,\"i\":\"4444e43c-8374-4df4-a33b-bb1822d8ad6c\"},\"panelIndex\":\"4444e43c-8374-4df4-a33b-bb1822d8ad6c\",\"embeddableConfig\":{\"vis\":{\"colors\":{\" - failure\":\"#BF1B00\",\" - success\":\"#7EB26D\"}}},\"panelRefName\":\"panel_13\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":0,\"y\":85,\"w\":20,\"h\":17,\"i\":\"573a852c-b7b6-4bd5-8d0b-bc028d93ea3a\"},\"panelIndex\":\"573a852c-b7b6-4bd5-8d0b-bc028d93ea3a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_14\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":20,\"y\":85,\"w\":28,\"h\":17,\"i\":\"33afc7d3-70d3-4f1f-be17-27367ddd0767\"},\"panelIndex\":\"33afc7d3-70d3-4f1f-be17-27367ddd0767\",\"embeddableConfig\":{},\"panelRefName\":\"panel_15\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":0,\"y\":102,\"w\":48,\"h\":19,\"i\":\"11e5aca8-63dd-485b-891d-9bef06f8db95\"},\"panelIndex\":\"11e5aca8-63dd-485b-891d-9bef06f8db95\",\"embeddableConfig\":{},\"panelRefName\":\"panel_16\"}]","timeRestore":false,"title":"CloudHSM Summary","version":1},"id":"576b5200-c2d0-11ec-ab71-6f054bb9d785","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"00ff9690-c4f3-11ec-ab71-6f054bb9d785","name":"panel_0","type":"visualization"},{"id":"b74ac370-c4f3-11ec-ab71-6f054bb9d785","name":"panel_1","type":"visualization"},{"id":"72fc6230-d350-11ec-ab71-6f054bb9d785","name":"panel_2","type":"visualization"},{"id":"c4423070-c4f0-11ec-ab71-6f054bb9d785","name":"panel_3","type":"search"},{"id":"37cc6e20-c48d-11ec-ab71-6f054bb9d785","name":"panel_4","type":"visualization"},{"id":"e09cec40-c4e8-11ec-ab71-6f054bb9d785","name":"panel_5","type":"visualization"},{"id":"047a5150-c4e6-11ec-ab71-6f054bb9d785","name":"panel_6","type":"visualization"},{"id":"586e4b10-c4e9-11ec-ab71-6f054bb9d785","name":"panel_7","type":"visualization"},{"id":"a1e29590-d348-11ec-ab71-6f054bb9d785","name":"panel_8","type":"visualization"},{"id":"ef52a680-d348-11ec-ab71-6f054bb9d785","name":"panel_9","type":"visualization"},{"id":"e124a030-d349-11ec-ab71-6f054bb9d785","name":"panel_10","type":"visualization"},{"id":"b7097120-d34b-11ec-ab71-6f054bb9d785","name":"panel_11","type":"visualization"},{"id":"d6d20080-d364-11ec-ab71-6f054bb9d785","name":"panel_12","type":"visualization"},{"id":"adf169f0-c4e4-11ec-ab71-6f054bb9d785","name":"panel_13","type":"visualization"},{"id":"54a1b450-c489-11ec-ab71-6f054bb9d785","name":"panel_14","type":"visualization"},{"id":"377085b0-c2d0-11ec-ab71-6f054bb9d785","name":"panel_15","type":"visualization"},{"id":"8a312410-c48a-11ec-ab71-6f054bb9d785","name":"panel_16","type":"search"}],"type":"dashboard","updated_at":"2022-05-14T09:06:38.423Z","version":"WzE4ODQ3LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - Create User","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":7,\"direction\":\"desc\"}}}}","version":1,"visState":"{\"title\":\"CloudHSM - Create User\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"cloudhsm.opcode: (CN_CREATE_USER OR CN_CREATE_CO) AND event.outcome:success\",\"language\":\"kuery\"},\"label\":\"-\"}]},\"schema\":\"bucket\"},{\"id\":\"9\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"AWS Account\"},\"schema\":\"bucket\"},{\"id\":\"10\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Region\"},\"schema\":\"bucket\"},{\"id\":\"11\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.cluster_id\",\"orderBy\":\"_key\",\"order\":\"asc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Cluster Name\"},\"schema\":\"bucket\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.target.name\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Name\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.target.id\",\"orderBy\":\"_key\",\"order\":\"asc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"?\",\"customLabel\":\"ID\"},\"schema\":\"bucket\"},{\"id\":\"7\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.target.roles\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Type\"},\"schema\":\"bucket\"},{\"id\":\"8\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"@timestamp\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Created\"},\"schema\":\"bucket\"},{\"id\":\"12\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.id\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"?\",\"customLabel\":\"Created By\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"95334230-d358-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-05-14T09:02:48.631Z","version":"WzE4NzYyLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudTrail - AWS Account(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#34130C\"},\"dimensions\":{\"x\":{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"},\"y\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}]}},\"title\":\"CloudTrail - AWS Account(Bar)\"}"},"id":"38b0cd00-8609-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTMwLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - Region(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - Region(Bar)\",\"type\":\"histogram\",\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#34130C\"},\"dimensions\":{\"x\":{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"},\"y\":[{\"accessor\":2,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"series\":[{\"accessor\":1,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}]}"},"id":"70cd1ea0-8609-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTMxLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudTrail - Source Countries","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"dimensions\":{\"metric\":{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"},\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"title\":\"CloudTrail - Source Countries\"}"},"id":"5fdde8a0-87cf-11ea-b9a0-7b688d6c40a7","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTMyLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - Source IP","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"CloudTrail - Source IP\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"dimensions\":{\"metrics\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"ip\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source\"}}]}"},"id":"8e9a0fb0-87d0-11ea-84c8-631650cae227","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTMzLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudTrail - Source Countries(Geo)","uiStateJSON":"{\"mapZoom\":2,\"mapCenter\":[21.453068633086783,26.3558692421991]}","version":1,"visState":"{\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"source.geo.country_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"emsHotLink\":\"https://maps.elastic.co/v7.7?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"format\":\"image/png\",\"transparent\":true},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":10,\"minZoom\":0,\"origin\":\"elastic_maps_service\"}}},\"title\":\"CloudTrail - Source Countries(Geo)\"}"},"id":"86029e40-87cf-11ea-b9a0-7b688d6c40a7","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTM0LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - Source AS","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - Source AS\",\"type\":\"pie\",\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"dimensions\":{\"metric\":{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"},\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"source.as.organization.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}]}"},"id":"d51c8ea0-87cf-11ea-b9a0-7b688d6c40a7","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTM1LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - Login Failed","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - Login Failed\",\"type\":\"metric\",\"params\":{\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"type\":\"range\",\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}},\"dimensions\":{\"metrics\":[{\"type\":\"vis_dimension\",\"accessor\":1,\"format\":{\"id\":\"number\",\"params\":{}}}],\"bucket\":{\"type\":\"vis_dimension\",\"accessor\":0,\"format\":{\"id\":\"string\",\"params\":{}}}},\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"schema\":\"group\",\"params\":{\"filters\":[{\"input\":{\"query\":\"responseElements.ConsoleLogin:Failure\",\"language\":\"kuery\"},\"label\":\"Login Failed\"}]}}]}"},"id":"37a2aab0-87b1-11ea-b9a0-7b688d6c40a7","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTM2LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - Root Login(CIS3.3)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - Root Login(CIS3.3)\",\"type\":\"metric\",\"params\":{\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"type\":\"range\",\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}},\"dimensions\":{\"metrics\":[{\"type\":\"vis_dimension\",\"accessor\":1,\"format\":{\"id\":\"number\",\"params\":{}}}],\"bucket\":{\"type\":\"vis_dimension\",\"accessor\":0,\"format\":{\"id\":\"string\",\"params\":{}}}},\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"schema\":\"group\",\"params\":{\"filters\":[{\"input\":{\"query\":\"userIdentity.type:Root AND NOT userIdentity.invokedBy:* AND NOT eventType:AwsServiceEvent\",\"language\":\"kuery\"},\"label\":\"Root Login\"}]}}]}"},"id":"964e0eb0-87c0-11ea-84c8-631650cae227","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTM3LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - Unauthorized API Calls(CIS3.1)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - Unauthorized API Calls(CIS3.1)\",\"type\":\"metric\",\"params\":{\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"type\":\"range\",\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":23}},\"dimensions\":{\"metrics\":[{\"type\":\"vis_dimension\",\"accessor\":1,\"format\":{\"id\":\"number\",\"params\":{}}}],\"bucket\":{\"type\":\"vis_dimension\",\"accessor\":0,\"format\":{\"id\":\"string\",\"params\":{}}}},\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"schema\":\"group\",\"params\":{\"filters\":[{\"label\":\"Unauthorized API Calls\",\"input\":{\"query\":\"errorCode:*UnauthorizedOperation OR errorCode:AccessDenied*\",\"language\":\"kuery\"}}]}}]}"},"id":"f53ad890-87bb-11ea-b9a0-7b688d6c40a7","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTM4LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - UserIdentity.arn","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"CloudTrail - UserIdentity.arn\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"dimensions\":{\"metrics\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"userIdentity.arn\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}]}"},"id":"8485ad20-87cd-11ea-84c8-631650cae227","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTM5LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - Security Group Changed(CIS3.10)","uiStateJSON":"{}","version":1,"visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"filters\":[{\"input\":{\"language\":\"kuery\",\"query\":\"eventName:(AuthorizeSecurityGroupIngress OR AuthorizeSecurityGroupEgress OR RevokeSecurityGroupIngress OR RevokeSecurityGroupEgress OR CreateSecurityGroup OR DeleteSecurityGroup)\"},\"label\":\"SG Changed\"}]},\"schema\":\"group\",\"type\":\"filters\"}],\"params\":{\"addLegend\":false,\"addTooltip\":true,\"dimensions\":{\"bucket\":{\"accessor\":0,\"format\":{\"id\":\"string\",\"params\":{}},\"type\":\"vis_dimension\"},\"metrics\":[{\"accessor\":1,\"format\":{\"id\":\"number\",\"params\":{}},\"type\":\"vis_dimension\"}]},\"metric\":{\"colorSchema\":\"Green to Red\",\"colorsRange\":[{\"from\":0,\"to\":10000,\"type\":\"range\"}],\"invertColors\":false,\"labels\":{\"show\":true},\"metricColorMode\":\"None\",\"percentageMode\":false,\"style\":{\"bgColor\":false,\"bgFill\":\"#000\",\"fontSize\":60,\"labelColor\":false,\"subText\":\"\"},\"useRanges\":false},\"type\":\"metric\"},\"title\":\"CloudTrail - Security Group Changed(CIS3.10)\",\"type\":\"metric\"}"},"id":"fd2b26d0-87b7-11ea-84c8-631650cae227","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTQwLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - NACL Changed(CIS3.11)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - NACL Changed(CIS3.11)\",\"type\":\"metric\",\"params\":{\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"type\":\"range\",\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}},\"dimensions\":{\"metrics\":[{\"type\":\"vis_dimension\",\"accessor\":0,\"format\":{\"id\":\"number\",\"params\":{}}}]},\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"schema\":\"group\",\"params\":{\"filters\":[{\"input\":{\"query\":\"eventName:(CreateNetworkAcl OR CreateNetworkAclEntry OR DeleteNetworkAcl OR DeleteNetworkAclEntry OR ReplaceNetworkAclEntry OR ReplaceNetworkAclAssociation)\",\"language\":\"kuery\"},\"label\":\"NACL Changed\"}]}}]}"},"id":"12949b90-87b9-11ea-b9a0-7b688d6c40a7","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTQxLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - Network Gateway Changd(CIS3.12)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - Network Gateway Changd(CIS3.12)\",\"type\":\"metric\",\"params\":{\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"type\":\"range\",\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}},\"dimensions\":{\"metrics\":[{\"type\":\"vis_dimension\",\"accessor\":1,\"format\":{\"id\":\"number\",\"params\":{}}}],\"bucket\":{\"type\":\"vis_dimension\",\"accessor\":0,\"format\":{\"id\":\"string\",\"params\":{}}}},\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"schema\":\"group\",\"params\":{\"filters\":[{\"input\":{\"query\":\"eventName:(CreateCustomerGateway OR DeleteCustomerGateway OR AttachInternetGateway OR CreateInternetGateway OR DeleteInternetGateway OR DetachInternetGateway)\",\"language\":\"kuery\"},\"label\":\"Network Gateway Changed\"}]}}]}"},"id":"0d6fd0c0-87ba-11ea-84c8-631650cae227","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTQyLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - Route Table Changd(CIS3.13)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - Route Table Changd(CIS3.13)\",\"type\":\"metric\",\"params\":{\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"type\":\"range\",\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}},\"dimensions\":{\"metrics\":[{\"type\":\"vis_dimension\",\"accessor\":1,\"format\":{\"id\":\"number\",\"params\":{}}}],\"bucket\":{\"type\":\"vis_dimension\",\"accessor\":0,\"format\":{\"id\":\"string\",\"params\":{}}}},\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"schema\":\"group\",\"params\":{\"filters\":[{\"label\":\"Route Table Changed\",\"input\":{\"query\":\"eventName:(CreateRoute OR CreateRouteTable OR ReplaceRoute OR ReplaceRouteTableAssociation OR DeleteRouteTable OR DeleteRoute OR DisassociateRouteTable)\",\"language\":\"kuery\"}}]}}]}"},"id":"7a295f60-87ba-11ea-b9a0-7b688d6c40a7","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTQzLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - VPC Changed(CIS3.14)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - VPC Changed(CIS3.14)\",\"type\":\"metric\",\"params\":{\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"type\":\"range\",\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}},\"dimensions\":{\"metrics\":[{\"type\":\"vis_dimension\",\"accessor\":0,\"format\":{\"id\":\"number\",\"params\":{}}}]},\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"schema\":\"group\",\"params\":{\"filters\":[{\"input\":{\"query\":\"eventName:(CreateVpc OR DeleteVpc OR ModifyVpcAttribute OR AcceptVpcPeeringConnection OR CreateVpcPeeringConnection OR DeleteVpcPeeringConnection OR RejectVpcPeeringConnection OR AttachClassicLinkVpc OR DetachClassicLinkVpc OR DisableVpcClassicLink OR EnableVpcClassicLink)\",\"language\":\"kuery\"},\"label\":\"VPC Changed\"}]}}]}"},"id":"42efd730-87bb-11ea-84c8-631650cae227","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTQ0LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - S3 Bucket Changed(CIS3.8)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - S3 Bucket Changed(CIS3.8)\",\"type\":\"metric\",\"params\":{\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"type\":\"range\",\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}},\"dimensions\":{\"metrics\":[{\"type\":\"vis_dimension\",\"accessor\":1,\"format\":{\"id\":\"number\",\"params\":{}}}],\"bucket\":{\"type\":\"vis_dimension\",\"accessor\":0,\"format\":{\"id\":\"string\",\"params\":{}}}},\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"schema\":\"group\",\"params\":{\"filters\":[{\"input\":{\"query\":\"eventSource:s3.amazonaws.com AND (eventName:(PutBucketAcl OR PutBucketPolicy OR PutBucketCors OR PutBucketLifecycle OR PutBucketReplication OR DeleteBucketPolicy OR DeleteBucketCors OR DeleteBucketLifecycle OR DeleteBucketReplication))\",\"language\":\"kuery\"},\"label\":\"S3 Bucket Changed\"}]}}]}"},"id":"2172d050-87be-11ea-84c8-631650cae227","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTQ1LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - Event Name(Pie)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - Event Name(Pie)\",\"type\":\"pie\",\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"dimensions\":{\"metric\":{\"accessor\":0,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"eventName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}]}"},"id":"ff879d20-87a6-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTQ2LDFd"}
+{"attributes":{"description":"DisableKey\nScheduleKeyDeletion\nPutKeyPolicy","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudTrail - KMS Key Changed","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - KMS Key Changed\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"eventSource:kms.amazonaws.com AND eventName:(DisableKey OR ScheduleKeyDeletion OR PutKeyPolicy)\",\"language\":\"kuery\"},\"label\":\"KMS Key Changed\"}]},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"8dd04d40-1e02-11ed-aa58-67d455528b1d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTQ3LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - Event Name(Area)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - Event Name(Area)\",\"type\":\"area\",\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#34130C\"},\"labels\":{},\"dimensions\":{\"x\":{\"accessor\":0,\"format\":{\"id\":\"date\",\"params\":{\"pattern\":\"YYYY-MM-DD HH:mm\"}},\"params\":{\"date\":true,\"interval\":\"PT12H\",\"format\":\"YYYY-MM-DD HH:mm\",\"bounds\":{\"min\":\"2020-03-27T10:17:24.061Z\",\"max\":\"2020-04-26T10:17:24.061Z\"}},\"aggType\":\"date_histogram\"},\"y\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-30d\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"eventName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}]}"},"id":"5b808920-87a7-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTQ4LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - Event Type(Pie)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - Event Type(Pie)\",\"type\":\"pie\",\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"dimensions\":{\"metric\":{\"accessor\":0,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"eventType\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}]}"},"id":"750fd9d0-87a8-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTQ5LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - Event Type(Area)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - Event Type(Area)\",\"type\":\"area\",\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#34130C\"},\"labels\":{},\"dimensions\":{\"x\":null,\"y\":[{\"accessor\":0,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"useNormalizedEsInterval\":true,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"eventType\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}]}"},"id":"a9aacce0-87a8-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTUwLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - Error Code(Pie)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - Error Code(Pie)\",\"type\":\"pie\",\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"dimensions\":{\"metric\":{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"},\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"errorCode\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}]}"},"id":"1e2f98c0-87a9-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTUxLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - Error Code(Area)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - Error Code(Area)\",\"type\":\"area\",\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#34130C\"},\"labels\":{},\"dimensions\":{\"x\":{\"accessor\":0,\"format\":{\"id\":\"date\",\"params\":{\"pattern\":\"YYYY-MM-DD HH:mm\"}},\"params\":{\"date\":true,\"interval\":\"PT12H\",\"format\":\"YYYY-MM-DD HH:mm\",\"bounds\":{\"min\":\"2020-03-27T10:33:25.001Z\",\"max\":\"2020-04-26T10:33:25.001Z\"}},\"aggType\":\"date_histogram\"},\"y\":[{\"accessor\":2,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"series\":[{\"accessor\":1,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-30d\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"errorCode\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}]}"},"id":"71b1ec50-87a9-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTUyLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - Event Source(Pie)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - Event Source(Pie)\",\"type\":\"pie\",\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"dimensions\":{\"metric\":{\"accessor\":0,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"eventSource\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}]}"},"id":"db266210-87a9-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTUzLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"CloudTrail - Event Source(Area)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - Event Source(Area)\",\"type\":\"area\",\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#34130C\"},\"labels\":{},\"dimensions\":{\"x\":null,\"y\":[{\"accessor\":0,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-30d\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"eventSource\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}]}"},"id":"e062c4d0-87ae-11ea-b9a0-7b688d6c40a7","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTU0LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudTrail - TLS version","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - TLS version\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"tlsDetails.tlsVersion\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"31ea73f0-1d19-11ed-94f7-6342b0f7ff8e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTU1LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudTrail - User Agent Browser","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudTrail - User Agent Browser\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user_agent.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":15,\"otherBucket\":true,\"otherBucketLabel\":\"Other2\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"2a1575e0-1d1d-11ed-aa58-67d455528b1d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTU2LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudTrail - Matched IoC","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":\"desc\"}}}}","version":1,"visState":"{\"title\":\"CloudTrail - Matched IoC\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"threat.matched.providers\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Providers\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"3dd3f380-1dff-11ed-aa58-67d455528b1d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-18T10:20:57.700Z","version":"WzMwMDc1LDFd"}
+{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":7,\"i\":\"ef1c8093-d864-4d8b-88bd-d3d635d90819\"},\"panelIndex\":\"ef1c8093-d864-4d8b-88bd-d3d635d90819\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":24,\"y\":0,\"w\":24,\"h\":7,\"i\":\"458220d0-a1bd-4ff4-887c-ddd1174ad52a\"},\"panelIndex\":\"458220d0-a1bd-4ff4-887c-ddd1174ad52a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":7,\"w\":11,\"h\":7,\"i\":\"8d6c2abf-e123-41cc-9428-c814a8c3851f\"},\"panelIndex\":\"8d6c2abf-e123-41cc-9428-c814a8c3851f\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":11,\"y\":7,\"w\":10,\"h\":15,\"i\":\"387068a2-b2d7-449a-93c6-92ded89cc535\"},\"panelIndex\":\"387068a2-b2d7-449a-93c6-92ded89cc535\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":21,\"y\":7,\"w\":27,\"h\":15,\"i\":\"06dacfb3-5be8-48da-be91-a33a0fdedd6f\"},\"panelIndex\":\"06dacfb3-5be8-48da-be91-a33a0fdedd6f\",\"embeddableConfig\":{\"mapCenter\":null,\"mapZoom\":null},\"panelRefName\":\"panel_4\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":14,\"w\":11,\"h\":8,\"i\":\"59c704d2-da17-4437-aaa6-72e7f7899be0\"},\"panelIndex\":\"59c704d2-da17-4437-aaa6-72e7f7899be0\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":22,\"w\":7,\"h\":8,\"i\":\"89480c31-3cce-4327-b171-362cbb13d75f\"},\"panelIndex\":\"89480c31-3cce-4327-b171-362cbb13d75f\",\"embeddableConfig\":{\"title\":\"\"},\"panelRefName\":\"panel_6\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":7,\"y\":22,\"w\":7,\"h\":8,\"i\":\"ff379b16-9bab-47ff-ba35-5979c2837bac\"},\"panelIndex\":\"ff379b16-9bab-47ff-ba35-5979c2837bac\",\"embeddableConfig\":{\"title\":\"\"},\"panelRefName\":\"panel_7\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":14,\"y\":22,\"w\":7,\"h\":8,\"i\":\"fcee65f0-5867-4e06-abba-84c666bd3d7d\"},\"panelIndex\":\"fcee65f0-5867-4e06-abba-84c666bd3d7d\",\"embeddableConfig\":{\"title\":\"\"},\"panelRefName\":\"panel_8\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":21,\"y\":22,\"w\":27,\"h\":8,\"i\":\"ebfcdb58-d9a8-491b-a4b0-be9334715165\"},\"panelIndex\":\"ebfcdb58-d9a8-491b-a4b0-be9334715165\",\"embeddableConfig\":{},\"panelRefName\":\"panel_9\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":30,\"w\":7,\"h\":8,\"i\":\"71ca93b1-de52-4d12-a337-3638c7896850\"},\"panelIndex\":\"71ca93b1-de52-4d12-a337-3638c7896850\",\"embeddableConfig\":{\"title\":\"\"},\"panelRefName\":\"panel_10\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":7,\"y\":30,\"w\":7,\"h\":8,\"i\":\"a17dbd0a-15fc-43d9-9a9e-c5ad1516d22a\"},\"panelIndex\":\"a17dbd0a-15fc-43d9-9a9e-c5ad1516d22a\",\"embeddableConfig\":{\"title\":\"\"},\"panelRefName\":\"panel_11\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":14,\"y\":30,\"w\":7,\"h\":8,\"i\":\"1abc07f4-c21f-4562-9bb1-0eb8903d4aa0\"},\"panelIndex\":\"1abc07f4-c21f-4562-9bb1-0eb8903d4aa0\",\"embeddableConfig\":{\"title\":\"\"},\"panelRefName\":\"panel_12\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":21,\"y\":30,\"w\":7,\"h\":8,\"i\":\"7731f303-8d34-460a-906e-927e638cfa0f\"},\"panelIndex\":\"7731f303-8d34-460a-906e-927e638cfa0f\",\"embeddableConfig\":{\"title\":\"\"},\"panelRefName\":\"panel_13\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":28,\"y\":30,\"w\":7,\"h\":8,\"i\":\"e92cccc6-c5ab-4afa-a189-ce326de4030a\"},\"panelIndex\":\"e92cccc6-c5ab-4afa-a189-ce326de4030a\",\"embeddableConfig\":{\"title\":\"\"},\"panelRefName\":\"panel_14\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":35,\"y\":30,\"w\":7,\"h\":8,\"i\":\"1882d098-45d1-401e-8c15-222fb85c0b58\"},\"panelIndex\":\"1882d098-45d1-401e-8c15-222fb85c0b58\",\"embeddableConfig\":{\"title\":\"\"},\"panelRefName\":\"panel_15\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":38,\"w\":15,\"h\":9,\"i\":\"6d592a68-5658-4af3-8db5-bce9e2357c36\"},\"panelIndex\":\"6d592a68-5658-4af3-8db5-bce9e2357c36\",\"embeddableConfig\":{},\"panelRefName\":\"panel_16\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":42,\"y\":30,\"w\":6,\"h\":8,\"i\":\"f65af854-bcb0-4904-b9c2-a869c8bf2423\"},\"panelIndex\":\"f65af854-bcb0-4904-b9c2-a869c8bf2423\",\"embeddableConfig\":{\"hidePanelTitles\":true},\"panelRefName\":\"panel_17\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":15,\"y\":38,\"w\":33,\"h\":9,\"i\":\"2d43cb78-cdf8-4f6f-83b2-e724f1880c4b\"},\"panelIndex\":\"2d43cb78-cdf8-4f6f-83b2-e724f1880c4b\",\"embeddableConfig\":{},\"panelRefName\":\"panel_18\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":47,\"w\":15,\"h\":9,\"i\":\"c1ef693d-637a-4d2d-8267-3191015f0df8\"},\"panelIndex\":\"c1ef693d-637a-4d2d-8267-3191015f0df8\",\"embeddableConfig\":{},\"panelRefName\":\"panel_19\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":15,\"y\":47,\"w\":33,\"h\":9,\"i\":\"9a6adcb9-bce1-44c4-bab8-fe086aaf741d\"},\"panelIndex\":\"9a6adcb9-bce1-44c4-bab8-fe086aaf741d\",\"embeddableConfig\":{},\"panelRefName\":\"panel_20\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":56,\"w\":15,\"h\":9,\"i\":\"1a85d715-d1ba-4d65-8da7-ab061fb5b20a\"},\"panelIndex\":\"1a85d715-d1ba-4d65-8da7-ab061fb5b20a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_21\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":15,\"y\":56,\"w\":33,\"h\":9,\"i\":\"3438d081-b021-41dd-a94d-0b2fc4e41c55\"},\"panelIndex\":\"3438d081-b021-41dd-a94d-0b2fc4e41c55\",\"embeddableConfig\":{},\"panelRefName\":\"panel_22\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":65,\"w\":15,\"h\":9,\"i\":\"ca007fbb-a1e3-4c8c-80ee-b20394c82353\"},\"panelIndex\":\"ca007fbb-a1e3-4c8c-80ee-b20394c82353\",\"embeddableConfig\":{},\"panelRefName\":\"panel_23\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":15,\"y\":65,\"w\":33,\"h\":9,\"i\":\"aa79b7c7-2617-4cdf-959b-225d20b8960f\"},\"panelIndex\":\"aa79b7c7-2617-4cdf-959b-225d20b8960f\",\"embeddableConfig\":{},\"panelRefName\":\"panel_24\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":74,\"w\":13,\"h\":12,\"i\":\"3d5b3e0b-b438-4eb2-b9b2-8599b6095e5d\"},\"panelIndex\":\"3d5b3e0b-b438-4eb2-b9b2-8599b6095e5d\",\"embeddableConfig\":{},\"panelRefName\":\"panel_25\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":13,\"y\":74,\"w\":13,\"h\":12,\"i\":\"c2b7419d-5a81-4ab1-b793-e884b3b82765\"},\"panelIndex\":\"c2b7419d-5a81-4ab1-b793-e884b3b82765\",\"embeddableConfig\":{},\"panelRefName\":\"panel_26\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":26,\"y\":74,\"w\":22,\"h\":12,\"i\":\"2b4f1b7f-05b1-4956-92a3-7134c2afed52\"},\"panelIndex\":\"2b4f1b7f-05b1-4956-92a3-7134c2afed52\",\"embeddableConfig\":{},\"panelRefName\":\"panel_27\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":86,\"w\":48,\"h\":14,\"i\":\"065c67cb-5101-43b1-b117-4b448a731381\"},\"panelIndex\":\"065c67cb-5101-43b1-b117-4b448a731381\",\"embeddableConfig\":{},\"panelRefName\":\"panel_28\"}]","timeRestore":false,"title":"CloudTrail Summary","version":1},"id":"02ca2d20-8245-11ea-8450-d1d13849d130","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"38b0cd00-8609-11ea-8ea1-d5ea957d0a7d","name":"panel_0","type":"visualization"},{"id":"70cd1ea0-8609-11ea-8ea1-d5ea957d0a7d","name":"panel_1","type":"visualization"},{"id":"5fdde8a0-87cf-11ea-b9a0-7b688d6c40a7","name":"panel_2","type":"visualization"},{"id":"8e9a0fb0-87d0-11ea-84c8-631650cae227","name":"panel_3","type":"visualization"},{"id":"86029e40-87cf-11ea-b9a0-7b688d6c40a7","name":"panel_4","type":"visualization"},{"id":"d51c8ea0-87cf-11ea-b9a0-7b688d6c40a7","name":"panel_5","type":"visualization"},{"id":"37a2aab0-87b1-11ea-b9a0-7b688d6c40a7","name":"panel_6","type":"visualization"},{"id":"964e0eb0-87c0-11ea-84c8-631650cae227","name":"panel_7","type":"visualization"},{"id":"f53ad890-87bb-11ea-b9a0-7b688d6c40a7","name":"panel_8","type":"visualization"},{"id":"8485ad20-87cd-11ea-84c8-631650cae227","name":"panel_9","type":"visualization"},{"id":"fd2b26d0-87b7-11ea-84c8-631650cae227","name":"panel_10","type":"visualization"},{"id":"12949b90-87b9-11ea-b9a0-7b688d6c40a7","name":"panel_11","type":"visualization"},{"id":"0d6fd0c0-87ba-11ea-84c8-631650cae227","name":"panel_12","type":"visualization"},{"id":"7a295f60-87ba-11ea-b9a0-7b688d6c40a7","name":"panel_13","type":"visualization"},{"id":"42efd730-87bb-11ea-84c8-631650cae227","name":"panel_14","type":"visualization"},{"id":"2172d050-87be-11ea-84c8-631650cae227","name":"panel_15","type":"visualization"},{"id":"ff879d20-87a6-11ea-8ea1-d5ea957d0a7d","name":"panel_16","type":"visualization"},{"id":"8dd04d40-1e02-11ed-aa58-67d455528b1d","name":"panel_17","type":"visualization"},{"id":"5b808920-87a7-11ea-8ea1-d5ea957d0a7d","name":"panel_18","type":"visualization"},{"id":"750fd9d0-87a8-11ea-8ea1-d5ea957d0a7d","name":"panel_19","type":"visualization"},{"id":"a9aacce0-87a8-11ea-8ea1-d5ea957d0a7d","name":"panel_20","type":"visualization"},{"id":"1e2f98c0-87a9-11ea-8ea1-d5ea957d0a7d","name":"panel_21","type":"visualization"},{"id":"71b1ec50-87a9-11ea-8ea1-d5ea957d0a7d","name":"panel_22","type":"visualization"},{"id":"db266210-87a9-11ea-8ea1-d5ea957d0a7d","name":"panel_23","type":"visualization"},{"id":"e062c4d0-87ae-11ea-b9a0-7b688d6c40a7","name":"panel_24","type":"visualization"},{"id":"31ea73f0-1d19-11ed-94f7-6342b0f7ff8e","name":"panel_25","type":"visualization"},{"id":"2a1575e0-1d1d-11ed-aa58-67d455528b1d","name":"panel_26","type":"visualization"},{"id":"3dd3f380-1dff-11ed-aa58-67d455528b1d","name":"panel_27","type":"visualization"},{"id":"2c0fb0e0-87ce-11ea-b9a0-7b688d6c40a7","name":"panel_28","type":"search"}],"type":"dashboard","updated_at":"2022-08-18T08:57:21.749Z","version":"WzI5NTU4LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"ELB - Controls","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1606466378089\",\"fieldName\":\"event.module\",\"parent\":\"\",\"label\":\"ELB\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1606466402867\",\"fieldName\":\"cloud.account.id\",\"parent\":\"\",\"label\":\"AWS Account\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_1_index_pattern\"},{\"id\":\"1606466482419\",\"fieldName\":\"cloud.region\",\"parent\":\"\",\"label\":\"AWS Region\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_2_index_pattern\"}],\"updateFiltersOnChange\":false,\"useTimeFilter\":false,\"pinFilters\":false},\"title\":\"ELB - Controls\"}"},"id":"8643b130-308c-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"control_0_index_pattern","type":"index-pattern"},{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"control_1_index_pattern","type":"index-pattern"},{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"control_2_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2020-12-13T00:16:08.380Z","version":"WzU0ODcsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ELB - AWS Account(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}},\"title\":\"ELB - AWS Account(Bar)\"}"},"id":"b6bb3950-308c-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-12-13T00:16:08.380Z","version":"WzU0ODgsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ELB - Region(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}},\"title\":\"ELB - Region(Bar)\"}"},"id":"00407b80-308d-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-12-13T00:16:08.380Z","version":"WzU0ODksMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ELB - HTTP Response Code(PIE)","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"http.response.status_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"title\":\"ELB - HTTP Response Code(PIE)\"}"},"id":"ed4009a0-320e-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-12-13T00:16:08.380Z","version":"WzU0OTAsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ELB - HTTP Response Code Trend","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-30m\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"http.response.status_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}},\"title\":\"ELB - HTTP Response Code Trend\"}"},"id":"5c46e3a0-320f-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-12-13T00:16:08.380Z","version":"WzU0OTEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ELB - Transfer Size(MB)","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"http.request.bytes\",\"json\":\"{\\n \\\"script\\\": \\\"doc['http.request.bytes'].value / 1024.0 / 1024.0\\\"\\n}\",\"customLabel\":\"Request Size\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"http.response.bytes\",\"json\":\"{\\n \\\"script\\\": \\\"doc['http.response.bytes'].value / 1024.0 / 1024.0\\\"\\n}\",\"customLabel\":\"Response Size\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-1y\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}}}],\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{},\"type\":\"category\"}],\"grid\":{\"categoryLines\":false},\"labels\":{},\"legendPosition\":\"right\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Request Size\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"2\",\"label\":\"Response Size\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"thresholdLine\":{\"color\":\"#E7664C\",\"show\":false,\"style\":\"full\",\"value\":10,\"width\":1},\"times\":[],\"type\":\"line\",\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Sum of http.request.bytes\"},\"type\":\"value\"}]},\"title\":\"ELB - Transfer Size(MB)\"}"},"id":"bc0f2620-321a-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-12-13T00:16:08.380Z","version":"WzU0OTIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ELB - HTTP Protocol(PIE)","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"http_protocol\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"title\":\"ELB - HTTP Protocol(PIE)\"}"},"id":"398dc100-3217-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-12-13T00:16:08.380Z","version":"WzU0OTMsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ELB - HTTP Request Method(PIE)","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"http.request.method\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"title\":\"ELB - HTTP Request Method(PIE)\"}"},"id":"d26adc60-3216-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-12-13T00:16:08.380Z","version":"WzU0OTQsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ELB - SSL Protocol(PIE)","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ssl_protocol\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"title\":\"ELB - SSL Protocol(PIE)\"}"},"id":"7ce2b140-3217-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-12-13T00:16:08.380Z","version":"WzU0OTUsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ELB - SSL Cipher","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ssl_cipher\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"labels\":{\"last_level\":true,\"show\":false,\"truncate\":100,\"values\":true},\"legendPosition\":\"right\",\"type\":\"pie\"},\"title\":\"ELB - SSL Cipher\"}"},"id":"9acb8d80-3217-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-12-13T00:16:08.380Z","version":"WzU0OTYsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ELB - URL Domain","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"url.domain\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"perPage\":10,\"percentageCol\":\"\",\"showMetricsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"},\"title\":\"ELB - URL Domain\"}"},"id":"d1ec9960-3b92-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-12-13T00:16:08.380Z","version":"WzU0OTcsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ELB - URL Path","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"url.path\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"},\"title\":\"ELB - URL Path\"}"},"id":"0358e220-3219-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-12-13T00:16:08.380Z","version":"WzU0OTgsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ELB - User Agent","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"user_agent.original\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"},\"title\":\"ELB - User Agent\"}"},"id":"360cc5b0-3219-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-12-13T00:16:08.380Z","version":"WzU0OTksMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ELB - Source IP Country","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"title\":\"ELB - Source IP Country\"}"},"id":"891bb040-3214-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-12-13T00:16:08.380Z","version":"WzU1MDAsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ELB - Source Countries Geo Map","uiStateJSON":"{\"mapCenter\":[30.14512718337613,3.6917208421022094],\"mapZoom\":2}","version":1,"visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"field\":\"source.geo.country_iso_code\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"order\":\"desc\",\"orderBy\":\"1\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"size\":100},\"schema\":\"segment\",\"type\":\"terms\"}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"emsHotLink\":\"https://maps.elastic.co/v7.7?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"format\":\"image/png\",\"transparent\":true},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":10,\"minZoom\":0,\"origin\":\"elastic_maps_service\"}}},\"title\":\"ELB - Source Countries Geo Map\",\"type\":\"region_map\"}"},"id":"a322d3b0-308e-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-12-13T00:16:08.380Z","version":"WzU1MDEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ELB - Source IP","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"labels\":{\"last_level\":true,\"show\":false,\"truncate\":100,\"values\":true},\"legendPosition\":\"right\",\"type\":\"pie\"},\"title\":\"ELB - Source IP\"}"},"id":"bf1fa930-3214-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-12-13T00:16:08.380Z","version":"WzU1MDIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ELB - Destination IP","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"destination.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"},\"title\":\"ELB - Destination IP\"}"},"id":"de91c0b0-3218-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-12-13T00:16:08.380Z","version":"WzU1MDMsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ELB - Processing TIme","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"request_processing_time\",\"customLabel\":\"Request\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-30m\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"filters\",\"schema\":\"group\",\"params\":{\"filters\":[{\"input\":{\"query\":\"NOT request_processing_time<0 AND NOT response_processing_time<0\",\"language\":\"kuery\"},\"label\":\" \"}]}},{\"id\":\"4\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"response_processing_time\",\"customLabel\":\"Response\"}}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Processing Time (Seconds)\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Request\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true},{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"id\":\"4\",\"label\":\"Response\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"top\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"row\":true},\"title\":\"ELB - Processing TIme\"}"},"id":"9205d000-3ba1-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-12-13T00:16:08.380Z","version":"WzU1MDQsMV0="}
+{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":48,\"h\":5,\"i\":\"65ad5100-9919-47dd-8aae-1925f72dc6c2\"},\"panelIndex\":\"65ad5100-9919-47dd-8aae-1925f72dc6c2\",\"embeddableConfig\":{\"title\":\"\"},\"panelRefName\":\"panel_0\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":5,\"w\":24,\"h\":7,\"i\":\"13602aba-c307-4018-814e-44ae6094e641\"},\"panelIndex\":\"13602aba-c307-4018-814e-44ae6094e641\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":24,\"y\":5,\"w\":24,\"h\":7,\"i\":\"e8eb12e8-018e-430b-b64d-bcdfebf16165\"},\"panelIndex\":\"e8eb12e8-018e-430b-b64d-bcdfebf16165\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":12,\"w\":16,\"h\":10,\"i\":\"2fd7684e-f022-4a8e-8486-efcb22010f17\"},\"panelIndex\":\"2fd7684e-f022-4a8e-8486-efcb22010f17\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":16,\"y\":12,\"w\":32,\"h\":10,\"i\":\"5baf885b-3a6c-4a37-b0c2-f0d957aa2b24\"},\"panelIndex\":\"5baf885b-3a6c-4a37-b0c2-f0d957aa2b24\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":22,\"w\":48,\"h\":13,\"i\":\"b0a4dd94-155e-4a11-928c-c9e813701bae\"},\"panelIndex\":\"b0a4dd94-155e-4a11-928c-c9e813701bae\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":35,\"w\":12,\"h\":12,\"i\":\"c99b3456-37d9-4dc1-8584-e1e172d75fb2\"},\"panelIndex\":\"c99b3456-37d9-4dc1-8584-e1e172d75fb2\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":12,\"y\":35,\"w\":12,\"h\":12,\"i\":\"53ac67cf-842a-473a-ac36-cbc8b774fb95\"},\"panelIndex\":\"53ac67cf-842a-473a-ac36-cbc8b774fb95\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":24,\"y\":35,\"w\":12,\"h\":12,\"i\":\"02dee2c1-ba4e-495f-9307-60275629a0a0\"},\"panelIndex\":\"02dee2c1-ba4e-495f-9307-60275629a0a0\",\"embeddableConfig\":{},\"panelRefName\":\"panel_8\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":36,\"y\":35,\"w\":12,\"h\":12,\"i\":\"4f8a1c78-fbe7-44cb-938f-9f3a4121d5fe\"},\"panelIndex\":\"4f8a1c78-fbe7-44cb-938f-9f3a4121d5fe\",\"embeddableConfig\":{},\"panelRefName\":\"panel_9\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":47,\"w\":10,\"h\":15,\"i\":\"bf78a176-879b-4e60-8e1a-d3888b8c6678\"},\"panelIndex\":\"bf78a176-879b-4e60-8e1a-d3888b8c6678\",\"embeddableConfig\":{},\"panelRefName\":\"panel_10\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":10,\"y\":47,\"w\":14,\"h\":15,\"i\":\"065889f8-2a52-4305-99b3-39fbcf840ded\"},\"panelIndex\":\"065889f8-2a52-4305-99b3-39fbcf840ded\",\"embeddableConfig\":{},\"panelRefName\":\"panel_11\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":24,\"y\":47,\"w\":24,\"h\":15,\"i\":\"e68d21d8-fb4a-4268-b3ea-1dad7c5f5c42\"},\"panelIndex\":\"e68d21d8-fb4a-4268-b3ea-1dad7c5f5c42\",\"embeddableConfig\":{},\"panelRefName\":\"panel_12\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":62,\"w\":13,\"h\":11,\"i\":\"21f540ca-5524-4b28-a534-7619c1274f2c\"},\"panelIndex\":\"21f540ca-5524-4b28-a534-7619c1274f2c\",\"embeddableConfig\":{},\"panelRefName\":\"panel_13\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":13,\"y\":62,\"w\":35,\"h\":21,\"i\":\"6fe30837-fe94-4a5c-8b3d-085ba337e5ae\"},\"panelIndex\":\"6fe30837-fe94-4a5c-8b3d-085ba337e5ae\",\"embeddableConfig\":{\"mapCenter\":null,\"mapZoom\":2},\"panelRefName\":\"panel_14\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":73,\"w\":13,\"h\":10,\"i\":\"0e25b5f6-8744-473c-b426-f8d5850d6519\"},\"panelIndex\":\"0e25b5f6-8744-473c-b426-f8d5850d6519\",\"embeddableConfig\":{},\"panelRefName\":\"panel_15\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":83,\"w\":10,\"h\":15,\"i\":\"96ec06ba-2f21-4db4-a13c-527ea26f74a0\"},\"panelIndex\":\"96ec06ba-2f21-4db4-a13c-527ea26f74a0\",\"embeddableConfig\":{},\"panelRefName\":\"panel_16\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":10,\"y\":83,\"w\":38,\"h\":15,\"i\":\"e3caa6de-d408-4216-b6bd-6b230d28d195\"},\"panelIndex\":\"e3caa6de-d408-4216-b6bd-6b230d28d195\",\"embeddableConfig\":{},\"panelRefName\":\"panel_17\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":98,\"w\":48,\"h\":15,\"i\":\"ccd7b879-7013-4219-87dd-8ba436177671\"},\"panelIndex\":\"ccd7b879-7013-4219-87dd-8ba436177671\",\"embeddableConfig\":{},\"panelRefName\":\"panel_18\"}]","timeRestore":false,"title":"ELB Summary","version":1},"id":"48d6b4b0-308b-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"dashboard":"7.3.0"},"references":[{"id":"8643b130-308c-11eb-9df7-6b7b0da6e7ae","name":"panel_0","type":"visualization"},{"id":"b6bb3950-308c-11eb-9df7-6b7b0da6e7ae","name":"panel_1","type":"visualization"},{"id":"00407b80-308d-11eb-9df7-6b7b0da6e7ae","name":"panel_2","type":"visualization"},{"id":"ed4009a0-320e-11eb-9df7-6b7b0da6e7ae","name":"panel_3","type":"visualization"},{"id":"5c46e3a0-320f-11eb-9df7-6b7b0da6e7ae","name":"panel_4","type":"visualization"},{"id":"bc0f2620-321a-11eb-9df7-6b7b0da6e7ae","name":"panel_5","type":"visualization"},{"id":"398dc100-3217-11eb-9df7-6b7b0da6e7ae","name":"panel_6","type":"visualization"},{"id":"d26adc60-3216-11eb-9df7-6b7b0da6e7ae","name":"panel_7","type":"visualization"},{"id":"7ce2b140-3217-11eb-9df7-6b7b0da6e7ae","name":"panel_8","type":"visualization"},{"id":"9acb8d80-3217-11eb-9df7-6b7b0da6e7ae","name":"panel_9","type":"visualization"},{"id":"d1ec9960-3b92-11eb-9df7-6b7b0da6e7ae","name":"panel_10","type":"visualization"},{"id":"0358e220-3219-11eb-9df7-6b7b0da6e7ae","name":"panel_11","type":"visualization"},{"id":"360cc5b0-3219-11eb-9df7-6b7b0da6e7ae","name":"panel_12","type":"visualization"},{"id":"891bb040-3214-11eb-9df7-6b7b0da6e7ae","name":"panel_13","type":"visualization"},{"id":"a322d3b0-308e-11eb-9df7-6b7b0da6e7ae","name":"panel_14","type":"visualization"},{"id":"bf1fa930-3214-11eb-9df7-6b7b0da6e7ae","name":"panel_15","type":"visualization"},{"id":"de91c0b0-3218-11eb-9df7-6b7b0da6e7ae","name":"panel_16","type":"visualization"},{"id":"9205d000-3ba1-11eb-9df7-6b7b0da6e7ae","name":"panel_17","type":"visualization"},{"id":"cb2c8f20-3211-11eb-9df7-6b7b0da6e7ae","name":"panel_18","type":"search"}],"type":"dashboard","updated_at":"2020-12-13T00:16:08.380Z","version":"WzU1MDYsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - AWS Account(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"@id\",\"customLabel\":\"Count\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#34130C\"},\"dimensions\":{\"x\":{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"},\"y\":[{\"accessor\":2,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"series\":[{\"accessor\":1,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"title\":\"GuardDuty - AWS Account(Bar)\"}"},"id":"094d3070-860a-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T11:40:11.540Z","version":"WzI5MTUsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - Region(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"@id\",\"customLabel\":\"Count\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#34130C\"},\"dimensions\":{\"x\":{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"},\"y\":[{\"accessor\":2,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"series\":[{\"accessor\":1,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"title\":\"GuardDuty - Region(Bar)\"}"},"id":"181166d0-860a-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T11:40:11.540Z","version":"WzI5MTYsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - Findings","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"GuardDuty - Findings\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"@id\",\"customLabel\":\" \"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"ResourceTypeAffected:EC2 AND NOT ThreatFamilyName:(MaliciousFile OR SuspiciousFile)\",\"language\":\"kuery\"},\"label\":\"EC2 finding types\"},{\"input\":{\"query\":\"ResourceTypeAffected:IAMUser\",\"language\":\"kuery\"},\"label\":\"IAM finding types\"},{\"input\":{\"query\":\"ResourceTypeAffected:Kubernetes AND NOT ThreatFamilyName:(MaliciousFile OR SuspiciousFile)\",\"language\":\"kuery\"},\"label\":\"Kubernetes Protection\"},{\"input\":{\"query\":\"ThreatFamilyName:(MaliciousFile OR SuspiciousFile)\",\"language\":\"kuery\"},\"label\":\"Malware Protection\"},{\"input\":{\"query\":\"ResourceTypeAffected:S3\",\"language\":\"kuery\"},\"label\":\"S3 Protection\"}]},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":42}}}}"},"id":"72f65c40-14ce-11ed-8b90-dfaa63d2e2f6","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T15:05:41.391Z","version":"WzMzNzksMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - Severity Count by Findings","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"GuardDuty - Severity Count by Findings\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"@id\",\"customLabel\":\" \"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"severitylabel:high\",\"language\":\"kuery\"},\"label\":\"High\"},{\"input\":{\"query\":\"severitylabel:medium\",\"language\":\"kuery\"},\"label\":\"Medium\"},{\"input\":{\"query\":\"severitylabel:low\",\"language\":\"kuery\"},\"label\":\"Low\"}]},\"schema\":\"group\"}],\"params\":{\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"type\":\"range\",\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":42}},\"dimensions\":{\"metrics\":[{\"type\":\"vis_dimension\",\"accessor\":1,\"format\":{\"id\":\"number\",\"params\":{}}}],\"bucket\":{\"type\":\"vis_dimension\",\"accessor\":0,\"format\":{\"id\":\"string\",\"params\":{}}}},\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\"}}"},"id":"fef87760-86f4-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T15:06:43.429Z","version":"WzM0MDgsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - Severity Count by Logs","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"GuardDuty - Severity Count by Logs\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\" \"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"severitylabel:high\",\"language\":\"kuery\"},\"label\":\"High\"},{\"input\":{\"query\":\"severitylabel:medium\",\"language\":\"kuery\"},\"label\":\"Midium\"},{\"input\":{\"query\":\"severitylabel:low\",\"language\":\"kuery\"},\"label\":\"Low\"}]},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":42}}}}"},"id":"63f79b30-3bab-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T15:07:02.730Z","version":"WzM0MjIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - Severity Count by Logs (Bar)","uiStateJSON":"{\"vis\":{\"colors\":{\"High\":\"#BF1B00\",\"Medium\":\"#F9934E\",\"Low\":\"#508642\"}}}","version":1,"visState":"{\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-1y\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"filters\",\"schema\":\"group\",\"params\":{\"filters\":[{\"label\":\"High\",\"input\":{\"query\":\"severitylabel:high\",\"language\":\"kuery\"}},{\"label\":\"Medium\",\"input\":{\"query\":\"severitylabel:medium\",\"language\":\"kuery\"}},{\"label\":\"Low\",\"input\":{\"query\":\"severitylabel:low\",\"language\":\"kuery\"}}]}}],\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{},\"type\":\"category\"}],\"dimensions\":{\"x\":{\"accessor\":0,\"format\":{\"id\":\"date\",\"params\":{\"pattern\":\"YYYY-MM-DD\"}},\"params\":{\"date\":true,\"interval\":\"P1D\",\"format\":\"YYYY-MM-DD\",\"bounds\":{\"min\":\"2020-01-26T13:16:17.019Z\",\"max\":\"2020-04-25T13:16:17.019Z\"}},\"aggType\":\"date_histogram\"},\"y\":[{\"accessor\":2,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"series\":[{\"accessor\":1,\"format\":{},\"params\":{},\"aggType\":\"filters\"}]},\"grid\":{\"categoryLines\":false},\"labels\":{\"show\":false},\"legendPosition\":\"top\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"mode\":\"stacked\",\"show\":\"true\",\"showCircles\":true,\"type\":\"histogram\",\"valueAxis\":\"ValueAxis-1\"}],\"thresholdLine\":{\"color\":\"#34130C\",\"show\":false,\"style\":\"full\",\"value\":10,\"width\":1},\"times\":[],\"type\":\"histogram\",\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Count\"},\"type\":\"value\"}]},\"title\":\"GuardDuty - Severity Count by Logs (Bar)\"}"},"id":"401f74e0-8615-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T11:40:11.540Z","version":"WzI5MTksMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - Network Direction","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"@id\",\"customLabel\":\"Count\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"network.direction\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"NW Direction\"}}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"dimensions\":{\"metrics\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"title\":\"GuardDuty - Network Direction\"}"},"id":"bf3488c0-8786-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T11:40:11.540Z","version":"WzI5MjAsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - Affected Instance","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"GuardDuty - Affected Instance\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"resource.instanceDetails.instanceId\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"dimensions\":{\"metric\":{\"accessor\":0,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}}}}"},"id":"dc7b8cb0-86f7-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T12:13:45.597Z","version":"WzMxNTUsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - ThreatPurpose","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"GuardDuty - ThreatPurpose\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"ThreatPurpose\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":30,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"dimensions\":{\"metric\":{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"},\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}}}"},"id":"3f085520-86fd-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T12:14:24.297Z","version":"WzMxNzEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - ThreatFamilyName","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"GuardDuty - ThreatFamilyName\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"@id\",\"customLabel\":\"Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"ThreatFamilyName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":30,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"addLegend\":true,\"addTooltip\":true,\"dimensions\":{\"buckets\":[{\"accessor\":0,\"aggType\":\"terms\",\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"missingBucketLabel\":\"Missing\",\"otherBucketLabel\":\"Other\"}},\"params\":{}}],\"metric\":{\"accessor\":1,\"aggType\":\"count\",\"format\":{\"id\":\"number\"},\"params\":{}}},\"isDonut\":true,\"labels\":{\"last_level\":true,\"show\":false,\"truncate\":100,\"values\":true},\"legendPosition\":\"right\",\"type\":\"pie\"}}"},"id":"7e284e40-86fd-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T12:14:47.031Z","version":"WzMxODEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - Resource Type Affected","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"GuardDuty - Resource Type Affected\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"@id\",\"customLabel\":\"Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"ResourceTypeAffected\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"ResourceTypeAffected\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"dimensions\":{\"metrics\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}}}"},"id":"e4ce6380-8786-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T12:12:24.250Z","version":"WzMxMjUsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - Source Countries Geo Map","uiStateJSON":"{\"mapCenter\":[40.58058466412764,2.4609375000000004],\"mapZoom\":2}","version":1,"visState":"{\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"@id\",\"customLabel\":\"Count\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"source.geo.country_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"emsHotLink\":\"https://maps.elastic.co/v7.7?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"format\":\"image/png\",\"transparent\":true},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":10,\"minZoom\":0,\"origin\":\"elastic_maps_service\"}}},\"title\":\"GuardDuty - Source Countries Geo Map\"}"},"id":"a4134de0-870b-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T11:40:11.540Z","version":"WzI5MjUsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - Type Table","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"GuardDuty - Type Table\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"type\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":120,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"dimensions\":{\"metrics\":[{\"accessor\":0,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"buckets\":[]}}}"},"id":"75b825f0-8090-11ea-945d-8d0868f4a377","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T12:12:44.098Z","version":"WzMxNDAsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - user.name","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"GuardDuty - user.name\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"user.name\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"631913c0-14d9-11ed-8b90-dfaa63d2e2f6","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T16:12:22.140Z","version":"WzM2MzEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - user.id","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"GuardDuty - user.id\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"user.id\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"8e10d540-14d9-11ed-8b90-dfaa63d2e2f6","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T16:13:34.228Z","version":"WzM2MzksMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - source","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":2,\"direction\":\"desc\"}}}}","version":1,"visState":"{\"title\":\"GuardDuty - source\",\"type\":\"table\",\"aggs\":[{\"id\":\"4\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"source.geo.country_name\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Country\"},\"schema\":\"metric\"},{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"source.ip\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"b4aac570-14da-11ed-8b90-dfaa63d2e2f6","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T16:30:06.080Z","version":"WzM2NzgsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - destination","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":2,\"direction\":\"desc\"}}}}","version":1,"visState":"{\"title\":\"GuardDuty - destination\",\"type\":\"table\",\"aggs\":[{\"id\":\"4\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"destination.geo.country_name\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Country\"},\"schema\":\"metric\"},{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"destination.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"destination.ip\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":false,\"type\":\"terms\",\"params\":{\"field\":\"destination.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Country\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"8cca87b0-14db-11ed-8b90-dfaa63d2e2f6","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T16:27:51.082Z","version":"WzM2NzIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - EKS Cluster Name","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"GuardDuty - EKS Cluster Name\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"resource.eksClusterDetails.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Cluster Name\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"f84b1360-14d6-11ed-8b90-dfaa63d2e2f6","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T15:55:57.525Z","version":"WzM1NjAsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - Malware name","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"GuardDuty - Malware name\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Malware\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"bff8fe00-14d1-11ed-8b90-dfaa63d2e2f6","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T15:38:38.444Z","version":"WzM1MjEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"GuardDuty - S3 Bucket Name","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"GuardDuty - S3 Bucket Name\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"resource.s3BucketDetails.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"S3 Bucket Name\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"8601a370-14d4-11ed-8b90-dfaa63d2e2f6","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-08-05T15:38:22.578Z","version":"WzM1MTgsMV0="}
+{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"query\":{\"bool\":{\"should\":[{\"match_phrase\":{\"service.additionalInfo.sample\":true}},{\"match_phrase\":{\"service.additionalInfo.value\":\"{\\\"sample\\\":true}\"}}],\"minimum_should_match\":1}},\"meta\":{\"type\":\"custom\",\"disabled\":false,\"negate\":true,\"alias\":\"sample findings\",\"key\":\"query\",\"value\":\"{\\\"bool\\\":{\\\"should\\\":[{\\\"match_phrase\\\":{\\\"service.additionalInfo.sample\\\":true}},{\\\"match_phrase\\\":{\\\"service.additionalInfo.value\\\":\\\"{\\\\\\\"sample\\\\\\\":true}\\\"}}],\\\"minimum_should_match\\\":1}}\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"$state\":{\"store\":\"appState\"}}]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":6,\"i\":\"bfc49a59-28f5-49fe-8c7d-19550f626b68\"},\"panelIndex\":\"bfc49a59-28f5-49fe-8c7d-19550f626b68\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":24,\"y\":0,\"w\":24,\"h\":6,\"i\":\"72349c4c-1348-421e-b744-7088c627dac7\"},\"panelIndex\":\"72349c4c-1348-421e-b744-7088c627dac7\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":6,\"w\":48,\"h\":5,\"i\":\"e2b663b3-b29b-4abe-9580-d47ea2c6df1a\"},\"panelIndex\":\"e2b663b3-b29b-4abe-9580-d47ea2c6df1a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":11,\"w\":24,\"h\":7,\"i\":\"a3603a30-d6d1-4edf-8b5b-5cd9d8df834f\"},\"panelIndex\":\"a3603a30-d6d1-4edf-8b5b-5cd9d8df834f\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":24,\"y\":11,\"w\":24,\"h\":7,\"i\":\"422633cb-18d7-4069-ad96-569a3ed08b9d\"},\"panelIndex\":\"422633cb-18d7-4069-ad96-569a3ed08b9d\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":18,\"w\":48,\"h\":11,\"i\":\"0240454d-0b65-4b5a-8969-f39f2d1cd992\"},\"panelIndex\":\"0240454d-0b65-4b5a-8969-f39f2d1cd992\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":29,\"w\":12,\"h\":6,\"i\":\"14ceb7b0-e5b4-453f-a729-b385d6787e25\"},\"panelIndex\":\"14ceb7b0-e5b4-453f-a729-b385d6787e25\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":12,\"y\":29,\"w\":12,\"h\":9,\"i\":\"6085c182-7373-4a31-99d6-cb505cee997e\"},\"panelIndex\":\"6085c182-7373-4a31-99d6-cb505cee997e\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":24,\"y\":29,\"w\":12,\"h\":9,\"i\":\"c3192b50-941c-46a0-95fb-94afa6803bba\"},\"panelIndex\":\"c3192b50-941c-46a0-95fb-94afa6803bba\",\"embeddableConfig\":{},\"panelRefName\":\"panel_8\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":36,\"y\":29,\"w\":12,\"h\":9,\"i\":\"d7e1cbbe-a77b-4ae9-874d-460acd205103\"},\"panelIndex\":\"d7e1cbbe-a77b-4ae9-874d-460acd205103\",\"embeddableConfig\":{},\"panelRefName\":\"panel_9\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":35,\"w\":12,\"h\":9,\"i\":\"d28f8af7-b841-4a64-a173-f2c255b76625\"},\"panelIndex\":\"d28f8af7-b841-4a64-a173-f2c255b76625\",\"embeddableConfig\":{},\"panelRefName\":\"panel_10\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":12,\"y\":38,\"w\":36,\"h\":19,\"i\":\"9d780455-4477-4e53-ba9b-61c1339575d1\"},\"panelIndex\":\"9d780455-4477-4e53-ba9b-61c1339575d1\",\"embeddableConfig\":{\"mapCenter\":null,\"mapZoom\":2},\"panelRefName\":\"panel_11\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":44,\"w\":12,\"h\":13,\"i\":\"1260a6d7-9e11-4d68-953c-af12180ccabc\"},\"panelIndex\":\"1260a6d7-9e11-4d68-953c-af12180ccabc\",\"embeddableConfig\":{},\"panelRefName\":\"panel_12\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":57,\"w\":12,\"h\":11,\"i\":\"b018c23f-3a6d-4bef-a373-8e58eef3f411\"},\"panelIndex\":\"b018c23f-3a6d-4bef-a373-8e58eef3f411\",\"embeddableConfig\":{},\"panelRefName\":\"panel_13\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":12,\"y\":57,\"w\":10,\"h\":11,\"i\":\"6fbd2cf6-8f9e-4a60-83f1-4fa6aa57deb5\"},\"panelIndex\":\"6fbd2cf6-8f9e-4a60-83f1-4fa6aa57deb5\",\"embeddableConfig\":{},\"panelRefName\":\"panel_14\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":22,\"y\":57,\"w\":13,\"h\":11,\"i\":\"70ba928d-e554-41c6-bb48-ec11bb43fa11\"},\"panelIndex\":\"70ba928d-e554-41c6-bb48-ec11bb43fa11\",\"embeddableConfig\":{},\"panelRefName\":\"panel_15\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":35,\"y\":57,\"w\":13,\"h\":11,\"i\":\"06f29236-add2-46f7-bd04-a2e2fac8875f\"},\"panelIndex\":\"06f29236-add2-46f7-bd04-a2e2fac8875f\",\"embeddableConfig\":{},\"panelRefName\":\"panel_16\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":68,\"w\":16,\"h\":13,\"i\":\"c98aaa2e-3c8e-4164-87d4-813cacb51512\"},\"panelIndex\":\"c98aaa2e-3c8e-4164-87d4-813cacb51512\",\"embeddableConfig\":{},\"panelRefName\":\"panel_17\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":16,\"y\":68,\"w\":16,\"h\":13,\"i\":\"4cf7c656-d1c1-4d22-9ef1-92c3884bac46\"},\"panelIndex\":\"4cf7c656-d1c1-4d22-9ef1-92c3884bac46\",\"embeddableConfig\":{},\"panelRefName\":\"panel_18\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":32,\"y\":68,\"w\":16,\"h\":13,\"i\":\"eb245f5a-cf68-4b55-afbf-3e2a22ed3fce\"},\"panelIndex\":\"eb245f5a-cf68-4b55-afbf-3e2a22ed3fce\",\"embeddableConfig\":{},\"panelRefName\":\"panel_19\"},{\"version\":\"1.3.2\",\"gridData\":{\"x\":0,\"y\":81,\"w\":48,\"h\":15,\"i\":\"f3c8854f-7bf7-4d0c-91ef-16f2b7b8ba48\"},\"panelIndex\":\"f3c8854f-7bf7-4d0c-91ef-16f2b7b8ba48\",\"embeddableConfig\":{},\"panelRefName\":\"panel_20\"}]","timeRestore":false,"title":"GuardDuty Summary","version":1},"id":"1100a270-8245-11ea-8dd2-6fda3f2e19c6","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"8be467d0-7fc8-11ea-9ba8-7fa25bc74a6f","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"094d3070-860a-11ea-8ea1-d5ea957d0a7d","name":"panel_0","type":"visualization"},{"id":"181166d0-860a-11ea-8ea1-d5ea957d0a7d","name":"panel_1","type":"visualization"},{"id":"72f65c40-14ce-11ed-8b90-dfaa63d2e2f6","name":"panel_2","type":"visualization"},{"id":"fef87760-86f4-11ea-8ea1-d5ea957d0a7d","name":"panel_3","type":"visualization"},{"id":"63f79b30-3bab-11eb-9df7-6b7b0da6e7ae","name":"panel_4","type":"visualization"},{"id":"401f74e0-8615-11ea-8ea1-d5ea957d0a7d","name":"panel_5","type":"visualization"},{"id":"bf3488c0-8786-11ea-8ea1-d5ea957d0a7d","name":"panel_6","type":"visualization"},{"id":"dc7b8cb0-86f7-11ea-8ea1-d5ea957d0a7d","name":"panel_7","type":"visualization"},{"id":"3f085520-86fd-11ea-8ea1-d5ea957d0a7d","name":"panel_8","type":"visualization"},{"id":"7e284e40-86fd-11ea-8ea1-d5ea957d0a7d","name":"panel_9","type":"visualization"},{"id":"e4ce6380-8786-11ea-8ea1-d5ea957d0a7d","name":"panel_10","type":"visualization"},{"id":"a4134de0-870b-11ea-8ea1-d5ea957d0a7d","name":"panel_11","type":"visualization"},{"id":"75b825f0-8090-11ea-945d-8d0868f4a377","name":"panel_12","type":"visualization"},{"id":"631913c0-14d9-11ed-8b90-dfaa63d2e2f6","name":"panel_13","type":"visualization"},{"id":"8e10d540-14d9-11ed-8b90-dfaa63d2e2f6","name":"panel_14","type":"visualization"},{"id":"b4aac570-14da-11ed-8b90-dfaa63d2e2f6","name":"panel_15","type":"visualization"},{"id":"8cca87b0-14db-11ed-8b90-dfaa63d2e2f6","name":"panel_16","type":"visualization"},{"id":"f84b1360-14d6-11ed-8b90-dfaa63d2e2f6","name":"panel_17","type":"visualization"},{"id":"bff8fe00-14d1-11ed-8b90-dfaa63d2e2f6","name":"panel_18","type":"visualization"},{"id":"8601a370-14d4-11ed-8b90-dfaa63d2e2f6","name":"panel_19","type":"visualization"},{"id":"476df210-8707-11ea-8ea1-d5ea957d0a7d","name":"panel_20","type":"search"}],"type":"dashboard","updated_at":"2022-08-05T22:09:35.683Z","version":"WzM5NzMsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"OpenSearch - CloudWatch Dashboard","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OpenSearch - CloudWatch Dashboard\",\"type\":\"markdown\",\"aggs\":[],\"params\":{\"fontSize\":14,\"openLinksInNewTab\":false,\"markdown\":\"AWS CloudWatch dashboards: [[**Amazon OpenSearch Service**](https://console.aws.amazon.com/cloudwatch/home?#home:dashboards/ES)]\\n / [[**SIEM**](https://console.aws.amazon.com/cloudwatch/home?#dashboards:name=SIEM)]\"}}"},"id":"39656e20-aa35-11ec-8f4a-c1530765409c","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-07-30T07:01:21.787Z","version":"WzQwNTczLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"OpenSearch - Metrics Selector","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OpenSearch - Metrics Selector\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1647601557193\",\"fieldName\":\"opensearch.index.index_status\",\"parent\":\"\",\"label\":\"Index Status\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1647601607291\",\"fieldName\":\"opensearch.index.storage_tier\",\"parent\":\"\",\"label\":\"Storage Tier\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_1_index_pattern\"},{\"id\":\"1647601687198\",\"fieldName\":\"opensearch.index.name\",\"parent\":\"\",\"label\":\"Index Name\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_2_index_pattern\"},{\"id\":\"1647601444304\",\"fieldName\":\"opensearch.index.status\",\"parent\":\"\",\"label\":\"Index Health\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_3_index_pattern\"}],\"updateFiltersOnChange\":false,\"useTimeFilter\":true,\"pinFilters\":false}}"},"id":"cc29e980-a6ab-11ec-bdc8-fdd8cf30a1b1","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"control_0_index_pattern","type":"index-pattern"},{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"control_1_index_pattern","type":"index-pattern"},{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"control_2_index_pattern","type":"index-pattern"},{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"control_3_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2022-07-30T07:01:21.787Z","version":"WzQwNTc0LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"query\",\"negate\":false,\"type\":\"custom\",\"value\":\"{\\\"range\\\":{\\\"@timestamp\\\":{\\\"gte\\\":\\\"now-2h\\\"}}}\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"range\":{\"@timestamp\":{\"gte\":\"now-2h\"}}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OpenSearch - Node Type","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OpenSearch - Node Type\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"opensearch.shard.source_node.uuid\",\"customLabel\":\"Node\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"opensearch.index.storage_tier: hot\",\"language\":\"kuery\"},\"label\":\"Data\"},{\"input\":{\"query\":\"opensearch.index.storage_tier: warm\",\"language\":\"kuery\"},\"label\":\"UltraWarm\"}]},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"5fa2e390-a65e-11ec-bdc8-fdd8cf30a1b1","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-07-30T07:01:21.787Z","version":"WzQwNTc1LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OpenSearch - Data Size Stats","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OpenSearch - Data Size Stats\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg_bucket\",\"params\":{\"customBucket\":{\"id\":\"1-bucket\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"@timestamp\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},\"customMetric\":{\"id\":\"1-metric\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"opensearch.index.total.store.size_in_bytes\",\"json\":\"\"}},\"customLabel\":\"Data Size\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"opensearch.index.storage_tier: hot\",\"language\":\"kuery\"},\"label\":\"Data Node\"},{\"input\":{\"query\":\"opensearch.index.storage_tier: warm\",\"language\":\"kuery\"},\"label\":\"UltraWarm Node\"},{\"input\":{\"query\":\"opensearch.index.storage_tier: cold\",\"language\":\"kuery\"},\"label\":\"Cold\"}]},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":34}}}}"},"id":"72b556b0-a664-11ec-a06a-3ba809c40d88","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-07-30T07:37:31.963Z","version":"WzQwNzQ3LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"OpenSearch - Number of Docs","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OpenSearch - Number of Docs\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"metric\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"size\":1,\"agg_with\":\"concat\",\"order\":\"desc\",\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"cardinality\",\"field\":\"@timestamp\"},{\"id\":\"d375a470-a6d5-11ec-a4d6-ab6d6b418454\",\"type\":\"sum\",\"field\":\"opensearch.index.primaries.docs.count\"},{\"id\":\"debaed40-a6d5-11ec-a4d6-ab6d6b418454\",\"type\":\"math\",\"variables\":[{\"id\":\"e1b8c3f0-a6d5-11ec-a4d6-ab6d6b418454\",\"name\":\"docs_count\",\"field\":\"d375a470-a6d5-11ec-a4d6-ab6d6b418454\"},{\"id\":\"ed895cd0-a6d5-11ec-a4d6-ab6d6b418454\",\"name\":\"unique_count\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"}],\"script\":\"params.docs_count / params.unique_count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"0.0 a\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\" \",\"hidden\":false}],\"time_field\":\"@timestamp\",\"index_pattern\":\"metrics-*\",\"interval\":\">=60m\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"log-*\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"f6e0a330-a6d3-11ec-a4d6-ab6d6b418454\"}],\"drop_last_bucket\":1}}"},"id":"481ee840-a6d6-11ec-a06a-3ba809c40d88","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-07-30T07:01:21.787Z","version":"WzQwNTc3LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OpenSearch - Data Size by Storage Tier","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OpenSearch - Data Size by Storage Tier\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg_bucket\",\"params\":{\"customBucket\":{\"id\":\"1-bucket\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"@timestamp\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},\"customMetric\":{\"id\":\"1-metric\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"opensearch.index.total.store.size_in_bytes\",\"json\":\"{ \\\"script\\\" : \\\"doc['opensearch.index.total.store.size_in_bytes'].value / 1024.0 / 1024.0 / 1024.0\\\" }\",\"customLabel\":\"\"}},\"json\":\"\",\"customLabel\":\"Strage Usage (GB)\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-7d\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"opensearch.index.storage_tier\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Strage Usage (GB)\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Strage Usage (GB)\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"top\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"7516a6a0-a661-11ec-bdc8-fdd8cf30a1b1","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-07-30T07:01:21.787Z","version":"WzQwNTc4LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"metricset.name\",\"negate\":false,\"params\":{\"query\":\"index\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"metricset.name\":\"index\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OpenSearch - Number of Indices","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OpenSearch - Number of Indices\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"max_bucket\",\"params\":{\"customBucket\":{\"id\":\"1-bucket\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"@timestamp\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},\"customMetric\":{\"id\":\"1-metric\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"}},\"customLabel\":\"Number of indices\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":48}}}}"},"id":"d4d81c10-a650-11ec-a06a-3ba809c40d88","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-07-30T07:01:21.787Z","version":"WzQwNTc5LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"metricset.name\",\"negate\":false,\"params\":{\"query\":\"index\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"metricset.name\":\"index\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OpenSearch - Number of Indices by Storage Tier","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OpenSearch - Number of Indices by Storage Tier\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"max_bucket\",\"params\":{\"customBucket\":{\"id\":\"1-bucket\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"@timestamp\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},\"customMetric\":{\"id\":\"1-metric\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"}},\"customLabel\":\"Storage\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"opensearch.index.storage_tier: hot\",\"language\":\"kuery\"},\"label\":\"Hot\"},{\"input\":{\"query\":\"opensearch.index.storage_tier: warm\",\"language\":\"kuery\"},\"label\":\"UltraWarm\"},{\"input\":{\"query\":\"opensearch.index.storage_tier: cold\",\"language\":\"kuery\"},\"label\":\"Cold\"}]},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"930cb530-a654-11ec-a06a-3ba809c40d88","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-07-30T07:01:21.787Z","version":"WzQwNTgwLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"metricset.name\",\"negate\":false,\"params\":{\"query\":\"index\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"metricset.name\":\"index\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"opensearch.index.storage_tier\",\"negate\":false,\"params\":{\"query\":\"hot\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"opensearch.index.storage_tier\":\"hot\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":\"log* or metrics*\",\"disabled\":false,\"key\":\"query\",\"negate\":false,\"type\":\"custom\",\"value\":\"{\\\"bool\\\":{\\\"should\\\":[{\\\"wildcard\\\":{\\\"opensearch.index.name\\\":\\\"metrics*\\\"}},{\\\"wildcard\\\":{\\\"opensearch.index.name\\\":\\\"log*\\\"}}]}}\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[2].meta.index\"},\"query\":{\"bool\":{\"should\":[{\"wildcard\":{\"opensearch.index.name\":\"metrics*\"}},{\"wildcard\":{\"opensearch.index.name\":\"log*\"}}]}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"opensearch.index.index_status\",\"negate\":false,\"params\":{\"query\":\"open\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[3].meta.index\"},\"query\":{\"match_phrase\":{\"opensearch.index.index_status\":\"open\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OpenSearch - Oldest Indices in Data Node","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":\"asc\"}}}}","version":1,"visState":"{\"title\":\"OpenSearch - Oldest Indices in Data Node\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"max_bucket\",\"params\":{\"customBucket\":{\"id\":\"1-bucket\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"@timestamp\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},\"customMetric\":{\"id\":\"1-metric\",\"enabled\":true,\"type\":\"min\",\"params\":{\"field\":\"opensearch.index.creation.date\",\"customLabel\":\"\"}},\"customLabel\":\"Create Date\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"opensearch.index.name\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":2147483647,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Index Name\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"max_bucket\",\"params\":{\"customBucket\":{\"id\":\"3-bucket\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"@timestamp\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},\"customMetric\":{\"id\":\"3-metric\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"opensearch.index.total.store.size_in_bytes\",\"json\":\"\"}},\"customLabel\":\"Total Store Size\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"ec7890d0-a71c-11ec-bdc8-fdd8cf30a1b1","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"},{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[2].meta.index","type":"index-pattern"},{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[3].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-07-30T07:39:17.960Z","version":"WzQwNzg3LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"metricset.name\",\"negate\":false,\"params\":{\"query\":\"shard\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"metricset.name\":\"shard\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OpenSearch - Number of Shards","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OpenSearch - Number of Shards\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"min_bucket\",\"params\":{\"customBucket\":{\"id\":\"1-bucket\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"@timestamp\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},\"customMetric\":{\"id\":\"1-metric\",\"enabled\":true,\"type\":\"count\",\"params\":{}},\"customLabel\":\"Number of shards\"},\"schema\":\"metric\"}],\"params\":{\"addLegend\":false,\"addTooltip\":true,\"metric\":{\"colorSchema\":\"Green to Red\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"invertColors\":false,\"labels\":{\"show\":true},\"metricColorMode\":\"None\",\"percentageMode\":false,\"style\":{\"bgColor\":false,\"bgFill\":\"#000\",\"fontSize\":48,\"labelColor\":false,\"subText\":\"\"},\"useRanges\":false},\"type\":\"metric\"}}"},"id":"ab1d69e0-a60d-11ec-8f4a-c1530765409c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-07-30T07:01:21.787Z","version":"WzQwNTgyLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"metricset.name\",\"negate\":false,\"params\":{\"query\":\"shard\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"metricset.name\":\"shard\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OpenSearch - Number of Shards by Storage Tier","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OpenSearch - Number of Shards by Storage Tier\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"max_bucket\",\"params\":{\"customBucket\":{\"id\":\"1-bucket\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"@timestamp\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},\"customMetric\":{\"id\":\"1-metric\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"}},\"customLabel\":\"Storage\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"opensearch.index.storage_tier: hot\",\"language\":\"kuery\"},\"label\":\"Data Node\"},{\"input\":{\"query\":\"opensearch.index.storage_tier: warm\",\"language\":\"kuery\"},\"label\":\"UltraWarm Node\"}],\"json\":\"\"},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"14ddbd70-a655-11ec-a06a-3ba809c40d88","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-07-30T07:01:21.787Z","version":"WzQwNTgzLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OpenSearch - Metricset","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OpenSearch - Metricset\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"max_bucket\",\"params\":{\"customBucket\":{\"id\":\"1-bucket\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"@timestamp\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},\"customMetric\":{\"id\":\"1-metric\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"}},\"customLabel\":\"Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"metricset.name\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-6h\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"top\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"95c21890-a651-11ec-bdc8-fdd8cf30a1b1","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-07-30T07:01:21.787Z","version":"WzQwNTg0LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"OpenSearch - Shards per Node (DataNode)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OpenSearch - Shards per Node (DataNode)\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"gauge\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"cardinality\",\"field\":\"opensearch.node.id\"},{\"id\":\"931c93d0-a73d-11ec-9756-43e33200129f\",\"type\":\"count\"},{\"id\":\"06409b30-a712-11ec-99d8-4beef1ab6fd7\",\"type\":\"cardinality\",\"field\":\"@timestamp\"},{\"id\":\"22c8fd10-a712-11ec-99d8-4beef1ab6fd7\",\"type\":\"math\",\"variables\":[{\"id\":\"2aa3f1c0-a712-11ec-99d8-4beef1ab6fd7\",\"name\":\"node_count\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"},{\"id\":\"34d70740-a712-11ec-99d8-4beef1ab6fd7\",\"name\":\"shard_count\",\"field\":\"931c93d0-a73d-11ec-9756-43e33200129f\"},{\"id\":\"a49fc320-a73d-11ec-9756-43e33200129f\",\"name\":\"timestamp_count\",\"field\":\"06409b30-a712-11ec-99d8-4beef1ab6fd7\"}],\"script\":\"params.shard_count / params.timestamp_count / params.node_count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"0\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Shards/Node\",\"terms_field\":\"opensearch.index.storage_tier\",\"terms_exclude\":\"\",\"terms_order_by\":\"_key\",\"terms_direction\":\"asc\",\"terms_include\":\"hot\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"metrics-*\",\"interval\":\">=60m\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"log-*\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"8f1dc580-a709-11ec-99d8-4beef1ab6fd7\"}],\"gauge_color_rules\":[{\"value\":800,\"id\":\"9426d580-a709-11ec-99d8-4beef1ab6fd7\",\"operator\":\"lt\"},{\"value\":800,\"id\":\"9dc29690-a715-11ec-99d8-4beef1ab6fd7\",\"operator\":\"gt\",\"gauge\":\"rgba(214,191,87,1)\"},{\"value\":900,\"id\":\"a3752d00-a715-11ec-99d8-4beef1ab6fd7\",\"operator\":\"gt\",\"gauge\":\"rgba(231,102,76,1)\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"filter\":{\"query\":\"metricset.name:shard\",\"language\":\"kuery\"},\"gauge_max\":\"1000\"}}"},"id":"d9197690-a711-11ec-bdc8-fdd8cf30a1b1","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-07-30T07:01:21.787Z","version":"WzQwNTg1LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"OpenSearch - Shards per Node (UltraWarm)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OpenSearch - Shards per Node (UltraWarm)\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"gauge\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"cardinality\",\"field\":\"opensearch.node.id\"},{\"id\":\"931c93d0-a73d-11ec-9756-43e33200129f\",\"type\":\"count\"},{\"id\":\"06409b30-a712-11ec-99d8-4beef1ab6fd7\",\"type\":\"cardinality\",\"field\":\"@timestamp\"},{\"id\":\"22c8fd10-a712-11ec-99d8-4beef1ab6fd7\",\"type\":\"math\",\"variables\":[{\"id\":\"2aa3f1c0-a712-11ec-99d8-4beef1ab6fd7\",\"name\":\"node_count\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"},{\"id\":\"34d70740-a712-11ec-99d8-4beef1ab6fd7\",\"name\":\"shard_count\",\"field\":\"931c93d0-a73d-11ec-9756-43e33200129f\"},{\"id\":\"a49fc320-a73d-11ec-9756-43e33200129f\",\"name\":\"timestamp_count\",\"field\":\"06409b30-a712-11ec-99d8-4beef1ab6fd7\"}],\"script\":\"params.shard_count / params.timestamp_count / params.node_count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"0\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Shards/Node\",\"terms_field\":\"opensearch.index.storage_tier\",\"terms_exclude\":\"\",\"terms_order_by\":\"_key\",\"terms_direction\":\"asc\",\"terms_include\":\"warm\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"metrics-*\",\"interval\":\">=60m\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"log-*\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"8f1dc580-a709-11ec-99d8-4beef1ab6fd7\"}],\"gauge_color_rules\":[{\"value\":1000,\"id\":\"9426d580-a709-11ec-99d8-4beef1ab6fd7\",\"operator\":\"lt\"},{\"value\":1000,\"id\":\"9dc29690-a715-11ec-99d8-4beef1ab6fd7\",\"operator\":\"gt\",\"gauge\":\"rgba(214,191,87,1)\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"filter\":{\"query\":\"metricset.name:shard\",\"language\":\"kuery\"},\"gauge_max\":\"1000\"}}"},"id":"43509340-aa37-11ec-a06a-3ba809c40d88","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-07-30T07:01:21.787Z","version":"WzQwNTg2LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"metricset.name\",\"negate\":false,\"params\":{\"query\":\"shard\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"metricset.name\":\"shard\"}}},{\"$state\":{\"store\":\"appState\"},\"exists\":{\"field\":\"opensearch.shard.store.size_in_bytes\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"opensearch.shard.store.size_in_bytes\",\"negate\":false,\"type\":\"exists\",\"value\":\"exists\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"opensearch.shard.primary\",\"negate\":false,\"params\":{\"query\":true},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[2].meta.index\"},\"query\":{\"match_phrase\":{\"opensearch.shard.primary\":true}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OpenSearch - Top Shard Size","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":\"desc\"}}}}","version":1,"visState":"{\"title\":\"OpenSearch - Top Shard Size\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg_bucket\",\"params\":{\"customBucket\":{\"id\":\"1-bucket\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"@timestamp\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},\"customMetric\":{\"id\":\"1-metric\",\"enabled\":true,\"type\":\"max\",\"params\":{\"field\":\"opensearch.shard.store.size_in_bytes\",\"json\":\"\"}},\"customLabel\":\"Shard Size\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":false,\"type\":\"terms\",\"params\":{\"field\":\"@timestamp\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"opensearch.index.name\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":10000000,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"index name\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"avg_bucket\",\"params\":{\"customBucket\":{\"id\":\"5-bucket\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"@timestamp\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},\"customMetric\":{\"id\":\"5-metric\",\"enabled\":true,\"type\":\"count\",\"params\":{}},\"customLabel\":\"Number of Shard\"},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"avg_bucket\",\"params\":{\"customBucket\":{\"id\":\"4-bucket\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"@timestamp\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},\"customMetric\":{\"id\":\"4-metric\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"opensearch.shard.store.size_in_bytes\",\"json\":\"\"}},\"customLabel\":\"Index Size\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"percentageCol\":\"\",\"showMetricsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"}}"},"id":"1f6c16b0-a673-11ec-8f4a-c1530765409c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"},{"id":"7647d070-97b7-11ec-83e7-856989243e56","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[2].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-07-30T07:40:30.226Z","version":"WzQwODA5LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"title":"OpenSearch - Top 10 Shard Size","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OpenSearch - Top 10 Shard Size\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"background_color_rules\":[{\"id\":\"9c23bcd0-a6d7-11ec-a4d6-ab6d6b418454\"}],\"bar_color_rules\":[{\"value\":33000000000,\"id\":\"5c7be420-a6d9-11ec-a4d6-ab6d6b418454\",\"operator\":\"lt\"},{\"value\":33000000000,\"id\":\"07454580-a708-11ec-99d8-4beef1ab6fd7\",\"operator\":\"gt\",\"bar_color\":\"rgba(214,191,87,1)\"},{\"value\":50000000000,\"id\":\"0e6fd5f0-a708-11ec-99d8-4beef1ab6fd7\",\"operator\":\"gt\",\"bar_color\":\"rgba(231,102,76,1)\"}],\"default_index_pattern\":\"log-*\",\"default_timefield\":\"@timestamp\",\"drop_last_bucket\":1,\"filter\":{\"query\":\"(@timestamp > \\\"now-7d\\\") and metricset.name:shard and opensearch.shard.primary:true\",\"language\":\"kuery\"},\"gauge_color_rules\":[{\"gauge\":null,\"id\":\"9dafb400-a6d7-11ec-a4d6-ab6d6b418454\",\"operator\":\"lt\",\"value\":13000000000},{\"gauge\":\"rgba(214,191,87,1)\",\"id\":\"1bff72d0-a6da-11ec-a4d6-ab6d6b418454\",\"operator\":\"gt\",\"value\":13000000000},{\"gauge\":\"rgba(231,102,76,1)\",\"id\":\"293ce220-a6da-11ec-a4d6-ab6d6b418454\",\"operator\":\"gt\",\"value\":16000000000}],\"gauge_inner_width\":\"010\",\"gauge_max\":\"60000000000\",\"gauge_style\":\"half\",\"gauge_width\":\"10\",\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"ignore_global_filter\":0,\"index_pattern\":\"metrics-*\",\"interval\":\">=60m\",\"isModelInvalid\":false,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"filter\":{\"query\":\"\",\"language\":\"kuery\"},\"formatter\":\"bytes\",\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"label\":\" \",\"line_width\":1,\"metrics\":[{\"field\":\"opensearch.shard.store.size_in_bytes\",\"id\":\"d4dd11c0-a6d7-11ec-a4d6-ab6d6b418454\",\"sigma\":\"\",\"type\":\"max\"}],\"point_size\":1,\"separate_axis\":0,\"split_color_mode\":\"opensearchDashboards\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"opensearch.index.name\",\"terms_order_by\":\"d4dd11c0-a6d7-11ec-a4d6-ab6d6b418454\",\"terms_size\":\"10\",\"value_template\":\"\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"time_range_mode\":\"last_value\",\"tooltip_mode\":\"show_all\",\"type\":\"top_n\",\"drilldown_url\":\"\"}}"},"id":"0bd0f380-a6d9-11ec-bdc8-fdd8cf30a1b1","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-07-30T07:01:21.787Z","version":"WzQwNTg4LDFd"}
+{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{\"hidePanelTitles\":true},\"gridData\":{\"h\":3,\"i\":\"16f40e16-c0e1-44bd-812c-b17e87c56a86\",\"w\":48,\"x\":0,\"y\":0},\"panelIndex\":\"16f40e16-c0e1-44bd-812c-b17e87c56a86\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{\"hidePanelTitles\":true},\"gridData\":{\"h\":7,\"i\":\"9e3cbc50-4e1b-4adf-b578-51e408cd54db\",\"w\":48,\"x\":0,\"y\":3},\"panelIndex\":\"9e3cbc50-4e1b-4adf-b578-51e408cd54db\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":5,\"i\":\"f47fdd75-4f2a-4c26-ab4e-65ddc0bdc8cf\",\"w\":11,\"x\":0,\"y\":10},\"panelIndex\":\"f47fdd75-4f2a-4c26-ab4e-65ddc0bdc8cf\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":5,\"i\":\"bc3438f9-a1e9-47b2-8d78-ea93e8f75f38\",\"w\":28,\"x\":11,\"y\":10},\"panelIndex\":\"bc3438f9-a1e9-47b2-8d78-ea93e8f75f38\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":5,\"i\":\"8679de66-5d93-451f-b156-411755fa38c8\",\"w\":9,\"x\":39,\"y\":10},\"panelIndex\":\"8679de66-5d93-451f-b156-411755fa38c8\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"7b675bc5-5dbd-414d-8b1e-93b9ae50f72a\",\"w\":48,\"x\":0,\"y\":15},\"panelIndex\":\"7b675bc5-5dbd-414d-8b1e-93b9ae50f72a\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":8,\"i\":\"51085526-d387-43ef-98e7-dd58842bf7b0\",\"w\":7,\"x\":0,\"y\":26},\"panelIndex\":\"51085526-d387-43ef-98e7-dd58842bf7b0\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_6\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":8,\"i\":\"7505d1d9-f7de-49fb-9985-c07812570851\",\"w\":15,\"x\":7,\"y\":26},\"panelIndex\":\"7505d1d9-f7de-49fb-9985-c07812570851\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_7\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":13,\"i\":\"a8b75b5d-ffe9-4b3e-8524-11970e94463b\",\"w\":26,\"x\":22,\"y\":26},\"panelIndex\":\"a8b75b5d-ffe9-4b3e-8524-11970e94463b\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_8\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":8,\"i\":\"c606c0c2-a6a7-401e-83cd-b894b498cd55\",\"w\":7,\"x\":0,\"y\":34},\"panelIndex\":\"c606c0c2-a6a7-401e-83cd-b894b498cd55\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_9\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":8,\"i\":\"5c98b785-0bae-4c99-a18a-2c381cf9dd96\",\"w\":15,\"x\":7,\"y\":34},\"panelIndex\":\"5c98b785-0bae-4c99-a18a-2c381cf9dd96\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_10\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":12,\"i\":\"a85bcd9e-56aa-40f3-99d1-9c01c318dcd9\",\"w\":26,\"x\":22,\"y\":39},\"panelIndex\":\"a85bcd9e-56aa-40f3-99d1-9c01c318dcd9\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_11\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"c6749e2d-80b8-431a-9885-cb4b21858bbc\",\"w\":11,\"x\":0,\"y\":42},\"panelIndex\":\"c6749e2d-80b8-431a-9885-cb4b21858bbc\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_12\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"e0a3ebac-eba7-4fa3-9ec5-34a82b2db5f4\",\"w\":11,\"x\":11,\"y\":42},\"panelIndex\":\"e0a3ebac-eba7-4fa3-9ec5-34a82b2db5f4\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_13\"},{\"embeddableConfig\":{\"table\":null,\"vis\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":\"desc\"}}}},\"gridData\":{\"h\":15,\"i\":\"be880f38-2ed3-43ac-af4a-137adbe149fe\",\"w\":24,\"x\":0,\"y\":51},\"panelIndex\":\"be880f38-2ed3-43ac-af4a-137adbe149fe\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_14\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"b71679ed-0b08-4649-a897-6a695ea50e94\",\"w\":24,\"x\":24,\"y\":51},\"panelIndex\":\"b71679ed-0b08-4649-a897-6a695ea50e94\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_15\"}]","refreshInterval":{"pause":true,"value":0},"timeFrom":"now-7d","timeRestore":true,"timeTo":"now","title":"OpenSearch Metrics","version":1},"id":"0840f7c0-a651-11ec-a06a-3ba809c40d88","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"39656e20-aa35-11ec-8f4a-c1530765409c","name":"panel_0","type":"visualization"},{"id":"cc29e980-a6ab-11ec-bdc8-fdd8cf30a1b1","name":"panel_1","type":"visualization"},{"id":"5fa2e390-a65e-11ec-bdc8-fdd8cf30a1b1","name":"panel_2","type":"visualization"},{"id":"72b556b0-a664-11ec-a06a-3ba809c40d88","name":"panel_3","type":"visualization"},{"id":"481ee840-a6d6-11ec-a06a-3ba809c40d88","name":"panel_4","type":"visualization"},{"id":"7516a6a0-a661-11ec-bdc8-fdd8cf30a1b1","name":"panel_5","type":"visualization"},{"id":"d4d81c10-a650-11ec-a06a-3ba809c40d88","name":"panel_6","type":"visualization"},{"id":"930cb530-a654-11ec-a06a-3ba809c40d88","name":"panel_7","type":"visualization"},{"id":"ec7890d0-a71c-11ec-bdc8-fdd8cf30a1b1","name":"panel_8","type":"visualization"},{"id":"ab1d69e0-a60d-11ec-8f4a-c1530765409c","name":"panel_9","type":"visualization"},{"id":"14ddbd70-a655-11ec-a06a-3ba809c40d88","name":"panel_10","type":"visualization"},{"id":"95c21890-a651-11ec-bdc8-fdd8cf30a1b1","name":"panel_11","type":"visualization"},{"id":"d9197690-a711-11ec-bdc8-fdd8cf30a1b1","name":"panel_12","type":"visualization"},{"id":"43509340-aa37-11ec-a06a-3ba809c40d88","name":"panel_13","type":"visualization"},{"id":"1f6c16b0-a673-11ec-8f4a-c1530765409c","name":"panel_14","type":"visualization"},{"id":"0bd0f380-a6d9-11ec-bdc8-fdd8cf30a1b1","name":"panel_15","type":"visualization"}],"type":"dashboard","updated_at":"2022-07-30T07:41:54.229Z","version":"WzQwODQ2LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OCSF CloudActivity - Cloud Account(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OCSF CloudActivity - Cloud Account(Bar)\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#34130C\"},\"dimensions\":{\"x\":{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"},\"y\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}]}}}"},"id":"61954190-243d-11ed-a223-392f5fb66add","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3e63cdd0-2399-11ed-a223-392f5fb66add","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-12-04T09:31:15.472Z","version":"WzEzNDIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OCSF CloudActivity - Region(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OCSF CloudActivity - Region(Bar)\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#34130C\"},\"dimensions\":{\"x\":{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"},\"y\":[{\"accessor\":2,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"series\":[{\"accessor\":1,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}}}"},"id":"77756260-243d-11ed-8158-55dbbfbae4a1","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3e63cdd0-2399-11ed-a223-392f5fb66add","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-12-04T09:31:15.472Z","version":"WzEzNDMsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OCSF CloudActivity - Source Countries","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OCSF CloudActivity - Source Countries\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"dimensions\":{\"metric\":{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"},\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}}}"},"id":"f4a90600-2443-11ed-8158-55dbbfbae4a1","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3e63cdd0-2399-11ed-a223-392f5fb66add","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-12-04T09:31:15.472Z","version":"WzEzNDQsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OCSF CloudActivity - Source IP","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"OCSF CloudActivity - Source IP\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"dimensions\":{\"metrics\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"ip\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}}}"},"id":"23f04b80-2444-11ed-8158-55dbbfbae4a1","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3e63cdd0-2399-11ed-a223-392f5fb66add","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-12-04T09:31:15.472Z","version":"WzEzNDUsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OCSF CloudActivity - Source Countries(Geo)","uiStateJSON":"{\"mapZoom\":2,\"mapCenter\":[21.453068633086783,26.3558692421991]}","version":1,"visState":"{\"title\":\"OCSF CloudActivity - Source Countries(Geo)\",\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"emsHotLink\":\"https://maps.elastic.co/v7.7?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"format\":\"image/png\",\"transparent\":true},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":10,\"minZoom\":0,\"origin\":\"elastic_maps_service\"}}}}"},"id":"176e6fc0-245f-11ed-a223-392f5fb66add","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3e63cdd0-2399-11ed-a223-392f5fb66add","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-12-04T09:31:15.472Z","version":"WzEzNDYsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OCSF CloudActivity - Source AS","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OCSF CloudActivity - Source AS\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.as.organization.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"dimensions\":{\"metric\":{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"},\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}}}"},"id":"1108f850-2444-11ed-a223-392f5fb66add","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3e63cdd0-2399-11ed-a223-392f5fb66add","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-12-04T09:31:15.472Z","version":"WzEzNDcsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"query\": {\n \"query\": \"\",\n \"language\": \"kuery\"\n },\n \"filter\": [],\n \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"\n}"},"title":"OCSF CloudActivity - API Service(Pie)","uiStateJSON":"{}","version":1,"visState":"{\n \"title\": \"OCSF CloudActivity - API Service(Pie)\",\n \"type\": \"pie\",\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"params\": {},\n \"schema\": \"metric\"\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"params\": {\n \"field\": \"api.service.name\",\n \"orderBy\": \"1\",\n \"order\": \"desc\",\n \"size\": 10,\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\"\n },\n \"schema\": \"segment\"\n }\n ],\n \"params\": {\n \"type\": \"pie\",\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"isDonut\": true,\n \"labels\": {\n \"show\": false,\n \"values\": true,\n \"last_level\": true,\n \"truncate\": 100\n },\n \"dimensions\": {\n \"metric\": {\n \"accessor\": 0,\n \"format\": {\n \"id\": \"number\"\n },\n \"params\": {},\n \"aggType\": \"count\"\n }\n }\n }\n}"},"id":"d12613a0-245f-11ed-8158-55dbbfbae4a1","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3e63cdd0-2399-11ed-a223-392f5fb66add","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-12-04T09:31:15.472Z","version":"WzEzNDgsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"query\": {\n \"query\": \"\",\n \"language\": \"kuery\"\n },\n \"filter\": [],\n \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"\n}"},"title":"OCSF CloudActivity - API Service(Area)","uiStateJSON":"{}","version":1,"visState":"{\n \"title\": \"OCSF CloudActivity - API Service(Area)\",\n \"type\": \"area\",\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"params\": {},\n \"schema\": \"metric\"\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"date_histogram\",\n \"params\": {\n \"field\": \"@timestamp\",\n \"timeRange\": {\n \"from\": \"now-1y\",\n \"to\": \"now\"\n },\n \"useNormalizedOpenSearchInterval\": true,\n \"scaleMetricValues\": false,\n \"interval\": \"auto\",\n \"drop_partials\": false,\n \"min_doc_count\": 1,\n \"extended_bounds\": {}\n },\n \"schema\": \"segment\"\n },\n {\n \"id\": \"3\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"params\": {\n \"field\": \"api.service.name\",\n \"orderBy\": \"1\",\n \"order\": \"desc\",\n \"size\": 10,\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\"\n },\n \"schema\": \"group\"\n }\n ],\n \"params\": {\n \"type\": \"area\",\n \"grid\": {\n \"categoryLines\": false\n },\n \"categoryAxes\": [\n {\n \"id\": \"CategoryAxis-1\",\n \"type\": \"category\",\n \"position\": \"bottom\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"linear\"\n },\n \"labels\": {\n \"show\": true,\n \"filter\": true,\n \"truncate\": 100\n },\n \"title\": {}\n }\n ],\n \"valueAxes\": [\n {\n \"id\": \"ValueAxis-1\",\n \"name\": \"LeftAxis-1\",\n \"type\": \"value\",\n \"position\": \"left\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"linear\",\n \"mode\": \"normal\"\n },\n \"labels\": {\n \"show\": true,\n \"rotate\": 0,\n \"filter\": false,\n \"truncate\": 100\n },\n \"title\": {\n \"text\": \"Count\"\n }\n }\n ],\n \"seriesParams\": [\n {\n \"show\": \"true\",\n \"type\": \"area\",\n \"mode\": \"stacked\",\n \"data\": {\n \"label\": \"Count\",\n \"id\": \"1\"\n },\n \"drawLinesBetweenPoints\": true,\n \"showCircles\": true,\n \"interpolate\": \"linear\",\n \"valueAxis\": \"ValueAxis-1\"\n }\n ],\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"times\": [],\n \"addTimeMarker\": false,\n \"thresholdLine\": {\n \"show\": false,\n \"value\": 10,\n \"width\": 1,\n \"style\": \"full\",\n \"color\": \"#34130C\"\n },\n \"labels\": {},\n \"dimensions\": {\n \"x\": null,\n \"y\": [\n {\n \"accessor\": 0,\n \"format\": {\n \"id\": \"number\"\n },\n \"params\": {},\n \"aggType\": \"count\"\n }\n ]\n }\n }\n}"},"id":"bdd96ef0-245f-11ed-8158-55dbbfbae4a1","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3e63cdd0-2399-11ed-a223-392f5fb66add","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-12-04T09:31:15.472Z","version":"WzEzNDksMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"query\": {\n \"query\": \"\",\n \"language\": \"kuery\"\n },\n \"filter\": [],\n \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"\n}"},"title":"OCSF CloudActivity - API Operation(Pie)","uiStateJSON":"{}","version":1,"visState":"{\n \"title\": \"OCSF CloudActivity - API Operation(Pie)\",\n \"type\": \"pie\",\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"params\": {},\n \"schema\": \"metric\"\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"params\": {\n \"field\": \"api.operation\",\n \"orderBy\": \"1\",\n \"order\": \"desc\",\n \"size\": 10,\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\"\n },\n \"schema\": \"segment\"\n }\n ],\n \"params\": {\n \"type\": \"pie\",\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"isDonut\": true,\n \"labels\": {\n \"show\": false,\n \"values\": true,\n \"last_level\": true,\n \"truncate\": 100\n },\n \"dimensions\": {\n \"metric\": {\n \"accessor\": 0,\n \"format\": {\n \"id\": \"number\"\n },\n \"params\": {},\n \"aggType\": \"count\"\n }\n }\n }\n}"},"id":"975e7110-2461-11ed-8158-55dbbfbae4a1","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3e63cdd0-2399-11ed-a223-392f5fb66add","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-12-04T09:31:15.472Z","version":"WzEzNTAsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"query\": {\n \"query\": \"\",\n \"language\": \"kuery\"\n },\n \"filter\": [],\n \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"\n}"},"title":"OCSF CloudActivity - API Operation(Area)","uiStateJSON":"{}","version":1,"visState":"{\n \"title\": \"OCSF CloudActivity - API Operation(Area)\",\n \"type\": \"area\",\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"params\": {},\n \"schema\": \"metric\"\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"date_histogram\",\n \"params\": {\n \"field\": \"@timestamp\",\n \"timeRange\": {\n \"from\": \"now-1y\",\n \"to\": \"now\"\n },\n \"useNormalizedOpenSearchInterval\": true,\n \"scaleMetricValues\": false,\n \"interval\": \"auto\",\n \"drop_partials\": false,\n \"min_doc_count\": 1,\n \"extended_bounds\": {}\n },\n \"schema\": \"segment\"\n },\n {\n \"id\": \"3\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"params\": {\n \"field\": \"api.operation\",\n \"orderBy\": \"1\",\n \"order\": \"desc\",\n \"size\": 10,\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\"\n },\n \"schema\": \"group\"\n }\n ],\n \"params\": {\n \"type\": \"area\",\n \"grid\": {\n \"categoryLines\": false\n },\n \"categoryAxes\": [\n {\n \"id\": \"CategoryAxis-1\",\n \"type\": \"category\",\n \"position\": \"bottom\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"linear\"\n },\n \"labels\": {\n \"show\": true,\n \"filter\": true,\n \"truncate\": 100\n },\n \"title\": {}\n }\n ],\n \"valueAxes\": [\n {\n \"id\": \"ValueAxis-1\",\n \"name\": \"LeftAxis-1\",\n \"type\": \"value\",\n \"position\": \"left\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"linear\",\n \"mode\": \"normal\"\n },\n \"labels\": {\n \"show\": true,\n \"rotate\": 0,\n \"filter\": false,\n \"truncate\": 100\n },\n \"title\": {\n \"text\": \"Count\"\n }\n }\n ],\n \"seriesParams\": [\n {\n \"show\": \"true\",\n \"type\": \"area\",\n \"mode\": \"stacked\",\n \"data\": {\n \"label\": \"Count\",\n \"id\": \"1\"\n },\n \"drawLinesBetweenPoints\": true,\n \"showCircles\": true,\n \"interpolate\": \"linear\",\n \"valueAxis\": \"ValueAxis-1\"\n }\n ],\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"times\": [],\n \"addTimeMarker\": false,\n \"thresholdLine\": {\n \"show\": false,\n \"value\": 10,\n \"width\": 1,\n \"style\": \"full\",\n \"color\": \"#34130C\"\n },\n \"labels\": {},\n \"dimensions\": {\n \"x\": {\n \"accessor\": 0,\n \"format\": {\n \"id\": \"date\",\n \"params\": {\n \"pattern\": \"YYYY-MM-DD HH:mm\"\n }\n },\n \"params\": {\n \"date\": true,\n \"interval\": \"PT12H\",\n \"format\": \"YYYY-MM-DD HH:mm\",\n \"bounds\": {\n \"min\": \"2020-03-27T10:17:24.061Z\",\n \"max\": \"2020-04-26T10:17:24.061Z\"\n }\n },\n \"aggType\": \"date_histogram\"\n },\n \"y\": [\n {\n \"accessor\": 1,\n \"format\": {\n \"id\": \"number\"\n },\n \"params\": {},\n \"aggType\": \"count\"\n }\n ]\n }\n }\n}"},"id":"a91ab1c0-2461-11ed-a223-392f5fb66add","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3e63cdd0-2399-11ed-a223-392f5fb66add","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-12-04T09:31:15.472Z","version":"WzEzNTEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"query\": {\n \"query\": \"\",\n \"language\": \"kuery\"\n },\n \"filter\": [],\n \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"\n}"},"title":"OCSF CloudActivity - Error Code(Pie)","uiStateJSON":"{}","version":1,"visState":"{\n \"title\": \"OCSF CloudActivity - Error Code(Pie)\",\n \"type\": \"pie\",\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"params\": {},\n \"schema\": \"metric\"\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"params\": {\n \"field\": \"api.response.error\",\n \"orderBy\": \"1\",\n \"order\": \"desc\",\n \"size\": 10,\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\"\n },\n \"schema\": \"segment\"\n }\n ],\n \"params\": {\n \"type\": \"pie\",\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"isDonut\": true,\n \"labels\": {\n \"show\": false,\n \"values\": true,\n \"last_level\": true,\n \"truncate\": 100\n },\n \"dimensions\": {\n \"metric\": {\n \"accessor\": 1,\n \"format\": {\n \"id\": \"number\"\n },\n \"params\": {},\n \"aggType\": \"count\"\n },\n \"buckets\": [\n {\n \"accessor\": 0,\n \"format\": {\n \"id\": \"terms\",\n \"params\": {\n \"id\": \"string\",\n \"otherBucketLabel\": \"Other\",\n \"missingBucketLabel\": \"Missing\"\n }\n },\n \"params\": {},\n \"aggType\": \"terms\"\n }\n ]\n }\n }\n}"},"id":"af0ad0f0-2462-11ed-a223-392f5fb66add","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3e63cdd0-2399-11ed-a223-392f5fb66add","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-12-04T09:31:15.472Z","version":"WzEzNTIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"query\": {\n \"query\": \"\",\n \"language\": \"kuery\"\n },\n \"filter\": [],\n \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"\n}"},"title":"OCSF CloudActivity - Error Code(Area)","uiStateJSON":"{}","version":1,"visState":"{\n \"title\": \"OCSF CloudActivity - Error Code(Area)\",\n \"type\": \"area\",\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"params\": {},\n \"schema\": \"metric\"\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"date_histogram\",\n \"params\": {\n \"field\": \"@timestamp\",\n \"timeRange\": {\n \"from\": \"now-1y\",\n \"to\": \"now\"\n },\n \"useNormalizedOpenSearchInterval\": true,\n \"scaleMetricValues\": false,\n \"interval\": \"auto\",\n \"drop_partials\": false,\n \"min_doc_count\": 1,\n \"extended_bounds\": {}\n },\n \"schema\": \"segment\"\n },\n {\n \"id\": \"3\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"params\": {\n \"field\": \"api.response.error\",\n \"orderBy\": \"1\",\n \"order\": \"desc\",\n \"size\": 10,\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\"\n },\n \"schema\": \"group\"\n }\n ],\n \"params\": {\n \"type\": \"area\",\n \"grid\": {\n \"categoryLines\": false\n },\n \"categoryAxes\": [\n {\n \"id\": \"CategoryAxis-1\",\n \"type\": \"category\",\n \"position\": \"bottom\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"linear\"\n },\n \"labels\": {\n \"show\": true,\n \"filter\": true,\n \"truncate\": 100\n },\n \"title\": {}\n }\n ],\n \"valueAxes\": [\n {\n \"id\": \"ValueAxis-1\",\n \"name\": \"LeftAxis-1\",\n \"type\": \"value\",\n \"position\": \"left\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"linear\",\n \"mode\": \"normal\"\n },\n \"labels\": {\n \"show\": true,\n \"rotate\": 0,\n \"filter\": false,\n \"truncate\": 100\n },\n \"title\": {\n \"text\": \"Count\"\n }\n }\n ],\n \"seriesParams\": [\n {\n \"show\": \"true\",\n \"type\": \"area\",\n \"mode\": \"stacked\",\n \"data\": {\n \"label\": \"Count\",\n \"id\": \"1\"\n },\n \"drawLinesBetweenPoints\": true,\n \"showCircles\": true,\n \"interpolate\": \"linear\",\n \"valueAxis\": \"ValueAxis-1\"\n }\n ],\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"times\": [],\n \"addTimeMarker\": false,\n \"thresholdLine\": {\n \"show\": false,\n \"value\": 10,\n \"width\": 1,\n \"style\": \"full\",\n \"color\": \"#34130C\"\n },\n \"labels\": {},\n \"dimensions\": {\n \"x\": {\n \"accessor\": 0,\n \"format\": {\n \"id\": \"date\",\n \"params\": {\n \"pattern\": \"YYYY-MM-DD HH:mm\"\n }\n },\n \"params\": {\n \"date\": true,\n \"interval\": \"PT12H\",\n \"format\": \"YYYY-MM-DD HH:mm\",\n \"bounds\": {\n \"min\": \"2020-03-27T10:33:25.001Z\",\n \"max\": \"2020-04-26T10:33:25.001Z\"\n }\n },\n \"aggType\": \"date_histogram\"\n },\n \"y\": [\n {\n \"accessor\": 2,\n \"format\": {\n \"id\": \"number\"\n },\n \"params\": {},\n \"aggType\": \"count\"\n }\n ],\n \"series\": [\n {\n \"accessor\": 1,\n \"format\": {\n \"id\": \"terms\",\n \"params\": {\n \"id\": \"string\",\n \"otherBucketLabel\": \"Other\",\n \"missingBucketLabel\": \"Missing\"\n }\n },\n \"params\": {},\n \"aggType\": \"terms\"\n }\n ]\n }\n }\n}"},"id":"cab57d00-2462-11ed-8158-55dbbfbae4a1","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3e63cdd0-2399-11ed-a223-392f5fb66add","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-12-04T09:31:15.472Z","version":"WzEzNTMsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OCSF CloudActivity - User Agent Browser","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OCSF CloudActivity - User Agent Browser\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user_agent.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":15,\"otherBucket\":true,\"otherBucketLabel\":\"Other2\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"53715820-2464-11ed-8158-55dbbfbae4a1","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3e63cdd0-2399-11ed-a223-392f5fb66add","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-12-04T09:31:15.472Z","version":"WzEzNTQsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OCSF CloudActivity - Matched IoC","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":\"desc\"}}}}","version":1,"visState":"{\"title\":\"OCSF CloudActivity - Matched IoC\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"threat.matched.providers\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Providers\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"637e6230-2464-11ed-a223-392f5fb66add","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3e63cdd0-2399-11ed-a223-392f5fb66add","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-12-04T09:31:15.472Z","version":"WzEzNTUsMV0="}
+{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":7,\"i\":\"f9c7d205-70a5-4a53-adb1-5da91f376422\"},\"panelIndex\":\"f9c7d205-70a5-4a53-adb1-5da91f376422\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":24,\"y\":0,\"w\":24,\"h\":7,\"i\":\"2a9fda54-e27d-47fb-a4c6-3423bb23f278\"},\"panelIndex\":\"2a9fda54-e27d-47fb-a4c6-3423bb23f278\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":7,\"w\":11,\"h\":7,\"i\":\"2caf428f-8d7b-49f8-88b3-091bfe4d7cd4\"},\"panelIndex\":\"2caf428f-8d7b-49f8-88b3-091bfe4d7cd4\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":11,\"y\":7,\"w\":10,\"h\":15,\"i\":\"dc2d6142-821d-4481-8d27-7480793df9e9\"},\"panelIndex\":\"dc2d6142-821d-4481-8d27-7480793df9e9\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":21,\"y\":7,\"w\":27,\"h\":15,\"i\":\"af9adcdb-0ac9-49ad-9d92-cc9ddf581cb8\"},\"panelIndex\":\"af9adcdb-0ac9-49ad-9d92-cc9ddf581cb8\",\"embeddableConfig\":{\"mapCenter\":null,\"mapZoom\":2},\"panelRefName\":\"panel_4\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":14,\"w\":11,\"h\":8,\"i\":\"7221ae7e-1c2a-4e02-9330-42062c082f1a\"},\"panelIndex\":\"7221ae7e-1c2a-4e02-9330-42062c082f1a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":22,\"w\":15,\"h\":9,\"i\":\"32c0dcdd-fcaa-4b82-85ee-d28c932db877\"},\"panelIndex\":\"32c0dcdd-fcaa-4b82-85ee-d28c932db877\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":15,\"y\":22,\"w\":33,\"h\":9,\"i\":\"f3cb8418-a18c-40da-bafd-926d2dbd5540\"},\"panelIndex\":\"f3cb8418-a18c-40da-bafd-926d2dbd5540\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":31,\"w\":15,\"h\":9,\"i\":\"06afdbd3-08a5-4542-8672-082d3d4135bc\"},\"panelIndex\":\"06afdbd3-08a5-4542-8672-082d3d4135bc\",\"embeddableConfig\":{},\"panelRefName\":\"panel_8\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":15,\"y\":31,\"w\":33,\"h\":9,\"i\":\"2977242c-6276-4e19-8c48-664b03adae1c\"},\"panelIndex\":\"2977242c-6276-4e19-8c48-664b03adae1c\",\"embeddableConfig\":{},\"panelRefName\":\"panel_9\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":40,\"w\":15,\"h\":9,\"i\":\"6c57aebe-5265-46bb-8c85-3754a3c796b6\"},\"panelIndex\":\"6c57aebe-5265-46bb-8c85-3754a3c796b6\",\"embeddableConfig\":{},\"panelRefName\":\"panel_10\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":15,\"y\":40,\"w\":33,\"h\":9,\"i\":\"3c09fda4-20cd-4a1a-88d6-bf464d0648bf\"},\"panelIndex\":\"3c09fda4-20cd-4a1a-88d6-bf464d0648bf\",\"embeddableConfig\":{},\"panelRefName\":\"panel_11\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":49,\"w\":18,\"h\":13,\"i\":\"b95f4822-ffe0-4147-a5ab-675efa1e95a6\"},\"panelIndex\":\"b95f4822-ffe0-4147-a5ab-675efa1e95a6\",\"embeddableConfig\":{},\"panelRefName\":\"panel_12\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":18,\"y\":49,\"w\":30,\"h\":13,\"i\":\"a95e3403-c300-4b8e-9dd3-6f45ae748a80\"},\"panelIndex\":\"a95e3403-c300-4b8e-9dd3-6f45ae748a80\",\"embeddableConfig\":{},\"panelRefName\":\"panel_13\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":62,\"w\":48,\"h\":18,\"i\":\"8213c42d-ab7a-40db-a66f-91ed5d4f921b\"},\"panelIndex\":\"8213c42d-ab7a-40db-a66f-91ed5d4f921b\",\"embeddableConfig\":{},\"panelRefName\":\"panel_14\"}]","timeRestore":false,"title":"OCSF CloudActivity Summary","version":1},"id":"02197c60-23b9-11ed-a223-392f5fb66add","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"61954190-243d-11ed-a223-392f5fb66add","name":"panel_0","type":"visualization"},{"id":"77756260-243d-11ed-8158-55dbbfbae4a1","name":"panel_1","type":"visualization"},{"id":"f4a90600-2443-11ed-8158-55dbbfbae4a1","name":"panel_2","type":"visualization"},{"id":"23f04b80-2444-11ed-8158-55dbbfbae4a1","name":"panel_3","type":"visualization"},{"id":"176e6fc0-245f-11ed-a223-392f5fb66add","name":"panel_4","type":"visualization"},{"id":"1108f850-2444-11ed-a223-392f5fb66add","name":"panel_5","type":"visualization"},{"id":"d12613a0-245f-11ed-8158-55dbbfbae4a1","name":"panel_6","type":"visualization"},{"id":"bdd96ef0-245f-11ed-8158-55dbbfbae4a1","name":"panel_7","type":"visualization"},{"id":"975e7110-2461-11ed-8158-55dbbfbae4a1","name":"panel_8","type":"visualization"},{"id":"a91ab1c0-2461-11ed-a223-392f5fb66add","name":"panel_9","type":"visualization"},{"id":"af0ad0f0-2462-11ed-a223-392f5fb66add","name":"panel_10","type":"visualization"},{"id":"cab57d00-2462-11ed-8158-55dbbfbae4a1","name":"panel_11","type":"visualization"},{"id":"53715820-2464-11ed-8158-55dbbfbae4a1","name":"panel_12","type":"visualization"},{"id":"637e6230-2464-11ed-a223-392f5fb66add","name":"panel_13","type":"visualization"},{"id":"a727b640-23af-11ed-8158-55dbbfbae4a1","name":"panel_14","type":"search"}],"type":"dashboard","updated_at":"2022-12-04T09:31:15.472Z","version":"WzEzNTYsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"OCSF NetworkActivity - Cloud Account(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OCSF NetworkActivity - Cloud Account(Bar)\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"0f262d10-73ad-11ed-9487-0fbb9f2dc2d0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"32aa0460-23b1-11ed-8158-55dbbfbae4a1","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-12-04T08:26:39.997Z","version":"WzEzMTIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"OCSF NetworkActivity - Region(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OCSF NetworkActivity - Region(Bar)\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"33cc3c80-73ae-11ed-9487-0fbb9f2dc2d0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"32aa0460-23b1-11ed-8158-55dbbfbae4a1","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-12-04T08:34:00.729Z","version":"WzEzMTYsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"OCSF NetworkActivity - Established Flow Src Count(Line Chart)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OCSF NetworkActivity - Established Flow Src Count(Line Chart)\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-7d\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"activity_name:\\\"Established\\\"\",\"language\":\"kuery\"},\"label\":\" \"}]},\"schema\":\"group\"}],\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{},\"type\":\"category\"}],\"grid\":{\"categoryLines\":false},\"labels\":{},\"legendPosition\":\"top\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"thresholdLine\":{\"color\":\"#E7664C\",\"show\":false,\"style\":\"full\",\"value\":10,\"width\":1},\"times\":[],\"type\":\"line\",\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Count\"},\"type\":\"value\"}],\"row\":true}}"},"id":"610fa640-73af-11ed-9487-0fbb9f2dc2d0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"32aa0460-23b1-11ed-8158-55dbbfbae4a1","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-12-04T09:16:46.260Z","version":"WzEzMzAsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"OCSF NetworkActivity - Refused Flow Src Count(Line Chart)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OCSF NetworkActivity - Refused Flow Src Count(Line Chart)\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-7d\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"activity_name:\\\"Refused\\\"\",\"language\":\"kuery\"},\"label\":\" \"}]},\"schema\":\"group\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"top\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"64df9d30-73b3-11ed-9487-0fbb9f2dc2d0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"32aa0460-23b1-11ed-8158-55dbbfbae4a1","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-12-04T09:15:45.553Z","version":"WzEzMjksMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"activity_name\",\"negate\":false,\"params\":{\"query\":\"Established\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"activity_name\":\"Established\"}}}]}"},"savedSearchRefName":"search_0","title":"OCSF NetworkActivity - Established Flow Src Count(Geo)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OCSF NetworkActivity - Established Flow Src Count(Geo)\",\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"emsHotLink\":\"?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"layerChosenByUser\":\"default\",\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedCustomJoinField\":null,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"attribution\":\"\",\"format\":\"image/png\",\"layers\":\"\",\"styles\":\"\",\"transparent\":true,\"version\":\"\"},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":14,\"minZoom\":0,\"origin\":\"elastic_maps_service\"},\"url\":\"\"}}}"},"id":"564e4bc0-73b5-11ed-9487-0fbb9f2dc2d0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5281cc40-2399-11ed-8158-55dbbfbae4a1","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"32aa0460-23b1-11ed-8158-55dbbfbae4a1","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-12-04T09:23:39.260Z","version":"WzEzMzcsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"activity_name\",\"negate\":false,\"params\":{\"query\":\"Refused\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"activity_name\":\"Refused\"}}}]}"},"savedSearchRefName":"search_0","title":"OCSF NetworkActivity - Refused Flow Src Count(Geo)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OCSF NetworkActivity - Refused Flow Src Count(Geo)\",\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"emsHotLink\":\"?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"layerChosenByUser\":\"default\",\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedCustomJoinField\":null,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"attribution\":\"\",\"format\":\"image/png\",\"layers\":\"\",\"styles\":\"\",\"transparent\":true,\"version\":\"\"},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":14,\"minZoom\":0,\"origin\":\"elastic_maps_service\"},\"url\":\"\"}}}"},"id":"63a892e0-73aa-11ed-9487-0fbb9f2dc2d0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"5281cc40-2399-11ed-8158-55dbbfbae4a1","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"32aa0460-23b1-11ed-8158-55dbbfbae4a1","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-12-04T09:21:32.707Z","version":"WzEzMzQsMV0="}
+{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":7,\"i\":\"2b32a86e-4d60-43d1-a17e-f73c2cb66587\"},\"panelIndex\":\"2b32a86e-4d60-43d1-a17e-f73c2cb66587\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":24,\"y\":0,\"w\":24,\"h\":7,\"i\":\"17239486-5969-4a8a-9341-b36b55631aa6\"},\"panelIndex\":\"17239486-5969-4a8a-9341-b36b55631aa6\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":7,\"w\":24,\"h\":8,\"i\":\"674c13ea-1960-4d3f-940b-064d614e953a\"},\"panelIndex\":\"674c13ea-1960-4d3f-940b-064d614e953a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":24,\"y\":7,\"w\":24,\"h\":8,\"i\":\"905913cb-8b81-46e1-b1cf-ff104feac46a\"},\"panelIndex\":\"905913cb-8b81-46e1-b1cf-ff104feac46a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":15,\"w\":24,\"h\":15,\"i\":\"6e17a1df-aa90-4d78-bac5-c48e0e69bc27\"},\"panelIndex\":\"6e17a1df-aa90-4d78-bac5-c48e0e69bc27\",\"embeddableConfig\":{\"mapZoom\":null,\"mapCenter\":null},\"panelRefName\":\"panel_4\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":24,\"y\":15,\"w\":24,\"h\":15,\"i\":\"4e3bd73c-f629-4e65-ab88-2bb129a9da54\"},\"panelIndex\":\"4e3bd73c-f629-4e65-ab88-2bb129a9da54\",\"embeddableConfig\":{\"mapZoom\":null,\"mapCenter\":null},\"panelRefName\":\"panel_5\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":30,\"w\":48,\"h\":18,\"i\":\"8c0c5947-005d-403d-9500-7a6c59415181\"},\"panelIndex\":\"8c0c5947-005d-403d-9500-7a6c59415181\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"}]","timeRestore":false,"title":"OCSF NetworkActivity Summary","version":1},"id":"8f59e440-2475-11ed-8158-55dbbfbae4a1","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"0f262d10-73ad-11ed-9487-0fbb9f2dc2d0","name":"panel_0","type":"visualization"},{"id":"33cc3c80-73ae-11ed-9487-0fbb9f2dc2d0","name":"panel_1","type":"visualization"},{"id":"610fa640-73af-11ed-9487-0fbb9f2dc2d0","name":"panel_2","type":"visualization"},{"id":"64df9d30-73b3-11ed-9487-0fbb9f2dc2d0","name":"panel_3","type":"visualization"},{"id":"564e4bc0-73b5-11ed-9487-0fbb9f2dc2d0","name":"panel_4","type":"visualization"},{"id":"63a892e0-73aa-11ed-9487-0fbb9f2dc2d0","name":"panel_5","type":"visualization"},{"id":"32aa0460-23b1-11ed-8158-55dbbfbae4a1","name":"panel_6","type":"search"}],"type":"dashboard","updated_at":"2022-12-04T09:25:47.423Z","version":"WzEzNDEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"RDS - AWS Account(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"RDS - AWS Account(Bar)\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"7195eab0-705a-11eb-9f5d-6b88a95347ff","migrationVersion":{"visualization":"7.8.0"},"references":[{"id":"afcae450-6c38-11eb-9f5d-6b88a95347ff","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-02-16T13:27:57.879Z","version":"WzkwOCwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"RDS - AWS Regin(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"RDS - AWS Regin(Bar)\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"be2ab6d0-705a-11eb-9f5d-6b88a95347ff","migrationVersion":{"visualization":"7.8.0"},"references":[{"id":"afcae450-6c38-11eb-9f5d-6b88a95347ff","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-02-16T13:27:40.476Z","version":"WzkwNywxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"title":"RDS - Filters","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"RDS - Filters\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"fieldName\":\"cloud.account.id\",\"id\":\"1565169719620\",\"label\":\"AWS Account\",\"options\":{\"dynamicOptions\":true,\"multiselect\":true,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"\",\"type\":\"list\",\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1613300179003\",\"label\":\"AWS Region\",\"options\":{\"dynamicOptions\":true,\"multiselect\":true,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"\",\"type\":\"list\",\"fieldName\":\"cloud.region\",\"indexPatternRefName\":\"control_1_index_pattern\"},{\"fieldName\":\"@log_type\",\"id\":\"1613300343283\",\"label\":\"DB Type\",\"options\":{\"dynamicOptions\":true,\"multiselect\":true,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"\",\"type\":\"list\",\"indexPatternRefName\":\"control_2_index_pattern\"},{\"fieldName\":\"rds.cluster_identifier\",\"id\":\"1613300235862\",\"label\":\"DB Cluster\",\"options\":{\"dynamicOptions\":true,\"multiselect\":true,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"1613300343283\",\"type\":\"list\",\"indexPatternRefName\":\"control_3_index_pattern\"},{\"fieldName\":\"rds.instance_identifier\",\"id\":\"1613300285804\",\"label\":\"DB Instance\",\"options\":{\"dynamicOptions\":true,\"multiselect\":true,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"1613300343283\",\"type\":\"list\",\"indexPatternRefName\":\"control_4_index_pattern\"}],\"pinFilters\":true,\"updateFiltersOnChange\":true,\"useTimeFilter\":false}}"},"id":"f048f590-6ea3-11eb-9f5d-6b88a95347ff","migrationVersion":{"visualization":"7.8.0"},"references":[{"id":"afcae450-6c38-11eb-9f5d-6b88a95347ff","name":"control_0_index_pattern","type":"index-pattern"},{"id":"afcae450-6c38-11eb-9f5d-6b88a95347ff","name":"control_1_index_pattern","type":"index-pattern"},{"id":"afcae450-6c38-11eb-9f5d-6b88a95347ff","name":"control_2_index_pattern","type":"index-pattern"},{"id":"afcae450-6c38-11eb-9f5d-6b88a95347ff","name":"control_3_index_pattern","type":"index-pattern"},{"id":"afcae450-6c38-11eb-9f5d-6b88a95347ff","name":"control_4_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2021-02-16T09:14:05.415Z","version":"Wzg2NiwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"RDS - Database Name","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"RDS - Database Name\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"rds.database_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":15,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"percentageCol\":\"\",\"showMetricsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"}}"},"id":"a624d400-7053-11eb-9f5d-6b88a95347ff","migrationVersion":{"visualization":"7.8.0"},"references":[{"id":"afcae450-6c38-11eb-9f5d-6b88a95347ff","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-02-16T13:08:34.557Z","version":"Wzg5OCwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"RDS - Source IP","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"RDS - Source IP\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"event.category\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.address\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100},\"row\":true}}"},"id":"b41d7270-7052-11eb-9f5d-6b88a95347ff","migrationVersion":{"visualization":"7.8.0"},"references":[{"id":"afcae450-6c38-11eb-9f5d-6b88a95347ff","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-03-11T04:03:35.592Z","version":"WzExODAsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"RDS - Auth Results","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"RDS - Auth Results\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"event.category: authentication\",\"language\":\"kuery\"},\"label\":\"Authentication\"}]},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"event.outcome\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"b422f1c0-6f83-11eb-9f5d-6b88a95347ff","migrationVersion":{"visualization":"7.8.0"},"references":[{"id":"afcae450-6c38-11eb-9f5d-6b88a95347ff","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-03-11T04:04:21.972Z","version":"WzExODEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"RDS - Error Chart","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"RDS - Error Chart\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"log.level:PANIC\",\"language\":\"kuery\"},\"label\":\"PostgreSQL-PANIC\"},{\"input\":{\"query\":\"log.level:Â FATAL\",\"language\":\"kuery\"},\"label\":\"PostgreSQL-FATAL\"},{\"input\":{\"query\":\"log.level:Â ERROR\",\"language\":\"kuery\"},\"label\":\"PostgreSQL-ERROR\"},{\"input\":{\"query\":\"log.level:Â WARNING\",\"language\":\"kuery\"},\"label\":\"PostgreSQL-WARNING\"},{\"input\":{\"query\":\"log.level: System\",\"language\":\"kuery\"},\"label\":\"MySQL-System\"},{\"input\":{\"query\":\"log.level: Error\",\"language\":\"kuery\"},\"label\":\"MySQL-Error\"},{\"input\":{\"query\":\"log.level: Warning\",\"language\":\"kuery\"},\"label\":\"MySQL-Warning\"}]},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"3f0f1500-6f72-11eb-9f5d-6b88a95347ff","migrationVersion":{"visualization":"7.8.0"},"references":[{"id":"afcae450-6c38-11eb-9f5d-6b88a95347ff","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-03-11T04:16:02.420Z","version":"WzExOTIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"RDS - Error Message","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"RDS - Error Message\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"rds.message\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\"},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"log.level:PANIC\",\"language\":\"kuery\"},\"label\":\"PostgreSQL-PANIC\"},{\"input\":{\"query\":\"log.level: FATAL\",\"language\":\"kuery\"},\"label\":\"PostgreSQL-FATAL\"},{\"input\":{\"query\":\"log.level: ERROR\",\"language\":\"kuery\"},\"label\":\"PostgreSQL-ERROR\"},{\"input\":{\"query\":\"log.level: WARNING\",\"language\":\"kuery\"},\"label\":\"PostgreSQL-WARNING\"},{\"input\":{\"query\":\"log.level: System\",\"language\":\"kuery\"},\"label\":\"MySQL-System\"},{\"input\":{\"query\":\"log.level: Error\",\"language\":\"kuery\"},\"label\":\"MySQL-Error\"},{\"input\":{\"query\":\"log.level: Warning\",\"language\":\"kuery\"},\"label\":\"MySQL-Warning\"}]},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-30d\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"row\":true}}"},"id":"50be51d0-6f7c-11eb-9f5d-6b88a95347ff","migrationVersion":{"visualization":"7.8.0"},"references":[{"id":"afcae450-6c38-11eb-9f5d-6b88a95347ff","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-03-11T09:28:19.827Z","version":"WzEyNDEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"RDS - Slow Query","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"RDS - Slow Query\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"filter\",\"split_color_mode\":\"kibana\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"SELECT\",\"type\":\"timeseries\",\"split_filters\":[{\"filter\":{\"query\":\"\",\"language\":\"kuery\"},\"label\":\"\",\"color\":\"#68BC00\",\"id\":\"17340540-6ea0-11eb-ab8a-8934526ecab9\"}],\"filter\":{\"query\":\"rds.query:SELECT and ( log.level:LOG or event.module: slowquery )\",\"language\":\"kuery\"}},{\"id\":\"368f4b50-6ea2-11eb-ab8a-8934526ecab9\",\"color\":\"rgba(96,146,192,1)\",\"split_mode\":\"filter\",\"metrics\":[{\"id\":\"368f4b51-6ea2-11eb-ab8a-8934526ecab9\",\"type\":\"count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"INSERT\",\"filter\":{\"query\":\"rds.query:INSERT and ( log.level:LOG or event.module: slowquery )\",\"language\":\"kuery\"}},{\"id\":\"8972c6d0-6ea2-11eb-ab8a-8934526ecab9\",\"color\":\"rgba(211,96,134,1)\",\"split_mode\":\"filter\",\"metrics\":[{\"id\":\"8972c6d1-6ea2-11eb-ab8a-8934526ecab9\",\"type\":\"count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"filter\":{\"query\":\"rds.query:UPDATE and ( log.level:LOG or event.module: slowquery )\",\"language\":\"kuery\"},\"label\":\"UPDATE\"},{\"id\":\"c3b79dc0-6ea2-11eb-ab8a-8934526ecab9\",\"color\":\"rgba(145,112,184,1)\",\"split_mode\":\"filter\",\"metrics\":[{\"id\":\"c3b79dc1-6ea2-11eb-ab8a-8934526ecab9\",\"type\":\"count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"DELETE\",\"filter\":{\"query\":\"rds.query:DELETE and ( log.level:LOG or event.module: slowquery )\",\"language\":\"kuery\"}}],\"time_field\":\"@timestamp\",\"index_pattern\":\"log-aws-rds-*\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"log-*\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"66b3d170-6ea2-11eb-ab8a-8934526ecab9\"}],\"bar_color_rules\":[{\"id\":\"a71d1370-6ea2-11eb-ab8a-8934526ecab9\"}],\"gauge_color_rules\":[{\"id\":\"a92e6740-6ea2-11eb-ab8a-8934526ecab9\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"filter\":{\"query\":\"\",\"language\":\"kuery\"}}}"},"id":"56a89190-6ea1-11eb-9f5d-6b88a95347ff","migrationVersion":{"visualization":"7.8.0"},"references":[],"type":"visualization","updated_at":"2021-03-11T04:49:45.279Z","version":"WzEyMTAsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"RDS - Lock Info","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"RDS - Lock Info\",\"type\":\"table\",\"aggs\":[{\"id\":\"4\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"1\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"rds.message\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"( postgresql.message: process and *lock ) OR ( mysql.lock_time > 0 )\",\"language\":\"kuery\"},\"label\":\"Lock Info\"}]},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-30d\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"e97453c0-7058-11eb-9f5d-6b88a95347ff","migrationVersion":{"visualization":"7.8.0"},"references":[{"id":"afcae450-6c38-11eb-9f5d-6b88a95347ff","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-03-11T04:11:39.699Z","version":"WzExODksMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"RDS - Audit DDL","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"RDS - Audit DDL\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"log.level:STATEMENT or event.module:audit\",\"language\":\"kuery\"},\"label\":\"DDL\"}]},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"rds.query: create\",\"language\":\"kuery\"},\"label\":\"CREATE\"},{\"input\":{\"query\":\"rds.query: drop\",\"language\":\"kuery\"},\"label\":\"DROP\"},{\"input\":{\"query\":\"rds.query:Â alter\",\"language\":\"kuery\"},\"label\":\"ALTER\"},{\"input\":{\"query\":\"rds.query: grant\",\"language\":\"kuery\"},\"label\":\"GRANT\"}]},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"7be46030-6f85-11eb-9f5d-6b88a95347ff","migrationVersion":{"visualization":"7.8.0"},"references":[{"id":"afcae450-6c38-11eb-9f5d-6b88a95347ff","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-03-11T05:19:55.068Z","version":"WzEyMzQsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"RDS - Slow Query Table","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"RDS - Slow Query Table\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"(log.level: LOG and (rds.query:* or postgresql_query_step:*)) or event.module: slowquery\",\"language\":\"kuery\"},\"label\":\"Slow Query\"}]},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-30d\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"rds.query\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\"},\"schema\":\"metric\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"max\",\"params\":{\"field\":\"rds.query_time\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"15b1f2e0-6f81-11eb-9f5d-6b88a95347ff","migrationVersion":{"visualization":"7.8.0"},"references":[{"id":"afcae450-6c38-11eb-9f5d-6b88a95347ff","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-03-11T04:51:48.678Z","version":"WzEyMTEsMV0="}
+{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{},\"gridData\":{\"h\":7,\"i\":\"aeceb129-b245-46ec-9fea-c9b78ac92404\",\"w\":24,\"x\":0,\"y\":0},\"panelIndex\":\"aeceb129-b245-46ec-9fea-c9b78ac92404\",\"version\":\"7.9.1\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":7,\"i\":\"cd627949-c85f-414f-ab72-b40d8462d0d0\",\"w\":24,\"x\":24,\"y\":0},\"panelIndex\":\"cd627949-c85f-414f-ab72-b40d8462d0d0\",\"version\":\"7.9.1\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":5,\"i\":\"9bd297a4-bc49-4346-a949-7a1d0cd2bfb5\",\"w\":48,\"x\":0,\"y\":7},\"panelIndex\":\"9bd297a4-bc49-4346-a949-7a1d0cd2bfb5\",\"version\":\"7.9.1\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"2815cfd0-f3a7-4c20-bf07-926f74bfa760\",\"w\":8,\"x\":0,\"y\":12},\"panelIndex\":\"2815cfd0-f3a7-4c20-bf07-926f74bfa760\",\"version\":\"7.9.1\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"f77e16c8-17d9-4816-865f-069118a33101\",\"w\":21,\"x\":8,\"y\":12},\"panelIndex\":\"f77e16c8-17d9-4816-865f-069118a33101\",\"version\":\"7.9.1\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"da5ede5c-b134-4089-8100-e018e4e9e120\",\"w\":19,\"x\":29,\"y\":12},\"panelIndex\":\"da5ede5c-b134-4089-8100-e018e4e9e120\",\"version\":\"7.9.1\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"f9188740-3e9a-47a9-9400-cec1fd7eda18\",\"w\":24,\"x\":0,\"y\":27},\"panelIndex\":\"f9188740-3e9a-47a9-9400-cec1fd7eda18\",\"version\":\"7.9.1\",\"panelRefName\":\"panel_6\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"cd9267cf-2624-4dcd-907d-4210181f26ca\",\"w\":24,\"x\":24,\"y\":27},\"panelIndex\":\"cd9267cf-2624-4dcd-907d-4210181f26ca\",\"version\":\"7.9.1\",\"panelRefName\":\"panel_7\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"0b9237bb-b1fb-4da7-9149-9a28ade76d31\",\"w\":24,\"x\":0,\"y\":42},\"panelIndex\":\"0b9237bb-b1fb-4da7-9149-9a28ade76d31\",\"version\":\"7.9.1\",\"panelRefName\":\"panel_8\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"c71ffca6-b7a6-4164-8784-a43c5aaf41b6\",\"w\":24,\"x\":24,\"y\":57},\"panelIndex\":\"c71ffca6-b7a6-4164-8784-a43c5aaf41b6\",\"version\":\"7.9.1\",\"panelRefName\":\"panel_9\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"40ffaabe-6bcb-450e-8d3f-fff905ba9835\",\"w\":24,\"x\":0,\"y\":57},\"panelIndex\":\"40ffaabe-6bcb-450e-8d3f-fff905ba9835\",\"version\":\"7.9.1\",\"panelRefName\":\"panel_10\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"5a777e3b-727d-4c68-971c-58af0a2313e1\",\"w\":24,\"x\":24,\"y\":42},\"panelIndex\":\"5a777e3b-727d-4c68-971c-58af0a2313e1\",\"version\":\"7.9.1\",\"panelRefName\":\"panel_11\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":39,\"i\":\"57694fe4-78ea-45c6-9d42-b32c735657ce\",\"w\":48,\"x\":0,\"y\":72},\"panelIndex\":\"57694fe4-78ea-45c6-9d42-b32c735657ce\",\"version\":\"7.9.1\",\"panelRefName\":\"panel_12\"}]","timeRestore":false,"title":"RDS Summary","version":1},"id":"3a499ec0-6ea3-11eb-9f5d-6b88a95347ff","migrationVersion":{"dashboard":"7.3.0"},"references":[{"id":"7195eab0-705a-11eb-9f5d-6b88a95347ff","name":"panel_0","type":"visualization"},{"id":"be2ab6d0-705a-11eb-9f5d-6b88a95347ff","name":"panel_1","type":"visualization"},{"id":"f048f590-6ea3-11eb-9f5d-6b88a95347ff","name":"panel_2","type":"visualization"},{"id":"a624d400-7053-11eb-9f5d-6b88a95347ff","name":"panel_3","type":"visualization"},{"id":"b41d7270-7052-11eb-9f5d-6b88a95347ff","name":"panel_4","type":"visualization"},{"id":"b422f1c0-6f83-11eb-9f5d-6b88a95347ff","name":"panel_5","type":"visualization"},{"id":"3f0f1500-6f72-11eb-9f5d-6b88a95347ff","name":"panel_6","type":"visualization"},{"id":"50be51d0-6f7c-11eb-9f5d-6b88a95347ff","name":"panel_7","type":"visualization"},{"id":"56a89190-6ea1-11eb-9f5d-6b88a95347ff","name":"panel_8","type":"visualization"},{"id":"e97453c0-7058-11eb-9f5d-6b88a95347ff","name":"panel_9","type":"visualization"},{"id":"7be46030-6f85-11eb-9f5d-6b88a95347ff","name":"panel_10","type":"visualization"},{"id":"15b1f2e0-6f81-11eb-9f5d-6b88a95347ff","name":"panel_11","type":"visualization"},{"id":"8a4a46c0-6f81-11eb-9f5d-6b88a95347ff","name":"panel_12","type":"search"}],"type":"dashboard","updated_at":"2021-03-11T09:29:07.029Z","version":"WzEyNDIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"S3Accesslog - AWS Account(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"S3Accesslog - AWS Account(Bar)\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"9c9fcf20-28ea-11ec-88c4-f70571f67193","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"4f75abd0-b7ca-11ea-9044-07f9c61c294e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-10-09T10:45:06.808Z","version":"WzIwNSwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"S3Accesslog - Region(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"S3Accesslog - Region(Bar)\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"ebb898f0-28e8-11ec-88c4-f70571f67193","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"4f75abd0-b7ca-11ea-9044-07f9c61c294e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-10-09T10:45:18.114Z","version":"WzIwNiwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"S3Accesslog - Source Countries(Geo)","uiStateJSON":"{\"mapZoom\":2,\"mapCenter\":[7.536764322084078,4.921875000000001]}","version":1,"visState":"{\"title\":\"S3Accesslog - Source Countries(Geo)\",\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"emsHotLink\":\"?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"attribution\":\"\",\"format\":\"image/png\",\"layers\":\"\",\"styles\":\"\",\"transparent\":true,\"version\":\"\"},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":10,\"minZoom\":0,\"origin\":\"elastic_maps_service\"},\"url\":\"\"}}}"},"id":"7546d1e0-774f-11ec-aa44-650c320a3c76","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"4f75abd0-b7ca-11ea-9044-07f9c61c294e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-17T04:39:29.534Z","version":"WzI0MSwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"S3Accesslog - Throttling Counts","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"S3Accesslog - Throttling Counts\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"HTTPstatus:503\",\"language\":\"lucene\"},\"label\":\"Throttling\"}]},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"5b8d2660-28ed-11ec-88c4-f70571f67193","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"4f75abd0-b7ca-11ea-9044-07f9c61c294e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-10-09T10:40:44.998Z","version":"WzIwNCwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"S3Accesslog - Source IP","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"S3Accesslog - Source IP\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"eec8f4f0-28e2-11ec-88c4-f70571f67193","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"4f75abd0-b7ca-11ea-9044-07f9c61c294e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-10-09T09:26:07.551Z","version":"WzE5OCwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"S3Accesslog - Error Code for each Buckets","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"S3Accesslog - Error Code for each Buckets\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"Bucket\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\" \"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"ErrorCode\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"json\":\"\"},\"schema\":\"group\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"HTTPstatus\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"1db0d400-28f1-11ec-88c4-f70571f67193","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"4f75abd0-b7ca-11ea-9044-07f9c61c294e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-17T02:43:48.593Z","version":"WzIzMCwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"S3Accesslog - Client Error Counts","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"S3Accesslog - Client Error Counts\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"HTTPstatus:{400 TO 499}\",\"language\":\"lucene\"},\"label\":\"Client Error\"}]},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"9aa8c170-28e7-11ec-88c4-f70571f67193","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"4f75abd0-b7ca-11ea-9044-07f9c61c294e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-10-09T10:47:25.704Z","version":"WzIwOCwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"S3Accesslog - Server Error Counts","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"S3Accesslog - Server Error Counts\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"HTTPstatus:{500 TO 599}\",\"language\":\"lucene\"},\"label\":\"Server Error\"}]},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"66f989c0-28ee-11ec-88c4-f70571f67193","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"4f75abd0-b7ca-11ea-9044-07f9c61c294e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-10-09T10:48:13.660Z","version":"WzIwNywxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"S3Accesslog - Error Code(Pie)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"S3Accesslog - Error Code(Pie)\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"ErrorCode\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"151368c0-28e8-11ec-88c4-f70571f67193","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"4f75abd0-b7ca-11ea-9044-07f9c61c294e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-17T01:58:11.640Z","version":"WzIxOCwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"S3Accesslog - Error Code (Area)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"S3Accesslog - Error Code (Area)\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-30M\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"ErrorCode\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"HTTPstatus\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"81bacac0-28ef-11ec-88c4-f70571f67193","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"4f75abd0-b7ca-11ea-9044-07f9c61c294e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-17T02:54:02.945Z","version":"WzIzNywxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"S3Accesslog - Operation","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"S3Accesslog - Operation\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"Operation\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"9b59a570-28e8-11ec-88c4-f70571f67193","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"4f75abd0-b7ca-11ea-9044-07f9c61c294e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-17T01:58:35.244Z","version":"WzIxOSwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"S3Accesslog - Operation(Area)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"S3Accesslog - Operation(Area)\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-30m\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"Operation\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"9e7f5a00-28e9-11ec-88c4-f70571f67193","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"4f75abd0-b7ca-11ea-9044-07f9c61c294e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-10-09T10:13:59.328Z","version":"WzIwMCwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"S3Accesslog - Requeast URL Key","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"S3Accesslog - Requeast URL Key\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"RequestURI_key\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"609226d0-244f-11ec-88c4-f70571f67193","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"4f75abd0-b7ca-11ea-9044-07f9c61c294e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-10-03T13:42:14.358Z","version":"WzE5NywxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"S3Accesslog - Request URI Key(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"S3Accesslog - Request URI Key(Bar)\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"RequestURI_key\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"RequestURI_key\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"377ff760-28f3-11ec-88c4-f70571f67193","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"4f75abd0-b7ca-11ea-9044-07f9c61c294e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-10-09T11:22:41.494Z","version":"WzIxNCwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"S3Accesslog - Requester","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"S3Accesslog - Requester\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"Requester\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"9802cf20-244f-11ec-88c4-f70571f67193","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"4f75abd0-b7ca-11ea-9044-07f9c61c294e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-10-03T13:41:37.639Z","version":"WzE5NiwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"S3Accesslog - Buckets Request Counts ","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"S3Accesslog - Buckets Request Counts \",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Requet Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"Bucket\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"Bucket\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":false,\"style\":{},\"title\":{},\"type\":\"category\"}],\"grid\":{\"categoryLines\":false},\"labels\":{\"show\":false},\"legendPosition\":\"right\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Requet Count\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"mode\":\"stacked\",\"show\":true,\"showCircles\":true,\"type\":\"histogram\",\"valueAxis\":\"ValueAxis-1\"}],\"thresholdLine\":{\"color\":\"#E7664C\",\"show\":false,\"style\":\"full\",\"value\":10,\"width\":1},\"times\":[],\"type\":\"histogram\",\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Requet Count\"},\"type\":\"value\"}]}}"},"id":"f5512f80-1e9d-11ec-88c4-f70571f67193","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"4f75abd0-b7ca-11ea-9044-07f9c61c294e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-10-09T10:51:43.403Z","version":"WzIxMSwxXQ=="}
+{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"7.10.2\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":9,\"i\":\"ae6d8495-1571-4382-bce4-6202ee506560\"},\"panelIndex\":\"ae6d8495-1571-4382-bce4-6202ee506560\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":24,\"y\":0,\"w\":24,\"h\":9,\"i\":\"caa7531f-205d-4600-84cb-df20aa673895\"},\"panelIndex\":\"caa7531f-205d-4600-84cb-df20aa673895\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":0,\"y\":9,\"w\":38,\"h\":15,\"i\":\"d0e725c3-a050-4c44-b2ad-d65f3255d8b3\"},\"panelIndex\":\"d0e725c3-a050-4c44-b2ad-d65f3255d8b3\",\"embeddableConfig\":{\"mapZoom\":2,\"mapCenter\":null},\"panelRefName\":\"panel_2\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":38,\"y\":9,\"w\":10,\"h\":6,\"i\":\"d946ce42-057a-445c-8073-447c4b04b467\"},\"panelIndex\":\"d946ce42-057a-445c-8073-447c4b04b467\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":38,\"y\":15,\"w\":10,\"h\":9,\"i\":\"396871d4-cfa9-4309-be36-7db714c899d8\"},\"panelIndex\":\"396871d4-cfa9-4309-be36-7db714c899d8\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":0,\"y\":24,\"w\":38,\"h\":18,\"i\":\"d10b2fd3-0036-46e7-a9d9-3dc29f6ebda7\"},\"panelIndex\":\"d10b2fd3-0036-46e7-a9d9-3dc29f6ebda7\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":38,\"y\":24,\"w\":10,\"h\":9,\"i\":\"7e093c31-a0a6-4244-94ab-2f5b33876929\"},\"panelIndex\":\"7e093c31-a0a6-4244-94ab-2f5b33876929\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":38,\"y\":33,\"w\":10,\"h\":9,\"i\":\"324faff3-8267-4ba5-8c61-eea5856e5ae8\"},\"panelIndex\":\"324faff3-8267-4ba5-8c61-eea5856e5ae8\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":0,\"y\":42,\"w\":16,\"h\":10,\"i\":\"07e5f43d-b03f-408a-a016-514cea2fece3\"},\"panelIndex\":\"07e5f43d-b03f-408a-a016-514cea2fece3\",\"embeddableConfig\":{},\"panelRefName\":\"panel_8\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":16,\"y\":42,\"w\":32,\"h\":10,\"i\":\"0e6ec458-758c-418c-8be4-c117280593f7\"},\"panelIndex\":\"0e6ec458-758c-418c-8be4-c117280593f7\",\"embeddableConfig\":{},\"panelRefName\":\"panel_9\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":0,\"y\":52,\"w\":16,\"h\":10,\"i\":\"819cb43c-dc15-4949-b6d5-ec9e171afc2a\"},\"panelIndex\":\"819cb43c-dc15-4949-b6d5-ec9e171afc2a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_10\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":16,\"y\":52,\"w\":32,\"h\":10,\"i\":\"952abf40-cbfc-4120-8fbf-e37ac5f7c546\"},\"panelIndex\":\"952abf40-cbfc-4120-8fbf-e37ac5f7c546\",\"embeddableConfig\":{},\"panelRefName\":\"panel_11\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":0,\"y\":62,\"w\":24,\"h\":12,\"i\":\"a577dda6-7089-49b7-8d38-f0183704859b\"},\"panelIndex\":\"a577dda6-7089-49b7-8d38-f0183704859b\",\"embeddableConfig\":{},\"panelRefName\":\"panel_12\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":24,\"y\":62,\"w\":24,\"h\":12,\"i\":\"01da42a0-f09f-47ce-9189-a3230c1300e2\"},\"panelIndex\":\"01da42a0-f09f-47ce-9189-a3230c1300e2\",\"embeddableConfig\":{},\"panelRefName\":\"panel_13\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":0,\"y\":74,\"w\":24,\"h\":12,\"i\":\"43aadcad-3992-4f35-878d-f6d5633d4603\"},\"panelIndex\":\"43aadcad-3992-4f35-878d-f6d5633d4603\",\"embeddableConfig\":{},\"panelRefName\":\"panel_14\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":24,\"y\":74,\"w\":24,\"h\":12,\"i\":\"36fcd27b-a306-4b71-96fa-6f91fcd70f59\"},\"panelIndex\":\"36fcd27b-a306-4b71-96fa-6f91fcd70f59\",\"embeddableConfig\":{},\"panelRefName\":\"panel_15\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":0,\"y\":86,\"w\":48,\"h\":13,\"i\":\"24b298a4-5ee3-4e10-9bdd-3ecd748d3b20\"},\"panelIndex\":\"24b298a4-5ee3-4e10-9bdd-3ecd748d3b20\",\"embeddableConfig\":{},\"panelRefName\":\"panel_16\"}]","timeRestore":false,"title":"S3Accesslog Summary","version":1},"id":"c8643d30-28ef-11ec-88c4-f70571f67193","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"9c9fcf20-28ea-11ec-88c4-f70571f67193","name":"panel_0","type":"visualization"},{"id":"ebb898f0-28e8-11ec-88c4-f70571f67193","name":"panel_1","type":"visualization"},{"id":"7546d1e0-774f-11ec-aa44-650c320a3c76","name":"panel_2","type":"visualization"},{"id":"5b8d2660-28ed-11ec-88c4-f70571f67193","name":"panel_3","type":"visualization"},{"id":"eec8f4f0-28e2-11ec-88c4-f70571f67193","name":"panel_4","type":"visualization"},{"id":"1db0d400-28f1-11ec-88c4-f70571f67193","name":"panel_5","type":"visualization"},{"id":"9aa8c170-28e7-11ec-88c4-f70571f67193","name":"panel_6","type":"visualization"},{"id":"66f989c0-28ee-11ec-88c4-f70571f67193","name":"panel_7","type":"visualization"},{"id":"151368c0-28e8-11ec-88c4-f70571f67193","name":"panel_8","type":"visualization"},{"id":"81bacac0-28ef-11ec-88c4-f70571f67193","name":"panel_9","type":"visualization"},{"id":"9b59a570-28e8-11ec-88c4-f70571f67193","name":"panel_10","type":"visualization"},{"id":"9e7f5a00-28e9-11ec-88c4-f70571f67193","name":"panel_11","type":"visualization"},{"id":"609226d0-244f-11ec-88c4-f70571f67193","name":"panel_12","type":"visualization"},{"id":"377ff760-28f3-11ec-88c4-f70571f67193","name":"panel_13","type":"visualization"},{"id":"9802cf20-244f-11ec-88c4-f70571f67193","name":"panel_14","type":"visualization"},{"id":"f5512f80-1e9d-11ec-88c4-f70571f67193","name":"panel_15","type":"visualization"},{"id":"c04ab4e0-773b-11ec-aa44-650c320a3c76","name":"panel_16","type":"search"}],"type":"dashboard","updated_at":"2022-01-17T04:48:50.902Z","version":"WzIzNCwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"title":"SecurityHub - Controls","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1606092737546\",\"fieldName\":\"event.module\",\"parent\":\"\",\"label\":\"Integrations\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1606093053283\",\"fieldName\":\"cloud.account.id\",\"parent\":\"\",\"label\":\"AWS Account\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_1_index_pattern\"},{\"id\":\"1606093118934\",\"fieldName\":\"cloud.region\",\"parent\":\"\",\"label\":\"AWS Region\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_2_index_pattern\"}],\"updateFiltersOnChange\":false,\"useTimeFilter\":false,\"pinFilters\":false},\"title\":\"SecurityHub - Controls\"}"},"id":"f2b09cc0-2d26-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"control_0_index_pattern","type":"index-pattern"},{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"control_1_index_pattern","type":"index-pattern"},{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"control_2_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-10T14:17:12.757Z","version":"WzQ2OTUsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"type\":\"phrases\",\"key\":\"Workflow.Status\",\"value\":\"NEW, NOTIFIED\",\"params\":[\"NEW\",\"NOTIFIED\"],\"alias\":null,\"negate\":false,\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"bool\":{\"should\":[{\"match_phrase\":{\"Workflow.Status\":\"NEW\"}},{\"match_phrase\":{\"Workflow.Status\":\"NOTIFIED\"}}],\"minimum_should_match\":1}},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"SecurityHub - AWS Account(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"SecurityHub - AWS Account(Bar)\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"@id\",\"customLabel\":\"Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":false,\"style\":{},\"title\":{},\"type\":\"category\"}],\"grid\":{\"categoryLines\":false},\"labels\":{\"show\":false},\"legendPosition\":\"right\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"mode\":\"stacked\",\"show\":true,\"showCircles\":true,\"type\":\"histogram\",\"valueAxis\":\"ValueAxis-1\"}],\"thresholdLine\":{\"color\":\"#E7664C\",\"show\":false,\"style\":\"full\",\"value\":10,\"width\":1},\"times\":[],\"type\":\"histogram\",\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Count\"},\"type\":\"value\"}]}}"},"id":"a9367f20-2d1b-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-10T14:19:48.329Z","version":"WzQ3NzMsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"type\":\"phrases\",\"key\":\"Workflow.Status\",\"value\":\"NEW, NOTIFIED\",\"params\":[\"NEW\",\"NOTIFIED\"],\"alias\":null,\"negate\":false,\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"bool\":{\"should\":[{\"match_phrase\":{\"Workflow.Status\":\"NEW\"}},{\"match_phrase\":{\"Workflow.Status\":\"NOTIFIED\"}}],\"minimum_should_match\":1}},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"SecurityHub - Region(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"SecurityHub - Region(Bar)\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"@id\",\"customLabel\":\"Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"334f7940-2d1d-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-10T14:20:31.062Z","version":"WzQ3OTcsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"meta\":{\"type\":\"phrases\",\"key\":\"Workflow.Status\",\"value\":\"NEW, NOTIFIED\",\"params\":[\"NEW\",\"NOTIFIED\"],\"alias\":null,\"negate\":false,\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"bool\":{\"should\":[{\"match_phrase\":{\"Workflow.Status\":\"NEW\"}},{\"match_phrase\":{\"Workflow.Status\":\"NOTIFIED\"}}],\"minimum_should_match\":1}},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"SecurityHub - Product Name by Findings","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"SecurityHub - Product Name by Findings\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"@id\",\"customLabel\":\" \"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"ProductFields.aws/securityhub/ProductName: \\\"Security Hub\\\"\",\"language\":\"kuery\"},\"label\":\"Security Hub (Security standards and controls)\"},{\"input\":{\"query\":\"ProductFields.aws/securityhub/ProductName: \\\"GuardDuty\\\"\",\"language\":\"kuery\"},\"label\":\"GuardDuty\"},{\"input\":{\"query\":\"ProductFields.aws/securityhub/ProductName: Inspector\",\"language\":\"kuery\"},\"label\":\"Inspector\"},{\"input\":{\"query\":\"ProductFields.aws/securityhub/ProductName: Macie\",\"language\":\"kuery\"},\"label\":\"Macie\"},{\"input\":{\"query\":\"ProductFields.aws/securityhub/ProductName: \\\"IAM Access Analyzer\\\"\",\"language\":\"kuery\"},\"label\":\"IAM Access Analyzer\"},{\"input\":{\"query\":\"ProductFields.aws/securityhub/ProductName: \\\"Systems Manager Patch Manager\\\"\",\"language\":\"kuery\"},\"label\":\"Systems Manager Patch Manager\"},{\"input\":{\"query\":\"not ProductFields.aws/securityhub/ProductName: (\\\"Security Hub\\\" or GuardDuty or Inspector or Macie or \\\"IAM Access Analyzer\\\" or \\\"Systems Manager Patch Manager\\\")\",\"language\":\"kuery\"},\"label\":\"The others\"}]},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"cfbf4dc0-ff11-11eb-b8f8-31e0bc12764f","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-10T14:27:30.403Z","version":"WzQ4NzUsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"type\":\"phrases\",\"key\":\"Workflow.Status\",\"value\":\"NEW, NOTIFIED\",\"params\":[\"NEW\",\"NOTIFIED\"],\"alias\":null,\"negate\":false,\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"bool\":{\"should\":[{\"match_phrase\":{\"Workflow.Status\":\"NEW\"}},{\"match_phrase\":{\"Workflow.Status\":\"NOTIFIED\"}}],\"minimum_should_match\":1}},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"SecurityHub - Severity Count by Findings","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"SecurityHub - Severity Count by Findings\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"@id\",\"customLabel\":\"Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"Severity.Label:CRITICAL\",\"language\":\"kuery\"},\"label\":\"CRITICAL\"},{\"input\":{\"query\":\"Severity.Label:HIGH\",\"language\":\"kuery\"},\"label\":\"HIGH\"},{\"input\":{\"query\":\"Severity.Label:MEDIUM\",\"language\":\"kuery\"},\"label\":\"MEDIUM\"},{\"input\":{\"query\":\"Severity.Label:LOW\",\"language\":\"kuery\"},\"label\":\"LOW\"},{\"input\":{\"query\":\"Severity.Label:INFORMATIONAL\",\"language\":\"kuery\"},\"label\":\"INFO\"}]},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":32}}}}"},"id":"fde97130-2d20-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-10T14:22:58.234Z","version":"WzQ4NTEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"type\":\"phrases\",\"key\":\"Workflow.Status\",\"value\":\"NEW, NOTIFIED\",\"params\":[\"NEW\",\"NOTIFIED\"],\"alias\":null,\"negate\":false,\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"bool\":{\"should\":[{\"match_phrase\":{\"Workflow.Status\":\"NEW\"}},{\"match_phrase\":{\"Workflow.Status\":\"NOTIFIED\"}}],\"minimum_should_match\":1}},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"SecurityHub - Severity Count by Logs","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"SecurityHub - Severity Count by Logs\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"Severity.Label:CRITICAL\",\"language\":\"kuery\"},\"label\":\"CRITICAL\"},{\"input\":{\"query\":\"Severity.Label:HIGH\",\"language\":\"kuery\"},\"label\":\"HIGH\"},{\"input\":{\"query\":\"Severity.Label:MEDIUM\",\"language\":\"kuery\"},\"label\":\"MEDIUM\"},{\"input\":{\"query\":\"Severity.Label:LOW\",\"language\":\"kuery\"},\"label\":\"LOW\"},{\"input\":{\"query\":\"Severity.Label:INFORMATIONAL\",\"language\":\"kuery\"},\"label\":\"INFO\"}]},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":32}}}}"},"id":"d7b4ae30-3c43-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-10T14:18:50.353Z","version":"WzQ3NTEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"type\":\"phrases\",\"key\":\"Workflow.Status\",\"value\":\"NEW, NOTIFIED\",\"params\":[\"NEW\",\"NOTIFIED\"],\"alias\":null,\"negate\":false,\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"bool\":{\"should\":[{\"match_phrase\":{\"Workflow.Status\":\"NEW\"}},{\"match_phrase\":{\"Workflow.Status\":\"NOTIFIED\"}}],\"minimum_should_match\":1}},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"SecurityHub - Severity Count By Logs(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"SecurityHub - Severity Count By Logs(Bar)\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-30d\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"Severity.Label:CRITICAL\",\"language\":\"kuery\"},\"label\":\"CRITICAL\"},{\"input\":{\"query\":\"Severity.Label:HIGH\",\"language\":\"kuery\"},\"label\":\"HIGH\"},{\"input\":{\"query\":\"Severity.Label:MEDIUM\",\"language\":\"kuery\"},\"label\":\"MEDIUM\"},{\"input\":{\"query\":\"Severity.Label:LOW\",\"language\":\"kuery\"},\"label\":\"LOW\"},{\"input\":{\"query\":\"Severity.Label:INFORMATIONAL\",\"language\":\"kuery\"},\"label\":\"INFO\"}]},\"schema\":\"group\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"b0cc7cc0-2d35-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-10T14:28:00.525Z","version":"WzQ4OTgsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"type\":\"phrases\",\"key\":\"Workflow.Status\",\"value\":\"NEW, NOTIFIED\",\"params\":[\"NEW\",\"NOTIFIED\"],\"alias\":null,\"negate\":false,\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"bool\":{\"should\":[{\"match_phrase\":{\"Workflow.Status\":\"NEW\"}},{\"match_phrase\":{\"Workflow.Status\":\"NOTIFIED\"}}],\"minimum_should_match\":1}},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"SecurityHub - Network Direction","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"SecurityHub - Network Direction\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"@id\",\"customLabel\":\"Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"network.direction\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":6,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"82dfb6d0-2d38-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-10T14:28:51.540Z","version":"WzQ5MTksMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"type\":\"phrases\",\"key\":\"Workflow.Status\",\"value\":\"NEW, NOTIFIED\",\"params\":[\"NEW\",\"NOTIFIED\"],\"alias\":null,\"negate\":false,\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"bool\":{\"should\":[{\"match_phrase\":{\"Workflow.Status\":\"NEW\"}},{\"match_phrase\":{\"Workflow.Status\":\"NOTIFIED\"}}],\"minimum_should_match\":1}},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"SecurityHub - Finding Types","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":2,\"direction\":\"desc\"}}}}","version":1,"visState":"{\"title\":\"SecurityHub - Finding Types\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"@id\",\"customLabel\":\"Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"Types\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"Severity.Label\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"9daedfe0-2d4c-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-10T14:29:24.229Z","version":"WzQ5MzUsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"meta\":{\"type\":\"phrases\",\"key\":\"Workflow.Status\",\"value\":\"NEW, NOTIFIED\",\"params\":[\"NEW\",\"NOTIFIED\"],\"alias\":null,\"negate\":false,\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"bool\":{\"should\":[{\"match_phrase\":{\"Workflow.Status\":\"NEW\"}},{\"match_phrase\":{\"Workflow.Status\":\"NOTIFIED\"}}],\"minimum_should_match\":1}},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"SecurityHub - Affected Instance ID","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"SecurityHub - Affected Instance ID\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"@id\",\"customLabel\":\"Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.instance.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"55386c40-2d65-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-10T14:29:47.435Z","version":"WzQ5NTEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"type\":\"phrases\",\"key\":\"Workflow.Status\",\"value\":\"NEW, NOTIFIED\",\"params\":[\"NEW\",\"NOTIFIED\"],\"alias\":null,\"negate\":false,\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"bool\":{\"should\":[{\"match_phrase\":{\"Workflow.Status\":\"NEW\"}},{\"match_phrase\":{\"Workflow.Status\":\"NOTIFIED\"}}],\"minimum_should_match\":1}},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"SecurityHub - Source Countries Geo Map","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"SecurityHub - Source Countries Geo Map\",\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"@id\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"emsHotLink\":\"https://maps.elastic.co/v7.7?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"format\":\"image/png\",\"transparent\":true},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":10,\"minZoom\":0,\"origin\":\"elastic_maps_service\"}}}}"},"id":"a83aa940-2d37-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-10T14:30:49.529Z","version":"WzQ5ODQsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"type\":\"phrases\",\"key\":\"Workflow.Status\",\"value\":\"NEW, NOTIFIED\",\"params\":[\"NEW\",\"NOTIFIED\"],\"alias\":null,\"negate\":false,\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"bool\":{\"should\":[{\"match_phrase\":{\"Workflow.Status\":\"NEW\"}},{\"match_phrase\":{\"Workflow.Status\":\"NOTIFIED\"}}],\"minimum_should_match\":1}},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"SecurityHub - Count of source.ip","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"SecurityHub - Count of source.ip\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"@id\",\"customLabel\":\"Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"percentageCol\":\"\",\"showMetricsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"}}"},"id":"0cc401d0-2d39-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-10T14:30:17.709Z","version":"WzQ5NjUsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.module\",\"negate\":true,\"params\":{\"query\":\"security hub\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.module\":\"security hub\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"SecurityHub - findings","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"SecurityHub - findings\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"Workflow.Status\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Workflow\"},\"schema\":\"metric\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"Severity.Normalized\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Severity\"},\"schema\":\"bucket\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"Severity.Label\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Lavel\"},\"schema\":\"bucket\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":1000,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Account\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":30,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Region\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"ProductFields.aws/securityhub/ProductName\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Product\"},\"schema\":\"bucket\"},{\"id\":\"7\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"RecordState\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Recorde State\"},\"schema\":\"metric\"},{\"id\":\"8\",\"enabled\":true,\"type\":\"max\",\"params\":{\"field\":\"@timestamp\",\"customLabel\":\"\"},\"schema\":\"metric\"},{\"id\":\"9\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"Title\",\"orderBy\":\"8\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"},{\"id\":\"10\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"@id\",\"orderBy\":\"8\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"@id\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"28285fa0-ff3b-11eb-b8f8-31e0bc12764f","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-10T14:17:12.757Z","version":"WzQ3MDcsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"SecurityHub - GuardDuty Macie Header","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"SecurityHub - GuardDuty Macie Header\",\"type\":\"markdown\",\"aggs\":[],\"params\":{\"fontSize\":24,\"openLinksInNewTab\":false,\"markdown\":\"GuardDuty / Macie\"}}"},"id":"2d864990-2d49-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-04-10T14:17:12.757Z","version":"WzQ3MDgsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"type\":\"phrases\",\"key\":\"Workflow.Status\",\"value\":\"NEW, NOTIFIED\",\"params\":[\"NEW\",\"NOTIFIED\"],\"alias\":null,\"negate\":false,\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"bool\":{\"should\":[{\"match_phrase\":{\"Workflow.Status\":\"NEW\"}},{\"match_phrase\":{\"Workflow.Status\":\"NOTIFIED\"}}],\"minimum_should_match\":1}},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"SecurityHub - GuardDuty Macie ResourceTypeAffected","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"SecurityHub - GuardDuty Macie ResourceTypeAffected\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"@id\",\"customLabel\":\"Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"ResourceTypeAffected\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":15,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"percentageCol\":\"\",\"showMetricsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"}}"},"id":"1641af60-2d4c-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-10T14:31:37.757Z","version":"WzUwMDMsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"type\":\"phrases\",\"key\":\"Workflow.Status\",\"value\":\"NEW, NOTIFIED\",\"params\":[\"NEW\",\"NOTIFIED\"],\"alias\":null,\"negate\":false,\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"bool\":{\"should\":[{\"match_phrase\":{\"Workflow.Status\":\"NEW\"}},{\"match_phrase\":{\"Workflow.Status\":\"NOTIFIED\"}}],\"minimum_should_match\":1}},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"SecurityHub - GuardDuty Macie ThreatPurpose","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"SecurityHub - GuardDuty Macie ThreatPurpose\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"@id\",\"customLabel\":\"Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"ThreatPurpose\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":15,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"labels\":{\"last_level\":true,\"show\":false,\"truncate\":100,\"values\":true},\"legendPosition\":\"right\",\"type\":\"pie\"}}"},"id":"78c57b50-2d4a-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-10T14:32:00.565Z","version":"WzUwMjAsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"meta\":{\"type\":\"phrases\",\"key\":\"Workflow.Status\",\"value\":\"NEW, NOTIFIED\",\"params\":[\"NEW\",\"NOTIFIED\"],\"alias\":null,\"negate\":false,\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"bool\":{\"should\":[{\"match_phrase\":{\"Workflow.Status\":\"NEW\"}},{\"match_phrase\":{\"Workflow.Status\":\"NOTIFIED\"}}],\"minimum_should_match\":1}},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"SecurityHub - GuardDuty Macie ThreatFamilyName","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"SecurityHub - GuardDuty Macie ThreatFamilyName\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"@id\",\"customLabel\":\"Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"ThreatFamilyName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":15,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"bf1275e0-2d4a-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-10T14:32:25.638Z","version":"WzUwMzksMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"SecurityHub - Security Standards Header","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"SecurityHub - Security Standards Header\",\"type\":\"markdown\",\"aggs\":[],\"params\":{\"fontSize\":24,\"openLinksInNewTab\":false,\"markdown\":\"Security Standards and Controls\"}}"},"id":"76ce2a10-ff3e-11eb-845d-71956c13fd18","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-04-10T14:17:12.757Z","version":"WzQ3MTIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.module\",\"negate\":false,\"params\":{\"query\":\"security hub\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.module\":\"security hub\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"SecurityHub - Security standards and controls","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"SecurityHub - Security standards and controls\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"Workflow.Status\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Workflow\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"custom\",\"orderAgg\":{\"id\":\"2-orderAgg\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"orderAgg\"},\"order\":\"desc\",\"size\":10000,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Account\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":30,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Region\"},\"schema\":\"bucket\"},{\"id\":\"7\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"GeneratorId\",\"orderBy\":\"_key\",\"order\":\"asc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"GeneratorId\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"@id\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"@id\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"Compliance.Status\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Compliance\"},\"schema\":\"metric\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"RecordState\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"RecordState\"},\"schema\":\"metric\"},{\"id\":\"8\",\"enabled\":true,\"type\":\"max\",\"params\":{\"field\":\"@timestamp\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"percentageCol\":\"\",\"showMetricsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"}}"},"id":"cba355b0-ff39-11eb-845d-71956c13fd18","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-10T14:17:12.757Z","version":"WzQ3MTMsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"SecurityHub - details header","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"SecurityHub - details header\",\"type\":\"markdown\",\"aggs\":[],\"params\":{\"fontSize\":24,\"openLinksInNewTab\":false,\"markdown\":\"Details\"}}"},"id":"fd3f6700-ff41-11eb-845d-71956c13fd18","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-04-10T14:17:12.757Z","version":"WzQ3MTQsMV0="}
+{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"Workflow.Status\",\"negate\":false,\"params\":[\"NEW\",\"NOTIFIED\"],\"type\":\"phrases\",\"value\":\"NEW, NOTIFIED\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"bool\":{\"minimum_should_match\":1,\"should\":[{\"match_phrase\":{\"Workflow.Status\":\"NEW\"}},{\"match_phrase\":{\"Workflow.Status\":\"NOTIFIED\"}}]}}}]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{},\"gridData\":{\"h\":6,\"i\":\"0deaedbd-db05-493d-a423-be6d76811ff4\",\"w\":48,\"x\":0,\"y\":0},\"panelIndex\":\"0deaedbd-db05-493d-a423-be6d76811ff4\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":6,\"i\":\"e5c43599-fb85-438a-be95-fa61abc2f922\",\"w\":24,\"x\":0,\"y\":6},\"panelIndex\":\"e5c43599-fb85-438a-be95-fa61abc2f922\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":6,\"i\":\"4172a026-5917-4fd7-a341-81db934a4b05\",\"w\":24,\"x\":24,\"y\":6},\"panelIndex\":\"4172a026-5917-4fd7-a341-81db934a4b05\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":6,\"i\":\"9e715139-87a1-49ae-98d3-e61a00f9b745\",\"w\":48,\"x\":0,\"y\":12},\"panelIndex\":\"9e715139-87a1-49ae-98d3-e61a00f9b745\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":8,\"i\":\"a3b6b14e-14f2-41cb-934d-e53109463f69\",\"w\":24,\"x\":0,\"y\":18},\"panelIndex\":\"a3b6b14e-14f2-41cb-934d-e53109463f69\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":8,\"i\":\"3dd31f1e-e3b6-464d-bfd0-8bef2de197c7\",\"w\":24,\"x\":24,\"y\":18},\"panelIndex\":\"3dd31f1e-e3b6-464d-bfd0-8bef2de197c7\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"0dcc2cf6-1807-4336-bb26-fdbf3d6a3576\",\"w\":48,\"x\":0,\"y\":26},\"panelIndex\":\"0dcc2cf6-1807-4336-bb26-fdbf3d6a3576\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_6\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":8,\"i\":\"84f6bd81-be0b-4c78-a216-6f63f8439f98\",\"w\":11,\"x\":0,\"y\":37},\"panelIndex\":\"84f6bd81-be0b-4c78-a216-6f63f8439f98\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_7\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":16,\"i\":\"60dc448a-4a30-4d9a-8db4-f4f37f5079a7\",\"w\":37,\"x\":11,\"y\":37},\"panelIndex\":\"60dc448a-4a30-4d9a-8db4-f4f37f5079a7\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_8\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":13,\"i\":\"85a1097f-9f64-4452-9a6d-41b9ea1daace\",\"w\":11,\"x\":0,\"y\":45},\"panelIndex\":\"85a1097f-9f64-4452-9a6d-41b9ea1daace\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_9\"},{\"embeddableConfig\":{\"mapCenter\":null,\"mapZoom\":null},\"gridData\":{\"h\":19,\"i\":\"5c4f43c0-ea2b-47ea-ba6e-600dd01d3c86\",\"w\":37,\"x\":11,\"y\":53},\"panelIndex\":\"5c4f43c0-ea2b-47ea-ba6e-600dd01d3c86\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_10\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":14,\"i\":\"6422d927-7d7e-4c4d-b736-2eb156f3c2f5\",\"w\":11,\"x\":0,\"y\":58},\"panelIndex\":\"6422d927-7d7e-4c4d-b736-2eb156f3c2f5\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_11\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":18,\"i\":\"6392a9e7-c71e-4c94-b5ca-c0c9ffbc0aea\",\"w\":48,\"x\":0,\"y\":72},\"panelIndex\":\"6392a9e7-c71e-4c94-b5ca-c0c9ffbc0aea\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_12\"},{\"embeddableConfig\":{\"hidePanelTitles\":true,\"title\":\"\"},\"gridData\":{\"h\":3,\"i\":\"2d3154f0-c171-477d-80b2-6dc598d6c520\",\"w\":48,\"x\":0,\"y\":90},\"panelIndex\":\"2d3154f0-c171-477d-80b2-6dc598d6c520\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_13\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":16,\"i\":\"36831c1a-1031-4a48-8630-85d2da2c7a2b\",\"w\":8,\"x\":0,\"y\":93},\"panelIndex\":\"36831c1a-1031-4a48-8630-85d2da2c7a2b\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_14\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":16,\"i\":\"19cd811c-fc9d-4bb2-8923-056ff7cb3517\",\"w\":20,\"x\":8,\"y\":93},\"panelIndex\":\"19cd811c-fc9d-4bb2-8923-056ff7cb3517\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_15\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":16,\"i\":\"2145bd63-3e27-46d2-8605-55f0ce3dd44a\",\"w\":20,\"x\":28,\"y\":93},\"panelIndex\":\"2145bd63-3e27-46d2-8605-55f0ce3dd44a\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_16\"},{\"embeddableConfig\":{\"hidePanelTitles\":true},\"gridData\":{\"h\":3,\"i\":\"83f75c0c-36a2-4830-a88c-dfb9cdc878c5\",\"w\":48,\"x\":0,\"y\":109},\"panelIndex\":\"83f75c0c-36a2-4830-a88c-dfb9cdc878c5\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_17\"},{\"embeddableConfig\":{\"hidePanelTitles\":true},\"gridData\":{\"h\":17,\"i\":\"c1c4ba26-e7ad-4041-922d-937364f53bbf\",\"w\":48,\"x\":0,\"y\":112},\"panelIndex\":\"c1c4ba26-e7ad-4041-922d-937364f53bbf\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_18\"},{\"embeddableConfig\":{\"hidePanelTitles\":true},\"gridData\":{\"h\":3,\"i\":\"0f4717b4-130e-4b11-875d-a5bfde186d96\",\"w\":48,\"x\":0,\"y\":129},\"panelIndex\":\"0f4717b4-130e-4b11-875d-a5bfde186d96\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_19\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":19,\"i\":\"1ee8bbf4-29cf-462c-9ffe-393517d9b622\",\"w\":48,\"x\":0,\"y\":132},\"panelIndex\":\"1ee8bbf4-29cf-462c-9ffe-393517d9b622\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_20\"}]","timeRestore":false,"title":"SecurityHub Summary","version":1},"id":"3b30c170-2d1b-11eb-9df7-6b7b0da6e7ae","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"1dfe5d30-8ba7-11ea-8245-b5a58f1d6758","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"f2b09cc0-2d26-11eb-9df7-6b7b0da6e7ae","name":"panel_0","type":"visualization"},{"id":"a9367f20-2d1b-11eb-9df7-6b7b0da6e7ae","name":"panel_1","type":"visualization"},{"id":"334f7940-2d1d-11eb-9df7-6b7b0da6e7ae","name":"panel_2","type":"visualization"},{"id":"cfbf4dc0-ff11-11eb-b8f8-31e0bc12764f","name":"panel_3","type":"visualization"},{"id":"fde97130-2d20-11eb-9df7-6b7b0da6e7ae","name":"panel_4","type":"visualization"},{"id":"d7b4ae30-3c43-11eb-9df7-6b7b0da6e7ae","name":"panel_5","type":"visualization"},{"id":"b0cc7cc0-2d35-11eb-9df7-6b7b0da6e7ae","name":"panel_6","type":"visualization"},{"id":"82dfb6d0-2d38-11eb-9df7-6b7b0da6e7ae","name":"panel_7","type":"visualization"},{"id":"9daedfe0-2d4c-11eb-9df7-6b7b0da6e7ae","name":"panel_8","type":"visualization"},{"id":"55386c40-2d65-11eb-9df7-6b7b0da6e7ae","name":"panel_9","type":"visualization"},{"id":"a83aa940-2d37-11eb-9df7-6b7b0da6e7ae","name":"panel_10","type":"visualization"},{"id":"0cc401d0-2d39-11eb-9df7-6b7b0da6e7ae","name":"panel_11","type":"visualization"},{"id":"28285fa0-ff3b-11eb-b8f8-31e0bc12764f","name":"panel_12","type":"visualization"},{"id":"2d864990-2d49-11eb-9df7-6b7b0da6e7ae","name":"panel_13","type":"visualization"},{"id":"1641af60-2d4c-11eb-9df7-6b7b0da6e7ae","name":"panel_14","type":"visualization"},{"id":"78c57b50-2d4a-11eb-9df7-6b7b0da6e7ae","name":"panel_15","type":"visualization"},{"id":"bf1275e0-2d4a-11eb-9df7-6b7b0da6e7ae","name":"panel_16","type":"visualization"},{"id":"76ce2a10-ff3e-11eb-845d-71956c13fd18","name":"panel_17","type":"visualization"},{"id":"cba355b0-ff39-11eb-845d-71956c13fd18","name":"panel_18","type":"visualization"},{"id":"fd3f6700-ff41-11eb-845d-71956c13fd18","name":"panel_19","type":"visualization"},{"id":"fbd60240-2d67-11eb-9df7-6b7b0da6e7ae","name":"panel_20","type":"search"}],"type":"dashboard","updated_at":"2022-04-10T14:32:55.433Z","version":"WzUwNTcsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"All - AWS Account","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"All - AWS Account\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"dimensions\":{\"metrics\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"AWS Account\"}}]}"},"id":"8c53cf90-8085-11ea-945d-8d0868f4a377","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"36049c40-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:37.130Z","version":"WzEzNTEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"All - AWS Region","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"All - AWS Region\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"dimensions\":{\"metrics\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"AWS Region\"}}]}"},"id":"b5aa3d20-8085-11ea-9ba8-7fa25bc74a6f","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"36049c40-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:37.130Z","version":"WzEzNTIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"All - LogType","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"All - LogType\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"dimensions\":{\"metrics\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"@log_type\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Log Type\"}}]}"},"id":"da3a7010-8085-11ea-9ba8-7fa25bc74a6f","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"36049c40-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:37.130Z","version":"WzEzNTMsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"All - Source IP","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"All - Source IP\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"dimensions\":{\"metrics\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"ip\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":15,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source IP\"}}]}"},"id":"93f715a0-8089-11ea-9ba8-7fa25bc74a6f","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"36049c40-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:37.130Z","version":"WzEzNTYsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"All - Source Countries","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"All - Source Countries\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"dimensions\":{\"metrics\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Src Countries\"}}]}"},"id":"cf3c93b0-8089-11ea-9ba8-7fa25bc74a6f","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"36049c40-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:37.130Z","version":"WzEzNTcsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"All - Source AS Organization","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"All - Source AS Organization\",\"type\":\"table\",\"params\":{\"perPage\":10,\"percentageCol\":\"\",\"showMetricsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\",\"dimensions\":{\"metrics\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"source.as.organization.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Src AS\"}}]}"},"id":"d605f710-85c8-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"36049c40-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:37.130Z","version":"WzEzNTgsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"All - Destination IP table","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"All - Destination IP table\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"dimensions\":{\"metrics\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"ip\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"destination.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Destination IP\"}}]}"},"id":"ae081fd0-8092-11ea-9ba8-7fa25bc74a6f","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"36049c40-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:37.130Z","version":"WzEzNTksMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"All - Destination Countries","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"All - Destination Countries\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"dimensions\":{\"metrics\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"destination.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Dest Countries\"}}]}"},"id":"076ed4f0-80a3-11ea-9ba8-7fa25bc74a6f","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"36049c40-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:37.130Z","version":"WzEzNjAsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"All - Destination AS Organization","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"All - Destination AS Organization\",\"type\":\"table\",\"params\":{\"perPage\":10,\"percentageCol\":\"\",\"showMetricsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\",\"dimensions\":{\"metrics\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"destination.as.organization.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Dest AS\"}}]}"},"id":"f3af8060-85c8-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"36049c40-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:37.130Z","version":"WzEzNjEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"VPCFlowLogs - Action Table","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"VPCFlowLogs - Action Table\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"dimensions\":{\"metrics\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"action\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Action\"}}]}"},"id":"a8d3fda0-8091-11ea-9ba8-7fa25bc74a6f","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:37.130Z","version":"WzEzNjMsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"VPCFlowLogs - Sent Size via VPC","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"VPCFlowLogs - Sent Size via VPC\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"dimensions\":{\"metrics\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"sum\"}],\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"ip\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"source.bytes\",\"customLabel\":\"Bytes\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source IP\"}}]}"},"id":"41466f50-809c-11ea-9ba8-7fa25bc74a6f","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:37.130Z","version":"WzEzNjQsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"VPCFlowLogs - Recieved Size via VPC","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"VPCFlowLogs - Recieved Size via VPC\",\"type\":\"table\",\"params\":{\"perPage\":10,\"percentageCol\":\"\",\"showMetricsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\",\"dimensions\":{\"metrics\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"sum\"}],\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"ip\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"network.bytes\",\"customLabel\":\"Bytes\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"destination.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Dest IP\"}}]}"},"id":"2fc589f0-809c-11ea-945d-8d0868f4a377","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:37.130Z","version":"WzEzNjUsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"eventSource\",\"negate\":false,\"params\":{\"query\":\"s3.amazonaws.com\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"eventSource\":\"s3.amazonaws.com\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"S3Trail - Bucket Access Count","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"requestParameters.bucketName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Bucket\"}}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"},\"title\":\"S3Trail - Bucket Access Count\"}"},"id":"f5c45270-85cf-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:37.130Z","version":"WzEzNjcsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"eventSource\",\"negate\":false,\"params\":{\"query\":\"s3.amazonaws.com\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"eventSource\":\"s3.amazonaws.com\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"S3Trail - Upload","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"additionalEventData.bytesTransferredIn\",\"customLabel\":\"Upload\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Src IP\"}}],\"params\":{\"perPage\":10,\"percentageCol\":\"\",\"showMetricsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"},\"title\":\"S3Trail - Upload\"}"},"id":"1b86aeb0-85ce-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:37.130Z","version":"WzEzNjgsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"eventSource\",\"negate\":false,\"params\":{\"query\":\"s3.amazonaws.com\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"eventSource\":\"s3.amazonaws.com\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"S3Trail - Download","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"additionalEventData.bytesTransferredOut\",\"customLabel\":\"Download\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Src IP\"}}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"},\"title\":\"S3Trail - Download\"}"},"id":"fb0ec320-85cd-11ea-8ea1-d5ea957d0a7d","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"5f946950-7fc8-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:37.130Z","version":"WzEzNjksMV0="}
+{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":8,\"h\":8,\"i\":\"5c3b3aed-9a6e-4061-8e76-4781b7b3993b\"},\"panelIndex\":\"5c3b3aed-9a6e-4061-8e76-4781b7b3993b\",\"embeddableConfig\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":\"asc\"}},\"vis\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":\"desc\"}}}},\"panelRefName\":\"panel_0\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":8,\"y\":0,\"w\":8,\"h\":8,\"i\":\"d5e60ce0-0cb3-46ed-ba70-6e6cec5f5fee\"},\"panelIndex\":\"d5e60ce0-0cb3-46ed-ba70-6e6cec5f5fee\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":16,\"y\":0,\"w\":8,\"h\":8,\"i\":\"ff4b55ec-f75c-48a8-ada0-22ff7919cceb\"},\"panelIndex\":\"ff4b55ec-f75c-48a8-ada0-22ff7919cceb\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":24,\"y\":0,\"w\":23,\"h\":8,\"i\":\"9e41113e-36a6-4cf4-8a47-6e34fd776214\"},\"panelIndex\":\"9e41113e-36a6-4cf4-8a47-6e34fd776214\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":8,\"w\":8,\"h\":8,\"i\":\"df224751-b8cf-4699-9317-b161f633863e\"},\"panelIndex\":\"df224751-b8cf-4699-9317-b161f633863e\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":8,\"y\":8,\"w\":8,\"h\":8,\"i\":\"423c1698-72c2-4864-ac64-836a9273cd7d\"},\"panelIndex\":\"423c1698-72c2-4864-ac64-836a9273cd7d\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":16,\"y\":8,\"w\":8,\"h\":8,\"i\":\"df10519a-73c0-4133-806a-e9345818500d\"},\"panelIndex\":\"df10519a-73c0-4133-806a-e9345818500d\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":24,\"y\":8,\"w\":8,\"h\":8,\"i\":\"c261af03-8687-4931-9e1f-d2fd74f71e9b\"},\"panelIndex\":\"c261af03-8687-4931-9e1f-d2fd74f71e9b\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":32,\"y\":8,\"w\":8,\"h\":8,\"i\":\"4970c2f1-ba7b-425e-8e31-77e45349bb81\"},\"panelIndex\":\"4970c2f1-ba7b-425e-8e31-77e45349bb81\",\"embeddableConfig\":{},\"panelRefName\":\"panel_8\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":40,\"y\":8,\"w\":7,\"h\":8,\"i\":\"27dd59e6-e648-49e6-9c8a-d040a97c8c18\"},\"panelIndex\":\"27dd59e6-e648-49e6-9c8a-d040a97c8c18\",\"embeddableConfig\":{},\"panelRefName\":\"panel_9\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":16,\"w\":8,\"h\":8,\"i\":\"2b9ce7a7-a2de-4acc-abc1-d6ad3ff62e70\"},\"panelIndex\":\"2b9ce7a7-a2de-4acc-abc1-d6ad3ff62e70\",\"embeddableConfig\":{},\"panelRefName\":\"panel_10\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":8,\"y\":16,\"w\":8,\"h\":8,\"i\":\"d1432388-cb24-40d8-b0e9-880972bb5f70\"},\"panelIndex\":\"d1432388-cb24-40d8-b0e9-880972bb5f70\",\"embeddableConfig\":{},\"panelRefName\":\"panel_11\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":16,\"y\":16,\"w\":8,\"h\":8,\"i\":\"04c063cd-307b-4f04-a1d6-6b51f87a145c\"},\"panelIndex\":\"04c063cd-307b-4f04-a1d6-6b51f87a145c\",\"embeddableConfig\":{},\"panelRefName\":\"panel_12\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":24,\"y\":16,\"w\":8,\"h\":8,\"i\":\"90c6a1c3-db65-45d0-bcdc-c1f939270037\"},\"panelIndex\":\"90c6a1c3-db65-45d0-bcdc-c1f939270037\",\"embeddableConfig\":{},\"panelRefName\":\"panel_13\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":32,\"y\":16,\"w\":8,\"h\":8,\"i\":\"08bbca42-e3c3-46b4-9a2c-f6f04cb3f9b4\"},\"panelIndex\":\"08bbca42-e3c3-46b4-9a2c-f6f04cb3f9b4\",\"embeddableConfig\":{},\"panelRefName\":\"panel_14\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":40,\"y\":16,\"w\":8,\"h\":8,\"i\":\"2dbd839f-f4f3-4bf7-859a-05bb6a9e3dd3\"},\"panelIndex\":\"2dbd839f-f4f3-4bf7-859a-05bb6a9e3dd3\",\"embeddableConfig\":{},\"panelRefName\":\"panel_15\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":24,\"w\":48,\"h\":13,\"i\":\"bdf6a896-eef7-421c-8724-ba1936818cef\"},\"panelIndex\":\"bdf6a896-eef7-421c-8724-ba1936818cef\",\"embeddableConfig\":{},\"panelRefName\":\"panel_16\"}]","timeRestore":false,"title":"All - Threat Hunting","version":1},"id":"1148ad10-8086-11ea-945d-8d0868f4a377","migrationVersion":{"dashboard":"7.3.0"},"references":[{"id":"8c53cf90-8085-11ea-945d-8d0868f4a377","name":"panel_0","type":"visualization"},{"id":"b5aa3d20-8085-11ea-9ba8-7fa25bc74a6f","name":"panel_1","type":"visualization"},{"id":"da3a7010-8085-11ea-9ba8-7fa25bc74a6f","name":"panel_2","type":"visualization"},{"id":"75b825f0-8090-11ea-945d-8d0868f4a377","name":"panel_3","type":"visualization"},{"id":"93f715a0-8089-11ea-9ba8-7fa25bc74a6f","name":"panel_4","type":"visualization"},{"id":"cf3c93b0-8089-11ea-9ba8-7fa25bc74a6f","name":"panel_5","type":"visualization"},{"id":"d605f710-85c8-11ea-8ea1-d5ea957d0a7d","name":"panel_6","type":"visualization"},{"id":"ae081fd0-8092-11ea-9ba8-7fa25bc74a6f","name":"panel_7","type":"visualization"},{"id":"076ed4f0-80a3-11ea-9ba8-7fa25bc74a6f","name":"panel_8","type":"visualization"},{"id":"f3af8060-85c8-11ea-8ea1-d5ea957d0a7d","name":"panel_9","type":"visualization"},{"id":"a8d3fda0-8091-11ea-9ba8-7fa25bc74a6f","name":"panel_10","type":"visualization"},{"id":"41466f50-809c-11ea-9ba8-7fa25bc74a6f","name":"panel_11","type":"visualization"},{"id":"2fc589f0-809c-11ea-945d-8d0868f4a377","name":"panel_12","type":"visualization"},{"id":"f5c45270-85cf-11ea-8ea1-d5ea957d0a7d","name":"panel_13","type":"visualization"},{"id":"1b86aeb0-85ce-11ea-8ea1-d5ea957d0a7d","name":"panel_14","type":"visualization"},{"id":"fb0ec320-85cd-11ea-8ea1-d5ea957d0a7d","name":"panel_15","type":"visualization"},{"id":"51adce40-a6c3-11ea-8f8c-f562992caf43","name":"panel_16","type":"search"}],"type":"dashboard","updated_at":"2020-10-11T06:17:37.130Z","version":"WzEzNzEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"VPCFlowLogs - AWS Account(Bar)","uiStateJSON":"{\"vis\":{\"legendOpen\":true}}","version":1,"visState":"{\"title\":\"VPCFlowLogs - AWS Account(Bar)\",\"type\":\"histogram\",\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#34130C\"},\"dimensions\":{\"x\":{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"},\"y\":[{\"accessor\":2,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"series\":[{\"accessor\":1,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Account\"}}]}"},"id":"e64d06f0-8225-11ea-9ba8-7fa25bc74a6f","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:45.391Z","version":"WzEzNzMsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"VPCFlowLogs - Region(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"VPCFlowLogs - Region(Bar)\",\"type\":\"histogram\",\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#34130C\"},\"dimensions\":{\"x\":{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"},\"y\":[{\"accessor\":2,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"series\":[{\"accessor\":1,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}]}"},"id":"8079b750-8226-11ea-945d-8d0868f4a377","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:45.391Z","version":"WzEzNzQsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogs - Accept Packets(Line Chart)","uiStateJSON":"{\"vis\":{\"legendOpen\":false}}","version":1,"visState":"{\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum_bucket\",\"schema\":\"metric\",\"params\":{\"customBucket\":{\"id\":\"1-bucket\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"language\":\"kuery\",\"query\":\"\\\"action\\\": \\\"ACCEPT\\\"\"},\"label\":\"\"}]}},\"customMetric\":{\"id\":\"1-metric\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"network.packets\"}}}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-72h\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}}}],\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{},\"type\":\"category\"}],\"grid\":{\"categoryLines\":false},\"labels\":{},\"legendPosition\":\"right\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Overall Sum of Sum of network.packets\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-3\"}],\"thresholdLine\":{\"color\":\"#E7664C\",\"show\":false,\"style\":\"full\",\"value\":10,\"width\":1},\"times\":[],\"type\":\"line\",\"valueAxes\":[{\"id\":\"ValueAxis-3\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}]},\"title\":\"VPCFlowLogs - Accept Packets(Line Chart)\"}"},"id":"93a6db30-8228-11ea-9ba8-7fa25bc74a6f","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:45.391Z","version":"WzEzNzUsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogs - Reject Packets(Line Chart)","uiStateJSON":"{\"vis\":{\"legendOpen\":false}}","version":1,"visState":"{\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum_bucket\",\"schema\":\"metric\",\"params\":{\"customBucket\":{\"id\":\"1-bucket\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"language\":\"kuery\",\"query\":\"\\\"action\\\": \\\"REJECT\\\"\"},\"label\":\"\"}]}},\"customMetric\":{\"id\":\"1-metric\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"network.packets\"}}}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-72h\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":true,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"\"}}],\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{},\"type\":\"category\"}],\"grid\":{\"categoryLines\":false,\"valueAxis\":\"\"},\"labels\":{},\"legendPosition\":\"bottom\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Overall Sum of Sum of network.packets\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-2\"}],\"thresholdLine\":{\"color\":\"#E7664C\",\"show\":false,\"style\":\"full\",\"value\":10,\"width\":1},\"times\":[],\"type\":\"line\",\"valueAxes\":[{\"id\":\"ValueAxis-2\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}]},\"title\":\"VPCFlowLogs - Reject Packets(Line Chart)\"}"},"id":"c3100a20-8234-11ea-8450-d1d13849d130","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:45.391Z","version":"WzEzNzYsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"action:ACCEPT\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"action\",\"negate\":false,\"params\":{\"query\":\"ACCEPT\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"action\":\"ACCEPT\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogs - Accept Src Packets(Pie)","uiStateJSON":"{\"vis\":{\"legendOpen\":false}}","version":1,"visState":"{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"source.packets\",\"json\":\"\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"json\":\"\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"row\":true},\"title\":\"VPCFlowLogs - Accept Src Packets(Pie)\"}"},"id":"e3231530-823b-11ea-8450-d1d13849d130","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:45.391Z","version":"WzEzNzcsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"action\",\"negate\":false,\"params\":{\"query\":\"ACCEPT\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"action\":\"ACCEPT\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogs - Accept Src Packets(Table)","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"source.packets\",\"customLabel\":\"Packets\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Src IP\"}}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"},\"title\":\"VPCFlowLogs - Accept Src Packets(Table)\"}"},"id":"41ffb5a0-823b-11ea-8dd2-6fda3f2e19c6","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:45.391Z","version":"WzEzNzgsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"action:REJECT\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"action\",\"negate\":false,\"params\":{\"query\":\"REJECT\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"action\":\"REJECT\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogs - Reject Src Packets(Pie)","uiStateJSON":"{\"vis\":{\"legendOpen\":false}}","version":1,"visState":"{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"source.packets\",\"json\":\"\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"json\":\"\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"row\":true},\"title\":\"VPCFlowLogs - Reject Src Packets(Pie)\"}"},"id":"82c6bd20-823d-11ea-a1e6-856110366757","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:45.391Z","version":"WzEzNzksMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"action\",\"negate\":false,\"params\":{\"query\":\"REJECT\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"action\":\"REJECT\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogs - Reject Src Packets(Table)","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"source.packets\",\"customLabel\":\"Packets\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Src IP\"}}],\"params\":{\"perPage\":10,\"percentageCol\":\"\",\"showMetricsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"},\"title\":\"VPCFlowLogs - Reject Src Packets(Table)\"}"},"id":"435e9770-823d-11ea-8dd2-6fda3f2e19c6","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:45.391Z","version":"WzEzODAsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"action\",\"negate\":false,\"params\":{\"query\":\"ACCEPT\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"action\":\"ACCEPT\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogs - Accept Src Packets(Geo)","uiStateJSON":"{\"mapZoom\":2,\"mapCenter\":[25.777633878392646,41.93485907317978]}","version":1,"visState":"{\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"source.packets\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"source.geo.country_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"emsHotLink\":\"https://maps.elastic.co/v7.7?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"format\":\"image/png\",\"transparent\":true},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":10,\"minZoom\":0,\"origin\":\"elastic_maps_service\"}}},\"title\":\"VPCFlowLogs - Accept Src Packets(Geo)\"}"},"id":"77dae980-823e-11ea-a1e6-856110366757","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:45.391Z","version":"WzEzODEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"action\",\"negate\":false,\"params\":{\"query\":\"REJECT\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"action\":\"REJECT\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogs - Reject Src Packets(Geo)","uiStateJSON":"{\"mapCenter\":[25.777633878392646,41.93485907317978],\"mapZoom\":2}","version":1,"visState":"{\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"source.packets\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"source.geo.country_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"emsHotLink\":\"https://maps.elastic.co/v7.7?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"format\":\"image/png\",\"transparent\":true},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":10,\"minZoom\":0,\"origin\":\"elastic_maps_service\"}}},\"title\":\"VPCFlowLogs - Reject Src Packets(Geo)\"}"},"id":"b7f8a390-823e-11ea-8450-d1d13849d130","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:45.391Z","version":"WzEzODIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\",\"filter\":[]}"},"title":"VPCFlowLogs - Top 10 Chart Source IP","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"VPCFlowLogs - Top 10 Chart Source IP\",\"type\":\"line\",\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#34130C\"},\"dimensions\":{\"x\":{\"accessor\":0,\"format\":{\"id\":\"string\"},\"params\":{},\"aggType\":\"date_range\"},\"y\":[{\"accessor\":2,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"series\":[{\"accessor\":1,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"ip\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"useNormalizedEsInterval\":true,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}]}"},"id":"e530dac0-8073-11ea-9ba8-7fa25bc74a6f","migrationVersion":{"visualization":"7.7.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2020-10-11T06:17:45.391Z","version":"WzEzODMsMV0="}
+{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":7,\"i\":\"9ef783f5-af53-464f-8bf7-8fe79e574163\"},\"panelIndex\":\"9ef783f5-af53-464f-8bf7-8fe79e574163\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":24,\"y\":0,\"w\":24,\"h\":7,\"i\":\"96bddd36-2236-463b-b159-db84432d32de\"},\"panelIndex\":\"96bddd36-2236-463b-b159-db84432d32de\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":7,\"w\":24,\"h\":8,\"i\":\"79257b0d-673f-4623-86ab-bf3e2cb151f8\"},\"panelIndex\":\"79257b0d-673f-4623-86ab-bf3e2cb151f8\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":24,\"y\":7,\"w\":23,\"h\":8,\"i\":\"9ac58252-693d-4d1b-a9d0-5fd413fa6814\"},\"panelIndex\":\"9ac58252-693d-4d1b-a9d0-5fd413fa6814\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":15,\"w\":12,\"h\":13,\"i\":\"bca8500a-2fc1-413e-baea-bc3f412302e6\"},\"panelIndex\":\"bca8500a-2fc1-413e-baea-bc3f412302e6\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":12,\"y\":15,\"w\":12,\"h\":13,\"i\":\"915b89ba-5042-47ba-b109-c166aef741f6\"},\"panelIndex\":\"915b89ba-5042-47ba-b109-c166aef741f6\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":24,\"y\":15,\"w\":12,\"h\":13,\"i\":\"9fbd1232-494c-4b0f-a78b-c5ef50504ce9\"},\"panelIndex\":\"9fbd1232-494c-4b0f-a78b-c5ef50504ce9\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":36,\"y\":15,\"w\":11,\"h\":13,\"i\":\"bc745ad9-6dbb-436e-8a4a-b01519a8a5b5\"},\"panelIndex\":\"bc745ad9-6dbb-436e-8a4a-b01519a8a5b5\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":28,\"w\":24,\"h\":15,\"i\":\"d1c3f6d6-bac5-4d31-af4e-0dbc85eec494\"},\"panelIndex\":\"d1c3f6d6-bac5-4d31-af4e-0dbc85eec494\",\"embeddableConfig\":{},\"panelRefName\":\"panel_8\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":24,\"y\":28,\"w\":24,\"h\":15,\"i\":\"3167fad5-70cc-44ab-bce1-53d0f30782af\"},\"panelIndex\":\"3167fad5-70cc-44ab-bce1-53d0f30782af\",\"embeddableConfig\":{},\"panelRefName\":\"panel_9\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":43,\"w\":48,\"h\":16,\"i\":\"512dc9bf-f031-474f-9afb-36c59e7f4743\"},\"panelIndex\":\"512dc9bf-f031-474f-9afb-36c59e7f4743\",\"embeddableConfig\":{},\"panelRefName\":\"panel_10\"}]","timeRestore":false,"title":"VPCFlowLogs Summary","version":1},"id":"9459bbf0-8071-11ea-945d-8d0868f4a377","migrationVersion":{"dashboard":"7.3.0"},"references":[{"id":"e64d06f0-8225-11ea-9ba8-7fa25bc74a6f","name":"panel_0","type":"visualization"},{"id":"8079b750-8226-11ea-945d-8d0868f4a377","name":"panel_1","type":"visualization"},{"id":"93a6db30-8228-11ea-9ba8-7fa25bc74a6f","name":"panel_2","type":"visualization"},{"id":"c3100a20-8234-11ea-8450-d1d13849d130","name":"panel_3","type":"visualization"},{"id":"e3231530-823b-11ea-8450-d1d13849d130","name":"panel_4","type":"visualization"},{"id":"41ffb5a0-823b-11ea-8dd2-6fda3f2e19c6","name":"panel_5","type":"visualization"},{"id":"82c6bd20-823d-11ea-a1e6-856110366757","name":"panel_6","type":"visualization"},{"id":"435e9770-823d-11ea-8dd2-6fda3f2e19c6","name":"panel_7","type":"visualization"},{"id":"77dae980-823e-11ea-a1e6-856110366757","name":"panel_8","type":"visualization"},{"id":"b7f8a390-823e-11ea-8450-d1d13849d130","name":"panel_9","type":"visualization"},{"id":"e530dac0-8073-11ea-9ba8-7fa25bc74a6f","name":"panel_10","type":"visualization"}],"type":"dashboard","updated_at":"2020-10-11T06:17:45.391Z","version":"WzEzODQsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Packets via traffic path(Pie)","uiStateJSON":"{\"vis\":{\"legendOpen\":true}}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Packets via traffic path(Pie)\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"traffic_path: 1\",\"language\":\"kuery\"},\"label\":\"another resource in the same VPC\"},{\"input\":{\"query\":\"traffic_path: 2\",\"language\":\"kuery\"},\"label\":\"an internet gateway or a gateway VPC endpoint\"},{\"input\":{\"query\":\"traffic_path: 3\",\"language\":\"kuery\"},\"label\":\"a virtual private gateway\"},{\"input\":{\"query\":\"traffic_path: 4\",\"language\":\"kuery\"},\"label\":\"an intra-region VPC peering connection\"},{\"input\":{\"query\":\"traffic_path: 5\",\"language\":\"kuery\"},\"label\":\"an inter-region VPC peering connection\"},{\"input\":{\"query\":\"traffic_path: 6\",\"language\":\"kuery\"},\"label\":\"a local gateway\"},{\"input\":{\"query\":\"traffic_path: 7\",\"language\":\"kuery\"},\"label\":\"a gateway VPC endpoint (Nitro-based instances only)\"},{\"input\":{\"query\":\"traffic_path: 8\",\"language\":\"kuery\"},\"label\":\"an internet gateway (Nitro-based instances only)\"}]},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"d29e72b0-60d6-11ec-8f03-4771d7b9c8b5","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-12-25T11:24:44.706Z","version":"WzI3OTMsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"traffic_path\",\"negate\":false,\"params\":{\"query\":\"2\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"traffic_path\":\"2\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Through an internet gateway or a gateway VPC endpoint(Metric)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Through an internet gateway or a gateway VPC endpoint(Metric)\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Traffic through an internet gateway or a gateway VPC endpoint\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"a29a0dd0-60cd-11ec-8f03-4771d7b9c8b5","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-12-25T11:26:23.554Z","version":"WzI5MjEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"traffic_path\",\"negate\":false,\"params\":{\"query\":\"3\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"traffic_path\":\"3\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Traffic through a virtual private gateway(Metric)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Traffic through a virtual private gateway(Metric)\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Traffic through a virtual private gateway\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"e19d0910-60cd-11ec-a2c7-5f514f7a9288","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-12-25T11:26:45.874Z","version":"WzI5NTcsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"traffic_path\",\"negate\":false,\"params\":{\"query\":\"4\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"traffic_path\":\"4\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Traffic through an intra-region VPC peering connection(Metric)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Traffic through an intra-region VPC peering connection(Metric)\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Traffic through an intra-region VPC peering connection\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"128cce70-60ce-11ec-885f-2fb911ae35dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-12-25T11:27:02.732Z","version":"WzI5ODYsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"traffic_path\",\"negate\":false,\"params\":{\"query\":\"5\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"traffic_path\":\"5\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Traffic through an inter-region VPC peering connection(Metric)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Traffic through an inter-region VPC peering connection(Metric)\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Traffic through an inter-region VPC peering connection\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"67dd7960-60ce-11ec-8f03-4771d7b9c8b5","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-12-25T11:27:17.220Z","version":"WzMwMTYsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"traffic_path\",\"negate\":false,\"params\":{\"query\":\"6\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"traffic_path\":\"6\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Traffic through a local gateway(Metric)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Traffic through a local gateway(Metric)\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Traffic through a local gateway\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"b1282390-60ce-11ec-a2c7-5f514f7a9288","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-12-25T11:27:30.580Z","version":"WzMwNDksMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"traffic_path\",\"negate\":false,\"params\":{\"query\":\"7\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"traffic_path\":\"7\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Traffic through a gateway VPC endpoint (Nitro-based instances only)(Metric)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Traffic through a gateway VPC endpoint (Nitro-based instances only)(Metric)\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Traffic through a gateway VPC endpoint (Nitro-based instances only)\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"e83e4fd0-60ce-11ec-885f-2fb911ae35dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-12-25T11:27:45.369Z","version":"WzMwODIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"traffic_path\",\"negate\":false,\"params\":{\"query\":\"8\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"traffic_path\":\"8\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Traffic through an internet gateway (Nitro-based instances only)(Metric)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Traffic through an internet gateway (Nitro-based instances only)(Metric)\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Traffic through an internet gateway (Nitro-based instances only)\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"1910a220-60cf-11ec-8f03-4771d7b9c8b5","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-12-25T11:27:59.333Z","version":"WzMxMTIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"action\",\"negate\":false,\"params\":{\"query\":\"ACCEPT\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"action\":\"ACCEPT\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"tcp_flags\",\"negate\":false,\"params\":{\"query\":\"2\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"tcp_flags\":\"2\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Accept Packets via subnet_id(Pie) ","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Accept Packets via subnet_id(Pie) \",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"subnet_id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"flow_direction\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"d8f79ca0-60c6-11ec-885f-2fb911ae35dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-12-25T11:23:27.482Z","version":"WzI3NjMsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"action\",\"negate\":false,\"params\":{\"query\":\"REJECT\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"action\":\"REJECT\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Reject Packets via subnet_id(Pie) ","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Reject Packets via subnet_id(Pie) \",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"subnet_id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"flow_direction\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"b81619d0-60c6-11ec-8f03-4771d7b9c8b5","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-12-25T11:28:28.926Z","version":"WzMxNDIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Packets via interface_id(Data Table)","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Packets via interface_id(Data Table)\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"az_id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"instance_id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"},{\"id\":\"8\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"interface_id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.port\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"destination.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"},{\"id\":\"7\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"destination.port\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":20,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"ea782c80-60c9-11ec-885f-2fb911ae35dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-12-25T11:11:33.183Z","version":"WzI2MzksMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Traffic Source via Country(Pie)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Traffic Source via Country(Pie)\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"bytes\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"011bf690-613a-11ec-a2c7-5f514f7a9288","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-12-25T11:09:18.620Z","version":"WzI0ODUsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Top10 traffic via Source IP(Vertical Bar)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Top10 traffic via Source IP(Vertical Bar)\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"bytes\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":true,\"valueAxis\":\"ValueAxis-1\"},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100,\"rotate\":0},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Sum of bytes\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Sum of bytes\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"orderBucketsBySum\":false}}"},"id":"d1106190-6137-11ec-a2c7-5f514f7a9288","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-12-25T11:09:54.131Z","version":"WzI1MjEsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Top10 traffic via Destination IP(Vertical Bar)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Top10 traffic via Destination IP(Vertical Bar)\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"bytes\"},\"schema\":\"metric\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"destination.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":true,\"valueAxis\":\"ValueAxis-1\"},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100,\"rotate\":0},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Sum of bytes\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Sum of bytes\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"efee2fb0-6138-11ec-a2c7-5f514f7a9288","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-12-25T11:08:48.861Z","version":"WzI0NTUsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Traffic Destination via Country(Pie)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Traffic Destination via Country(Pie)\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"bytes\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"destination.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"destination.geo.country_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"a6aa52a0-6572-11ec-a2c7-5f514f7a9288","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-12-25T11:06:03.850Z","version":"WzIzNTgsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"traffic_path\",\"negate\":false,\"params\":{\"query\":\"1\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"traffic_path\":\"1\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Traffic through another resource in the same VPC(Metric)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Traffic through another resource in the same VPC(Metric)\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Traffic through another resource in the same VPC\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"4f7db460-6575-11ec-885f-2fb911ae35dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-12-25T11:25:06.086Z","version":"WzI4MjYsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"action:ACCEPT\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"action\",\"negate\":false,\"params\":{\"query\":\"ACCEPT\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"action\":\"ACCEPT\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Accept Src Packets(Pie)","uiStateJSON":"{\"vis\":{\"legendOpen\":false}}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Accept Src Packets(Pie)\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"source.packets\",\"json\":\"\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"json\":\"\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"flow_direction\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":2,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"row\":true}}"},"id":"74cc2c90-8174-11ec-b326-ed725936f8cf","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-30T02:29:31.736Z","version":"WzM2NDIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"action\",\"negate\":false,\"params\":{\"query\":\"ACCEPT\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"action\":\"ACCEPT\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"tcp_flags\",\"negate\":false,\"params\":{\"query\":\"2\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"tcp_flags\":\"2\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Accept Src Packets(Table)","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Accept Src Packets(Table)\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"source.packets\",\"customLabel\":\"Packets\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Src IP\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"flow_direction\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":2,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"291c25b0-8175-11ec-83d8-673d37b43d68","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-30T02:34:34.251Z","version":"WzM3MjQsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"action:REJECT\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"action\",\"negate\":false,\"params\":{\"query\":\"REJECT\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"action\":\"REJECT\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Reject Src Packets(Pie)","uiStateJSON":"{\"vis\":{\"legendOpen\":false}}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Reject Src Packets(Pie)\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"source.packets\",\"json\":\"\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"json\":\"\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"flow_direction\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":2,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"row\":true}}"},"id":"cae57eb0-8174-11ec-83d8-673d37b43d68","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-30T02:31:56.187Z","version":"WzM3MTAsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"action\",\"negate\":false,\"params\":{\"query\":\"REJECT\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"action\":\"REJECT\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"VPCFlowLogsCustom - Reject Src Packets(Table)","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"VPCFlowLogsCustom - Reject Src Packets(Table)\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"source.packets\",\"customLabel\":\"Packets\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Src IP\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"flow_direction\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":2,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"percentageCol\":\"\",\"showMetricsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"}}"},"id":"686b6c30-8175-11ec-83d8-673d37b43d68","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"99f81900-806f-11ea-945d-8d0868f4a377","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-30T02:36:20.467Z","version":"WzM3MzAsMV0="}
+{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":7,\"i\":\"9ef783f5-af53-464f-8bf7-8fe79e574163\",\"w\":24,\"x\":0,\"y\":0},\"panelIndex\":\"9ef783f5-af53-464f-8bf7-8fe79e574163\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":7,\"i\":\"96bddd36-2236-463b-b159-db84432d32de\",\"w\":24,\"x\":24,\"y\":0},\"panelIndex\":\"96bddd36-2236-463b-b159-db84432d32de\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":8,\"i\":\"79257b0d-673f-4623-86ab-bf3e2cb151f8\",\"w\":24,\"x\":0,\"y\":7},\"panelIndex\":\"79257b0d-673f-4623-86ab-bf3e2cb151f8\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":8,\"i\":\"9ac58252-693d-4d1b-a9d0-5fd413fa6814\",\"w\":24,\"x\":24,\"y\":7},\"panelIndex\":\"9ac58252-693d-4d1b-a9d0-5fd413fa6814\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":14,\"i\":\"e0216a19-3753-4c7b-9134-75d0c8f7968a\",\"w\":48,\"x\":0,\"y\":28},\"panelIndex\":\"e0216a19-3753-4c7b-9134-75d0c8f7968a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":13,\"i\":\"d897b04a-d024-4d51-a1b5-cf40384e234f\",\"w\":12,\"x\":12,\"y\":42},\"panelIndex\":\"d897b04a-d024-4d51-a1b5-cf40384e234f\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":13,\"i\":\"9417c875-e2fa-448d-b3aa-2df074f18eb2\",\"w\":12,\"x\":24,\"y\":42},\"panelIndex\":\"9417c875-e2fa-448d-b3aa-2df074f18eb2\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":13,\"i\":\"81db9c98-5c6c-4454-9330-288c18c04e5d\",\"w\":12,\"x\":36,\"y\":42},\"panelIndex\":\"81db9c98-5c6c-4454-9330-288c18c04e5d\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":13,\"i\":\"a0a8d911-5d13-4d93-9f58-54318a4a7516\",\"w\":12,\"x\":0,\"y\":55},\"panelIndex\":\"a0a8d911-5d13-4d93-9f58-54318a4a7516\",\"embeddableConfig\":{},\"panelRefName\":\"panel_8\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":13,\"i\":\"19e0f716-f17c-442e-98d0-270649ceff8e\",\"w\":12,\"x\":12,\"y\":55},\"panelIndex\":\"19e0f716-f17c-442e-98d0-270649ceff8e\",\"embeddableConfig\":{},\"panelRefName\":\"panel_9\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":13,\"i\":\"1bcf9ca1-b98b-403e-9e33-731b48012de4\",\"w\":12,\"x\":24,\"y\":55},\"panelIndex\":\"1bcf9ca1-b98b-403e-9e33-731b48012de4\",\"embeddableConfig\":{},\"panelRefName\":\"panel_10\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":13,\"i\":\"1c093e4d-0652-4e93-ac73-52b7b7c33808\",\"w\":12,\"x\":36,\"y\":55},\"panelIndex\":\"1c093e4d-0652-4e93-ac73-52b7b7c33808\",\"embeddableConfig\":{},\"panelRefName\":\"panel_11\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":15,\"i\":\"d72e8329-b212-44bc-97c4-db93dcedf15a\",\"w\":24,\"x\":0,\"y\":68},\"panelIndex\":\"d72e8329-b212-44bc-97c4-db93dcedf15a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_12\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":15,\"i\":\"eb4384c9-6766-41ca-9ed2-12bf621c539d\",\"w\":24,\"x\":24,\"y\":68},\"panelIndex\":\"eb4384c9-6766-41ca-9ed2-12bf621c539d\",\"embeddableConfig\":{},\"panelRefName\":\"panel_13\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":12,\"i\":\"4b814ff6-ca08-4a22-9b78-9f9920148ccd\",\"w\":48,\"x\":0,\"y\":83},\"panelIndex\":\"4b814ff6-ca08-4a22-9b78-9f9920148ccd\",\"embeddableConfig\":{},\"panelRefName\":\"panel_14\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":15,\"i\":\"d1c3f6d6-bac5-4d31-af4e-0dbc85eec494\",\"w\":24,\"x\":0,\"y\":95},\"panelIndex\":\"d1c3f6d6-bac5-4d31-af4e-0dbc85eec494\",\"embeddableConfig\":{},\"panelRefName\":\"panel_15\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":15,\"i\":\"3167fad5-70cc-44ab-bce1-53d0f30782af\",\"w\":24,\"x\":24,\"y\":95},\"panelIndex\":\"3167fad5-70cc-44ab-bce1-53d0f30782af\",\"embeddableConfig\":{},\"panelRefName\":\"panel_16\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":16,\"i\":\"512dc9bf-f031-474f-9afb-36c59e7f4743\",\"w\":48,\"x\":0,\"y\":110},\"panelIndex\":\"512dc9bf-f031-474f-9afb-36c59e7f4743\",\"embeddableConfig\":{},\"panelRefName\":\"panel_17\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":14,\"i\":\"7c451d62-73c4-4c90-b5ee-19c964b96432\",\"w\":11,\"x\":0,\"y\":126},\"panelIndex\":\"7c451d62-73c4-4c90-b5ee-19c964b96432\",\"embeddableConfig\":{},\"panelRefName\":\"panel_18\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":14,\"i\":\"49a238dc-18fa-4851-b9d5-a1ff080658f8\",\"w\":37,\"x\":11,\"y\":126},\"panelIndex\":\"49a238dc-18fa-4851-b9d5-a1ff080658f8\",\"embeddableConfig\":{},\"panelRefName\":\"panel_19\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":13,\"i\":\"bed6b789-07c9-41d6-bb30-c865a6bca265\",\"w\":37,\"x\":11,\"y\":140},\"panelIndex\":\"bed6b789-07c9-41d6-bb30-c865a6bca265\",\"embeddableConfig\":{},\"panelRefName\":\"panel_20\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":15,\"i\":\"3c5faf13-ca84-4a89-b516-c3acf9c24c8c\",\"w\":48,\"x\":0,\"y\":153},\"panelIndex\":\"3c5faf13-ca84-4a89-b516-c3acf9c24c8c\",\"embeddableConfig\":{},\"panelRefName\":\"panel_21\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":13,\"i\":\"27c957d6-8171-48a1-b14a-bc38ec943520\",\"w\":11,\"x\":0,\"y\":140},\"panelIndex\":\"27c957d6-8171-48a1-b14a-bc38ec943520\",\"embeddableConfig\":{},\"panelRefName\":\"panel_22\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":13,\"i\":\"7c1a00e6-857b-4c7d-b6bb-97b1d97a4ef0\",\"w\":12,\"x\":0,\"y\":42},\"panelIndex\":\"7c1a00e6-857b-4c7d-b6bb-97b1d97a4ef0\",\"embeddableConfig\":{},\"panelRefName\":\"panel_23\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"h\":13,\"i\":\"e9c723a8-20d1-423e-a189-0c88e4852c86\",\"w\":12,\"x\":0,\"y\":15},\"panelIndex\":\"e9c723a8-20d1-423e-a189-0c88e4852c86\",\"embeddableConfig\":{},\"panelRefName\":\"panel_24\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"x\":12,\"y\":15,\"w\":12,\"h\":13,\"i\":\"648ad815-4c19-4225-90ad-ee8850403081\"},\"panelIndex\":\"648ad815-4c19-4225-90ad-ee8850403081\",\"embeddableConfig\":{},\"panelRefName\":\"panel_25\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"x\":24,\"y\":15,\"w\":12,\"h\":13,\"i\":\"d6539792-1538-43c5-84d4-1eef6d5a312f\"},\"panelIndex\":\"d6539792-1538-43c5-84d4-1eef6d5a312f\",\"embeddableConfig\":{},\"panelRefName\":\"panel_26\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"x\":36,\"y\":15,\"w\":12,\"h\":13,\"i\":\"038f4dab-18fc-40bb-8b7a-55589b87fc64\"},\"panelIndex\":\"038f4dab-18fc-40bb-8b7a-55589b87fc64\",\"embeddableConfig\":{},\"panelRefName\":\"panel_27\"}]","timeRestore":false,"title":"VPCFlowLogsCustom Summary with v5 custom formats","version":1},"id":"6db56a90-60ac-11ec-9f95-d73574b1a1ee","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"e64d06f0-8225-11ea-9ba8-7fa25bc74a6f","name":"panel_0","type":"visualization"},{"id":"8079b750-8226-11ea-945d-8d0868f4a377","name":"panel_1","type":"visualization"},{"id":"93a6db30-8228-11ea-9ba8-7fa25bc74a6f","name":"panel_2","type":"visualization"},{"id":"c3100a20-8234-11ea-8450-d1d13849d130","name":"panel_3","type":"visualization"},{"id":"d29e72b0-60d6-11ec-8f03-4771d7b9c8b5","name":"panel_4","type":"visualization"},{"id":"a29a0dd0-60cd-11ec-8f03-4771d7b9c8b5","name":"panel_5","type":"visualization"},{"id":"e19d0910-60cd-11ec-a2c7-5f514f7a9288","name":"panel_6","type":"visualization"},{"id":"128cce70-60ce-11ec-885f-2fb911ae35dd","name":"panel_7","type":"visualization"},{"id":"67dd7960-60ce-11ec-8f03-4771d7b9c8b5","name":"panel_8","type":"visualization"},{"id":"b1282390-60ce-11ec-a2c7-5f514f7a9288","name":"panel_9","type":"visualization"},{"id":"e83e4fd0-60ce-11ec-885f-2fb911ae35dd","name":"panel_10","type":"visualization"},{"id":"1910a220-60cf-11ec-8f03-4771d7b9c8b5","name":"panel_11","type":"visualization"},{"id":"d8f79ca0-60c6-11ec-885f-2fb911ae35dd","name":"panel_12","type":"visualization"},{"id":"b81619d0-60c6-11ec-8f03-4771d7b9c8b5","name":"panel_13","type":"visualization"},{"id":"ea782c80-60c9-11ec-885f-2fb911ae35dd","name":"panel_14","type":"visualization"},{"id":"77dae980-823e-11ea-a1e6-856110366757","name":"panel_15","type":"visualization"},{"id":"b7f8a390-823e-11ea-8450-d1d13849d130","name":"panel_16","type":"visualization"},{"id":"e530dac0-8073-11ea-9ba8-7fa25bc74a6f","name":"panel_17","type":"visualization"},{"id":"011bf690-613a-11ec-a2c7-5f514f7a9288","name":"panel_18","type":"visualization"},{"id":"d1106190-6137-11ec-a2c7-5f514f7a9288","name":"panel_19","type":"visualization"},{"id":"efee2fb0-6138-11ec-a2c7-5f514f7a9288","name":"panel_20","type":"visualization"},{"id":"662bb3e0-6572-11ec-8f03-4771d7b9c8b5","name":"panel_21","type":"search"},{"id":"a6aa52a0-6572-11ec-a2c7-5f514f7a9288","name":"panel_22","type":"visualization"},{"id":"4f7db460-6575-11ec-885f-2fb911ae35dd","name":"panel_23","type":"visualization"},{"id":"74cc2c90-8174-11ec-b326-ed725936f8cf","name":"panel_24","type":"visualization"},{"id":"291c25b0-8175-11ec-83d8-673d37b43d68","name":"panel_25","type":"visualization"},{"id":"cae57eb0-8174-11ec-83d8-673d37b43d68","name":"panel_26","type":"visualization"},{"id":"686b6c30-8175-11ec-83d8-673d37b43d68","name":"panel_27","type":"visualization"}],"type":"dashboard","updated_at":"2022-01-30T02:38:35.893Z","version":"WzM4NTMsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"AWSWAF - AWS Account(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"AWSWAF - AWS Account(Bar)\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"b01486c0-0aac-11eb-b53e-8512e4ebda3e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-09-13T01:50:17.556Z","version":"WzI0Mjk1LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"AWSWAF - Region(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"\"}}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}},\"title\":\"AWSWAF - Region(Bar)\"}"},"id":"55cf6fd0-0aad-11eb-b53e-8512e4ebda3e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-09-13T01:50:17.556Z","version":"WzI0Mjk2LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"AWSWAF - Executed WAF Rules","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"AWSWAF - Executed WAF Rules\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"rule.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"89b102d0-f123-11ea-99e6-53b5a9b5c41b","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-09-13T01:50:17.556Z","version":"WzI0Mjk3LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"AWSWAF - Number of All Requests","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"AWSWAF - Number of All Requests\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"},\"schema\":\"metric\"}],\"params\":{\"addLegend\":false,\"addTooltip\":true,\"metric\":{\"colorSchema\":\"Green to Red\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"invertColors\":false,\"labels\":{\"show\":false},\"metricColorMode\":\"None\",\"percentageMode\":false,\"style\":{\"bgColor\":false,\"bgFill\":\"#000\",\"fontSize\":30,\"labelColor\":false,\"subText\":\"\"},\"useRanges\":false},\"type\":\"metric\"}}"},"id":"969b9ff0-f15f-11ea-99e6-53b5a9b5c41b","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-09-13T01:50:17.556Z","version":"WzI0Mjk4LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"AWSWAF - Allowed vs Blocked Requests","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"timelion\",\"aggs\":[],\"params\":{\"interval\":\"auto\",\"expression\":\".es(index=\\\"log-aws-waf-*\\\",q='action:ALLOW').label(\\\"Allowed Requests\\\").color(#009933), .es(index=\\\"log-aws-waf-*\\\",q='action:BLOCK').label(\\\"Blocked Requests\\\").color(#cc0000)\"},\"title\":\"AWSWAF - Allowed vs Blocked Requests\"}"},"id":"db357bd0-f129-11ea-99e6-53b5a9b5c41b","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2021-09-13T01:50:17.556Z","version":"WzI0Mjk5LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"action:BLOCK\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"AWSWAF - Number of Blocked Requests","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"AWSWAF - Number of Blocked Requests\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"}],\"params\":{\"addLegend\":false,\"addTooltip\":true,\"metric\":{\"colorSchema\":\"Green to Red\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"invertColors\":false,\"labels\":{\"show\":false},\"metricColorMode\":\"None\",\"percentageMode\":false,\"style\":{\"bgColor\":false,\"bgFill\":\"#000\",\"fontSize\":30,\"labelColor\":false,\"subText\":\"\"},\"useRanges\":false},\"type\":\"metric\"}}"},"id":"bb12a590-f15f-11ea-99e6-53b5a9b5c41b","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-09-13T01:50:17.556Z","version":"WzI0MzAwLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"AWSWAF - Filters","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"pinFilters\":true,\"updateFiltersOnChange\":true,\"useTimeFilter\":false,\"controls\":[{\"id\":\"1565169719620\",\"label\":\"WebACL\",\"options\":{\"dynamicOptions\":true,\"multiselect\":true,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"\",\"type\":\"list\",\"fieldName\":\"rule.ruleset\",\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1565169760470\",\"label\":\"Rule\",\"options\":{\"dynamicOptions\":true,\"multiselect\":true,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"\",\"type\":\"list\",\"fieldName\":\"rule.name\",\"indexPatternRefName\":\"control_1_index_pattern\"},{\"id\":\"1565169899571\",\"label\":\"Action\",\"options\":{\"dynamicOptions\":true,\"multiselect\":true,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"\",\"type\":\"list\",\"fieldName\":\"action\",\"indexPatternRefName\":\"control_2_index_pattern\"},{\"id\":\"1565170498755\",\"label\":\"Country\",\"options\":{\"dynamicOptions\":true,\"multiselect\":true,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"\",\"type\":\"list\",\"fieldName\":\"source.geo.country_iso_code\",\"indexPatternRefName\":\"control_3_index_pattern\"},{\"id\":\"1565170536048\",\"label\":\"Client IP\",\"options\":{\"dynamicOptions\":true,\"multiselect\":false,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"\",\"type\":\"list\",\"fieldName\":\"httpRequest.clientIp\",\"indexPatternRefName\":\"control_4_index_pattern\"},{\"id\":\"1565182161719\",\"parent\":\"\",\"label\":\"Host\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"fieldName\":\"url.domain\",\"indexPatternRefName\":\"control_5_index_pattern\"},{\"id\":\"1565775477773\",\"parent\":\"\",\"label\":\"Rule Type\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":false,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"fieldName\":\"terminatingRuleType\",\"indexPatternRefName\":\"control_6_index_pattern\"}]},\"title\":\"AWSWAF - Filters\"}"},"id":"2fa41610-f128-11ea-99e6-53b5a9b5c41b","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"control_0_index_pattern","type":"index-pattern"},{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"control_1_index_pattern","type":"index-pattern"},{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"control_2_index_pattern","type":"index-pattern"},{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"control_3_index_pattern","type":"index-pattern"},{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"control_4_index_pattern","type":"index-pattern"},{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"control_5_index_pattern","type":"index-pattern"},{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"control_6_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2021-09-13T01:50:17.556Z","version":"WzI0MzAxLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"AWSWAF - Countries By Number of Request","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"AWSWAF - Countries By Number of Request\",\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"httpRequest.country\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Country\"},\"schema\":\"segment\"}],\"params\":{\"legendPosition\":\"bottomright\",\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"selectedLayer\":{\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\",\"id\":\"world_countries\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"attribution\":\"Made with NaturalEarth | Elastic Maps Service\",\"fields\":[{\"type\":\"id\",\"name\":\"iso2\",\"description\":\"ISO 3166-1 alpha-2 code\"},{\"type\":\"id\",\"name\":\"iso3\",\"description\":\"ISO 3166-1 alpha-3 code\"},{\"type\":\"property\",\"name\":\"name\",\"description\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"layerId\":\"elastic_maps_service.World Countries\",\"isEMS\":true},\"emsHotLink\":\"https://maps.elastic.co/v6.7?locale=en#file/world_countries\",\"selectedJoinField\":{\"type\":\"id\",\"name\":\"iso2\",\"description\":\"ISO 3166-1 alpha-2 code\"},\"isDisplayWarning\":true,\"wms\":{\"enabled\":false,\"options\":{\"format\":\"image/png\",\"transparent\":true},\"selectedTmsLayer\":{\"default\":true,\"minZoom\":0,\"maxZoom\":10,\"attribution\":\"\",\"id\":\"TMS in config/kibana.yml\",\"origin\":\"self_hosted\"}},\"mapZoom\":2,\"mapCenter\":[0,0],\"outlineWeight\":1,\"showAllShapes\":true}}"},"id":"a2c32ce0-f127-11ea-99e6-53b5a9b5c41b","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-09-13T01:50:17.556Z","version":"WzI0MzAyLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"AWSWAF - HTTP Methods","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"AWSWAF - HTTP Methods\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"httpRequest.httpMethod\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"28101cd0-f125-11ea-99e6-53b5a9b5c41b","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-09-13T01:50:17.556Z","version":"WzI0MzAzLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"AWSWAF - HTTP Versions","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"AWSWAF - HTTP Versions\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"httpRequest.httpVersion\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"59903b50-f125-11ea-99e6-53b5a9b5c41b","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-09-13T01:50:17.556Z","version":"WzI0MzA0LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"AWSWAF - Unique IP Count","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"AWSWAF - Unique IP Count\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"httpRequest.clientIp\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":false},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":30}}}}"},"id":"92923030-f160-11ea-99e6-53b5a9b5c41b","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-09-13T01:50:17.556Z","version":"WzI0MzA1LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"AWSWAF - Requests Count","uiStateJSON":"{}","version":1,"visState":"{\"type\":\"timelion\",\"aggs\":[],\"params\":{\"interval\":\"auto\",\"expression\":\".es(index=\\\"log-aws-waf-*\\\").label(\\\"Requests Count\\\").color(#AA9933)\"},\"title\":\"AWSWAF - Requests Count\"}"},"id":"requestcount","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2021-09-13T01:50:17.556Z","version":"WzI0MzA2LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"AWSWAF - Top 10 URI","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":0,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"AWSWAF - Top 10 URI\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"httpRequest.uri\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"URI\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"percentageCol\":\"\",\"showMetricsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":0,\"direction\":null},\"totalFunc\":\"sum\"}}"},"id":"48048c10-f11b-11ea-99e6-53b5a9b5c41b","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-09-13T01:50:17.556Z","version":"WzI0MzA3LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"AWSWAF - Top 10 IP Addresses","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"AWSWAF - Top 10 IP Addresses\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"httpRequest.clientIp\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Client IP Address\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"6f9d3eb0-f108-11ea-99e6-53b5a9b5c41b","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-09-13T01:50:17.556Z","version":"WzI0MzA4LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"AWSWAF - Top 10 Countries","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"AWSWAF - Top 10 Countries\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"httpRequest.country\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Country\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"8c122780-f127-11ea-99e6-53b5a9b5c41b","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-09-13T01:50:17.556Z","version":"WzI0MzA5LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"AWSWAF - Top 10 WebACL","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"AWSWAF - Top 10 WebACL\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"rule.ruleset\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"WebACL Name\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"fa2d3cf0-f15e-11ea-99e6-53b5a9b5c41b","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-09-13T01:50:17.556Z","version":"WzI0MzEwLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"AWSWAF - Top 10 User-Agents","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"AWSWAF - Top 10 User-Agents\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user_agent.original\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"User-Agent\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"bfdb9460-f114-11ea-99e6-53b5a9b5c41b","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-09-13T01:50:17.556Z","version":"WzI0MzExLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"AWSWAF - Top 10 Hosts","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"AWSWAF - Top 10 Hosts\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"url.domain\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Host\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"6545f700-f116-11ea-99e6-53b5a9b5c41b","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-09-13T01:50:17.556Z","version":"WzI0MzEyLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"AWSWAF - Top 10 Rules","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"AWSWAF - Top 10 Rules\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"rule.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Rule Name\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"26b91520-f121-11ea-99e6-53b5a9b5c41b","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"eb70b590-efdb-11ea-99e6-53b5a9b5c41b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2021-09-13T01:50:17.556Z","version":"WzI0MzEzLDFd"}
+{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"optionsJSON":"{\"darkTheme\":false,\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"7.10.2\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":9,\"i\":\"f0a3bcf6-6723-4234-8ae3-167c70605e89\"},\"panelIndex\":\"f0a3bcf6-6723-4234-8ae3-167c70605e89\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":24,\"y\":0,\"w\":24,\"h\":9,\"i\":\"246c3389-e6dc-4a7e-80a6-9b85a565f915\"},\"panelIndex\":\"246c3389-e6dc-4a7e-80a6-9b85a565f915\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":0,\"y\":9,\"w\":15,\"h\":10,\"i\":\"d15c34d5-c544-4434-93f1-b4ac1b3e4d61\"},\"panelIndex\":\"d15c34d5-c544-4434-93f1-b4ac1b3e4d61\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":15,\"y\":9,\"w\":8,\"h\":5,\"i\":\"f6682dc4-86fd-405a-a050-5b0975027d10\"},\"panelIndex\":\"f6682dc4-86fd-405a-a050-5b0975027d10\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":23,\"y\":9,\"w\":25,\"h\":10,\"i\":\"e425438e-1a3f-4c1f-ae6a-4bbabf6f51e1\"},\"panelIndex\":\"e425438e-1a3f-4c1f-ae6a-4bbabf6f51e1\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":15,\"y\":14,\"w\":8,\"h\":5,\"i\":\"3c391222-6006-4561-9ab7-da41b1d1b392\"},\"panelIndex\":\"3c391222-6006-4561-9ab7-da41b1d1b392\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":0,\"y\":19,\"w\":48,\"h\":9,\"i\":\"e973d2be-d03b-4700-a8e8-c1832af9e3a4\"},\"panelIndex\":\"e973d2be-d03b-4700-a8e8-c1832af9e3a4\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":0,\"y\":28,\"w\":48,\"h\":17,\"i\":\"dd23dcac-f30d-4528-97a5-fdbc79b5d741\"},\"panelIndex\":\"dd23dcac-f30d-4528-97a5-fdbc79b5d741\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":0,\"y\":45,\"w\":20,\"h\":9,\"i\":\"d83fd765-daad-4a6b-b962-8a01df8bdc76\"},\"panelIndex\":\"d83fd765-daad-4a6b-b962-8a01df8bdc76\",\"embeddableConfig\":{},\"panelRefName\":\"panel_8\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":20,\"y\":45,\"w\":19,\"h\":9,\"i\":\"c545ee32-5cd0-4df0-99de-b407d32c4151\"},\"panelIndex\":\"c545ee32-5cd0-4df0-99de-b407d32c4151\",\"embeddableConfig\":{},\"panelRefName\":\"panel_9\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":39,\"y\":45,\"w\":9,\"h\":9,\"i\":\"b41c017e-c5e7-4224-8ec1-0a92be7ba71e\"},\"panelIndex\":\"b41c017e-c5e7-4224-8ec1-0a92be7ba71e\",\"embeddableConfig\":{},\"panelRefName\":\"panel_10\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":0,\"y\":54,\"w\":48,\"h\":9,\"i\":\"ea00f18d-3563-496f-83d8-ce93c916aa1a\"},\"panelIndex\":\"ea00f18d-3563-496f-83d8-ce93c916aa1a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_11\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":0,\"y\":63,\"w\":21,\"h\":16,\"i\":\"19852f7d-6ef5-4311-a68e-ae4d3ad67c71\"},\"panelIndex\":\"19852f7d-6ef5-4311-a68e-ae4d3ad67c71\",\"embeddableConfig\":{},\"panelRefName\":\"panel_12\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":21,\"y\":63,\"w\":8,\"h\":16,\"i\":\"78f1d156-f48a-4c3d-bc71-bfaa686806d8\"},\"panelIndex\":\"78f1d156-f48a-4c3d-bc71-bfaa686806d8\",\"embeddableConfig\":{},\"panelRefName\":\"panel_13\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":29,\"y\":63,\"w\":8,\"h\":16,\"i\":\"b4d6c482-fbff-46e8-b3bb-a6a0ead69e92\"},\"panelIndex\":\"b4d6c482-fbff-46e8-b3bb-a6a0ead69e92\",\"embeddableConfig\":{},\"panelRefName\":\"panel_14\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":37,\"y\":63,\"w\":11,\"h\":16,\"i\":\"b1540ba4-0929-4ecf-9ef9-e3e6e21f6dd9\"},\"panelIndex\":\"b1540ba4-0929-4ecf-9ef9-e3e6e21f6dd9\",\"embeddableConfig\":{},\"panelRefName\":\"panel_15\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":0,\"y\":79,\"w\":21,\"h\":16,\"i\":\"06400f7d-b268-4611-a2da-1938f4ecc29d\"},\"panelIndex\":\"06400f7d-b268-4611-a2da-1938f4ecc29d\",\"embeddableConfig\":{},\"panelRefName\":\"panel_16\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":21,\"y\":79,\"w\":16,\"h\":16,\"i\":\"042ecf84-9228-4126-9f72-64663ce74918\"},\"panelIndex\":\"042ecf84-9228-4126-9f72-64663ce74918\",\"embeddableConfig\":{},\"panelRefName\":\"panel_17\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":37,\"y\":79,\"w\":11,\"h\":16,\"i\":\"a80fb6f7-d171-45ee-bc28-121ebb5d2b49\"},\"panelIndex\":\"a80fb6f7-d171-45ee-bc28-121ebb5d2b49\",\"embeddableConfig\":{},\"panelRefName\":\"panel_18\"},{\"version\":\"7.10.2\",\"gridData\":{\"x\":0,\"y\":95,\"w\":48,\"h\":21,\"i\":\"a65b4e15-95e1-4717-9d2f-69a43f0c54db\"},\"panelIndex\":\"a65b4e15-95e1-4717-9d2f-69a43f0c54db\",\"embeddableConfig\":{},\"panelRefName\":\"panel_19\"}]","timeRestore":false,"title":"AWSWAF Summary","version":1},"id":"326483e0-f3c0-11ea-99e6-53b5a9b5c41b","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"b01486c0-0aac-11eb-b53e-8512e4ebda3e","name":"panel_0","type":"visualization"},{"id":"55cf6fd0-0aad-11eb-b53e-8512e4ebda3e","name":"panel_1","type":"visualization"},{"id":"89b102d0-f123-11ea-99e6-53b5a9b5c41b","name":"panel_2","type":"visualization"},{"id":"969b9ff0-f15f-11ea-99e6-53b5a9b5c41b","name":"panel_3","type":"visualization"},{"id":"db357bd0-f129-11ea-99e6-53b5a9b5c41b","name":"panel_4","type":"visualization"},{"id":"bb12a590-f15f-11ea-99e6-53b5a9b5c41b","name":"panel_5","type":"visualization"},{"id":"2fa41610-f128-11ea-99e6-53b5a9b5c41b","name":"panel_6","type":"visualization"},{"id":"a2c32ce0-f127-11ea-99e6-53b5a9b5c41b","name":"panel_7","type":"visualization"},{"id":"28101cd0-f125-11ea-99e6-53b5a9b5c41b","name":"panel_8","type":"visualization"},{"id":"59903b50-f125-11ea-99e6-53b5a9b5c41b","name":"panel_9","type":"visualization"},{"id":"92923030-f160-11ea-99e6-53b5a9b5c41b","name":"panel_10","type":"visualization"},{"id":"requestcount","name":"panel_11","type":"visualization"},{"id":"48048c10-f11b-11ea-99e6-53b5a9b5c41b","name":"panel_12","type":"visualization"},{"id":"6f9d3eb0-f108-11ea-99e6-53b5a9b5c41b","name":"panel_13","type":"visualization"},{"id":"8c122780-f127-11ea-99e6-53b5a9b5c41b","name":"panel_14","type":"visualization"},{"id":"fa2d3cf0-f15e-11ea-99e6-53b5a9b5c41b","name":"panel_15","type":"visualization"},{"id":"bfdb9460-f114-11ea-99e6-53b5a9b5c41b","name":"panel_16","type":"visualization"},{"id":"6545f700-f116-11ea-99e6-53b5a9b5c41b","name":"panel_17","type":"visualization"},{"id":"26b91520-f121-11ea-99e6-53b5a9b5c41b","name":"panel_18","type":"visualization"},{"id":"8a161670-0aaf-11eb-b53e-8512e4ebda3e","name":"panel_19","type":"search"}],"type":"dashboard","updated_at":"2021-09-13T04:52:55.656Z","version":"WzI0NDI3LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"WorkSpaces - User Selector","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"WorkSpaces - User Selector\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1629110186176\",\"fieldName\":\"related.user\",\"parent\":\"\",\"label\":\"Add users and workspaceIDs, then remove the users from filter\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1629110246333\",\"fieldName\":\"WorkspaceId\",\"parent\":\"1629110186176\",\"label\":\"WorkSpace ID\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_1_index_pattern\"}],\"updateFiltersOnChange\":true,\"useTimeFilter\":false,\"pinFilters\":false}}"},"id":"3334ba00-fe7e-11eb-8e7f-63b315dab53e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"bdcb4920-da4f-11eb-8e7f-63b315dab53e","name":"control_0_index_pattern","type":"index-pattern"},{"id":"bdcb4920-da4f-11eb-8e7f-63b315dab53e","name":"control_1_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2022-02-11T23:42:09.051Z","version":"WzUyNCwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"WorkSpaces - WorkSpace ID","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"WorkSpaces - WorkSpace ID\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Login Success Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"WorkspaceId\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"WorkSpace ID\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"92e7ab50-fe7f-11eb-8e7f-63b315dab53e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"60103e60-fe78-11eb-8e7f-63b315dab53e","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-02-11T23:49:25.158Z","version":"WzUzMSwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"WorkSpaces - Login Success Src Country(Pie)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"WorkSpaces - Login Success Src Country(Pie)\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":15,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"a7369fa0-fe91-11eb-845d-71956c13fd18","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"60103e60-fe78-11eb-8e7f-63b315dab53e","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-02-11T23:57:39.225Z","version":"WzUzNSwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"WorkSpaces - Login Success Src Country(Table)","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":\"desc\"}}}}","version":1,"visState":"{\"title\":\"WorkSpaces - Login Success Src Country(Table)\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Login Success Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Src Country\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"4a612dc0-fe7a-11eb-8e7f-63b315dab53e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"60103e60-fe78-11eb-8e7f-63b315dab53e","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-02-11T23:47:36.731Z","version":"WzUzMCwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"WorkSpaces - Login Success Src IP(Table)","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"WorkSpaces - Login Success Src IP(Table)\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Login Success Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Src IP\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Country\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.city_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"City\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"8dcbd370-fe7b-11eb-8e7f-63b315dab53e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"60103e60-fe78-11eb-8e7f-63b315dab53e","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-02-12T00:21:32.914Z","version":"WzU0OSwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"WorkSpaces - Login Success Src Country(Geo)","uiStateJSON":"{\"mapZoom\":3,\"mapCenter\":[16.29905101458183,7.207031250000001]}","version":1,"visState":"{\"title\":\"WorkSpaces - Login Success Src Country(Geo)\",\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":30,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"emsHotLink\":\"?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"attribution\":\"\",\"format\":\"image/png\",\"layers\":\"\",\"styles\":\"\",\"transparent\":true,\"version\":\"\"},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":10,\"minZoom\":0,\"origin\":\"elastic_maps_service\"},\"url\":\"\"}}}"},"id":"698d7490-fe7c-11eb-8e7f-63b315dab53e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"60103e60-fe78-11eb-8e7f-63b315dab53e","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-02-11T23:45:14.826Z","version":"WzUyNywxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"WorkSpaces - Unique Count Of Src IP","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"WorkSpaces - Unique Count Of Src IP\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"source.ip\",\"customLabel\":\"Unique Count of Src IP\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"WorkspaceId\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"WorkSpace ID\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"24712f10-8b98-11ec-b79b-85606024ac08","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"60103e60-fe78-11eb-8e7f-63b315dab53e","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-02-12T00:27:48.768Z","version":"WzU1MiwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"WorkSpaces - Unique Count Of Src AS Organization","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"WorkSpaces - Unique Count Of Src AS Organization\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"source.as.organization.name\",\"customLabel\":\"Unique Count of Src AS Organization\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"WorkspaceId\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"WorkSpacce ID\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"ed51b400-8b97-11ec-b79b-85606024ac08","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"60103e60-fe78-11eb-8e7f-63b315dab53e","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-02-12T00:24:50.711Z","version":"WzU1MCwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"WorkSpaces - Unique Count Of Src Country","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"WorkSpaces - Unique Count Of Src Country\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"source.geo.country_name\",\"customLabel\":\"Unique Count of Src Country\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"WorkspaceId\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"WorkSpace ID\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"f1e22e10-8b96-11ec-b79b-85606024ac08","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"60103e60-fe78-11eb-8e7f-63b315dab53e","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-02-12T00:27:05.119Z","version":"WzU1MSwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"WorkSpaces - State(line)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"WorkSpaces - State(line)\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"WorkspaceId\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-30d\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"State\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Unique count of WorkspaceId\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Unique count of WorkspaceId\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"78b79140-ff43-11eb-845d-71956c13fd18","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"bdcb4920-da4f-11eb-8e7f-63b315dab53e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-02-11T23:34:44.343Z","version":"WzUxNSwxXQ=="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"WorkSpaces - Connection State(line)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"WorkSpaces - Connection State(line)\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"WorkspaceId\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-1y\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"ConnectionState\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Unique count of WorkspaceId\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Unique count of WorkspaceId\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"c6ac1660-8b1a-11ec-89ae-9551e0f96f2a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"bdcb4920-da4f-11eb-8e7f-63b315dab53e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-02-11T23:34:44.343Z","version":"WzUxNiwxXQ=="}
+{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"x\":0,\"y\":0,\"w\":25,\"h\":6,\"i\":\"a969fdeb-842c-4345-8222-5986e064c226\"},\"panelIndex\":\"a969fdeb-842c-4345-8222-5986e064c226\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"x\":25,\"y\":0,\"w\":23,\"h\":12,\"i\":\"7bff7882-da1d-4637-a815-8430d8582d81\"},\"panelIndex\":\"7bff7882-da1d-4637-a815-8430d8582d81\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"x\":0,\"y\":6,\"w\":14,\"h\":18,\"i\":\"3fa46024-344a-4df3-a68d-5242099329bc\"},\"panelIndex\":\"3fa46024-344a-4df3-a68d-5242099329bc\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"x\":14,\"y\":6,\"w\":11,\"h\":18,\"i\":\"74e3365e-3fd3-4c2c-afe9-f5b93e32152a\"},\"panelIndex\":\"74e3365e-3fd3-4c2c-afe9-f5b93e32152a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"x\":25,\"y\":12,\"w\":23,\"h\":12,\"i\":\"a1b07563-8842-44eb-9085-c7dda0ac3b30\"},\"panelIndex\":\"a1b07563-8842-44eb-9085-c7dda0ac3b30\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"x\":0,\"y\":24,\"w\":48,\"h\":24,\"i\":\"ba2261cb-5277-4520-a816-c99ec9fd229a\"},\"panelIndex\":\"ba2261cb-5277-4520-a816-c99ec9fd229a\",\"embeddableConfig\":{\"mapCenter\":null,\"mapZoom\":null},\"panelRefName\":\"panel_5\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"x\":0,\"y\":48,\"w\":16,\"h\":15,\"i\":\"848c2afa-5664-4e5b-819f-206fb39ff9fd\"},\"panelIndex\":\"848c2afa-5664-4e5b-819f-206fb39ff9fd\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"x\":32,\"y\":48,\"w\":16,\"h\":15,\"i\":\"4e071f89-3de9-4a00-b5da-e377347372e2\"},\"panelIndex\":\"4e071f89-3de9-4a00-b5da-e377347372e2\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"x\":16,\"y\":48,\"w\":16,\"h\":15,\"i\":\"d8efc9f7-c45e-414f-8f77-837e11b82a3c\"},\"panelIndex\":\"d8efc9f7-c45e-414f-8f77-837e11b82a3c\",\"embeddableConfig\":{},\"panelRefName\":\"panel_8\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"x\":0,\"y\":63,\"w\":48,\"h\":15,\"i\":\"1375280f-d882-49c8-b2a2-ca75c4b793d0\"},\"panelIndex\":\"1375280f-d882-49c8-b2a2-ca75c4b793d0\",\"embeddableConfig\":{},\"panelRefName\":\"panel_9\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"x\":0,\"y\":78,\"w\":48,\"h\":11,\"i\":\"08b03dbf-fb04-45fe-b102-07a462293ff9\"},\"panelIndex\":\"08b03dbf-fb04-45fe-b102-07a462293ff9\",\"embeddableConfig\":{},\"panelRefName\":\"panel_10\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"x\":0,\"y\":89,\"w\":48,\"h\":11,\"i\":\"42d0b0fa-7dd0-4a40-8289-861f95d77cc4\"},\"panelIndex\":\"42d0b0fa-7dd0-4a40-8289-861f95d77cc4\",\"embeddableConfig\":{},\"panelRefName\":\"panel_11\"},{\"version\":\"1.0.0-SNAPSHOT\",\"gridData\":{\"x\":0,\"y\":100,\"w\":48,\"h\":17,\"i\":\"04583907-5bfa-431e-bd2e-f4ccaf4d8cdf\"},\"panelIndex\":\"04583907-5bfa-431e-bd2e-f4ccaf4d8cdf\",\"embeddableConfig\":{},\"panelRefName\":\"panel_12\"}]","timeRestore":false,"title":"WorkSpaces - Summary","version":1},"id":"d1286770-fe10-11eb-8e7f-63b315dab53e","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"3334ba00-fe7e-11eb-8e7f-63b315dab53e","name":"panel_0","type":"visualization"},{"id":"92e7ab50-fe7f-11eb-8e7f-63b315dab53e","name":"panel_1","type":"visualization"},{"id":"a7369fa0-fe91-11eb-845d-71956c13fd18","name":"panel_2","type":"visualization"},{"id":"4a612dc0-fe7a-11eb-8e7f-63b315dab53e","name":"panel_3","type":"visualization"},{"id":"8dcbd370-fe7b-11eb-8e7f-63b315dab53e","name":"panel_4","type":"visualization"},{"id":"698d7490-fe7c-11eb-8e7f-63b315dab53e","name":"panel_5","type":"visualization"},{"id":"24712f10-8b98-11ec-b79b-85606024ac08","name":"panel_6","type":"visualization"},{"id":"ed51b400-8b97-11ec-b79b-85606024ac08","name":"panel_7","type":"visualization"},{"id":"f1e22e10-8b96-11ec-b79b-85606024ac08","name":"panel_8","type":"visualization"},{"id":"60103e60-fe78-11eb-8e7f-63b315dab53e","name":"panel_9","type":"search"},{"id":"78b79140-ff43-11eb-845d-71956c13fd18","name":"panel_10","type":"visualization"},{"id":"c6ac1660-8b1a-11ec-89ae-9551e0f96f2a","name":"panel_11","type":"visualization"},{"id":"53583640-fe79-11eb-8e7f-63b315dab53e","name":"panel_12","type":"search"}],"type":"dashboard","updated_at":"2022-02-12T00:13:46.162Z","version":"WzU0NCwxXQ=="}
+{"exportedCount":363,"missingRefCount":0,"missingReferences":[]}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/assets/sense.json b/server/adaptors/integrations/__data__/repository/ocsf-security/assets/sense.json
new file mode 100644
index 0000000000..8b5dc1dcdf
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/assets/sense.json
@@ -0,0 +1 @@
+{"id":"eb36bc49-d640-4d5f-a597-906cf1a0993d","createdAt":1714859639203,"updatedAt":1714910453255,"text":"# This is a SimpleSchema for Observability based mapping setup integration \n# The OTEL schema defines the four signale which compose the root elements of the OTEL protocol. :\n\n# (Traces) Setup ss4o_traces_template\n# (Logs) Setup ss4o_logs_template\n# (Metrics) Setup ss4o_metrics_template\n# (Services) Setup ss4o_services_template\n\n# ------------------------------------------------------------------------------------------------------------------------------------\n#\n# The workflow includes the following steps\n# - create a new `ss4o_traces_template` index template\n# - create a new `ss4o_logs_template` index template\n# - create a new `ss4o_metrics_template` index template\n# - create a new `ss4o_services_template` index template\n\n\n# For Additional Information visit : https://github.com/opensearch-project/opensearch-catalog/integrations/observability/otel-schema-setup/info\n# ------------------------------------------------------------------------------------------------------------------------------------\n\n# Create the ss4o_traces_template index template \n# >> ADD the \"data_stream\":{} line to apply for data-streams\nPUT _index_template/ss4o_traces_template\n{\n \"index_patterns\": [\n \"ss4o_traces-*-*\"\n ],\n \"template\": {\n \"mappings\": {\n \"_meta\": {\n \"version\": \"1.0.0\",\n \"catalog\": \"observability\",\n \"type\": \"traces\",\n \"component\": \"trace\",\n \"correlations\": [\n {\n \"field\": \"serviceName\",\n \"foreign-schema\": \"services\",\n \"foreign-field\": \"spanId\"\n }\n ]\n },\n \"dynamic_templates\": [\n {\n \"events_attributes_map\": {\n \"mapping\": {\n \"type\": \"keyword\"\n },\n \"path_match\": \"events.attributes.*\"\n }\n },\n {\n \"links_attributes_map\": {\n \"mapping\": {\n \"type\": \"keyword\"\n },\n \"path_match\": \"links.attributes.*\"\n }\n },\n {\n \"instrumentation_scope_attributes_map\": {\n \"mapping\": {\n \"type\": \"keyword\"\n },\n \"path_match\": \"instrumentationScope.attributes.*\"\n }\n }\n ],\n \"_source\": {\n \"enabled\": true\n },\n \"properties\": {\n \"traceId\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"spanId\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"traceState\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n }\n }\n },\n \"parentSpanId\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"name\": {\n \"ignore_above\": 1024,\n \"type\": \"keyword\"\n },\n \"kind\": {\n \"ignore_above\": 128,\n \"type\": \"keyword\"\n },\n \"startTime\": {\n \"type\": \"date_nanos\"\n },\n \"endTime\": {\n \"type\": \"date_nanos\"\n },\n \"droppedAttributesCount\": {\n \"type\": \"long\"\n },\n \"droppedEventsCount\": {\n \"type\": \"long\"\n },\n \"droppedLinksCount\": {\n \"type\": \"long\"\n },\n \"status\": {\n \"properties\": {\n \"code\": {\n \"type\": \"long\"\n },\n \"message\": {\n \"ignore_above\": 128,\n \"type\": \"keyword\"\n }\n }\n },\n \"attributes\": {\n \"type\": \"object\",\n \"properties\": {\n \"serviceName\": {\n \"type\": \"keyword\"\n },\n \"data_stream\": {\n \"properties\": {\n \"dataset\": {\n \"ignore_above\": 128,\n \"type\": \"keyword\"\n },\n \"namespace\": {\n \"ignore_above\": 128,\n \"type\": \"keyword\"\n },\n \"type\": {\n \"ignore_above\": 56,\n \"type\": \"keyword\"\n }\n }\n }\n }\n },\n \"events\": {\n \"type\": \"nested\",\n \"properties\": {\n \"name\": {\n \"ignore_above\": 1024,\n \"type\": \"keyword\"\n },\n \"@timestamp\": {\n \"type\": \"date_nanos\"\n },\n \"observedTimestamp\": {\n \"type\": \"date_nanos\"\n }\n }\n },\n \"links\": {\n \"type\": \"nested\",\n \"properties\": {\n \"traceId\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"spanId\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"traceState\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n }\n }\n }\n }\n },\n \"instrumentationScope\": {\n \"properties\": {\n \"name\": {\n \"type\": \"keyword\"\n },\n \"version\": {\n \"type\": \"keyword\"\n },\n \"droppedAttributesCount\": {\n \"type\": \"integer\"\n },\n \"schemaUrl\": {\n \"type\": \"keyword\"\n }\n }\n },\n \"schemaUrl\": {\n \"type\": \"keyword\"\n }\n }\n },\n \"aliases\" : {\n \"otel-v1-apm-span\" : {}\n }\n },\n \"composed_of\": [],\n \"version\": 1,\n \"_meta\": {\n \"description\": \"Observability Traces Mapping Template\",\n \"catalog\": \"observability\",\n \"type\": \"traces\",\n \"correlations\": [\n {\n \"field\": \"serviceName\",\n \"foreign-schema\": \"services\",\n \"foreign-field\": \"serviceName\"\n }\n ]\n }\n}\n\n# Create the ss4o_logs_template index template\n# >> add the \"data_stream\":{} line to apply for data-streams\nPUT _index_template/ss4o_logs_template\n{\n \"index_patterns\": [\"ss4o_logs-*-*\"],\n \"priority\": 900,\n \"template\": {\n \"mappings\": {\n \"_meta\": {\n \"version\": \"1.0.0\",\n \"catalog\": \"observability\",\n \"type\": \"logs\",\n \"component\": \"log\",\n \"correlations\": [\n {\n \"field\": \"spanId\",\n \"foreign-schema\": \"traces\",\n \"foreign-field\": \"spanId\"\n },\n {\n \"field\": \"traceId\",\n \"foreign-schema\": \"traces\",\n \"foreign-field\": \"traceId\"\n }\n ]\n },\n \"_source\": {\n \"enabled\": true\n },\n \"dynamic_templates\": [\n {\n \"instrumentation_scope_attributes_map\": {\n \"mapping\": {\n \"type\": \"keyword\"\n },\n \"path_match\": \"instrumentationScope.attributes.*\"\n }\n }\n ],\n \"properties\": {\n \"severity\": {\n \"properties\": {\n \"number\": {\n \"type\": \"long\"\n },\n \"text\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n }\n }\n }\n }\n },\n \"attributes\": {\n \"type\": \"object\",\n \"properties\": {\n \"data_stream\": {\n \"properties\": {\n \"dataset\": {\n \"ignore_above\": 128,\n \"type\": \"keyword\"\n },\n \"namespace\": {\n \"ignore_above\": 128,\n \"type\": \"keyword\"\n },\n \"type\": {\n \"ignore_above\": 56,\n \"type\": \"keyword\"\n }\n }\n }\n }\n },\n \"body\": {\n \"type\": \"text\"\n },\n \"@message\": {\n \"type\": \"alias\",\n \"path\": \"body\"\n },\n \"@timestamp\": {\n \"type\": \"date\"\n },\n \"observedTimestamp\": {\n \"type\": \"date\"\n },\n \"observerTime\": {\n \"type\": \"alias\",\n \"path\": \"observedTimestamp\"\n },\n \"traceId\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"spanId\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"schemaUrl\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n }\n }\n },\n \"instrumentationScope\": {\n \"properties\": {\n \"name\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 128\n }\n }\n },\n \"version\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n }\n }\n },\n \"dropped_attributes_count\": {\n \"type\": \"integer\"\n },\n \"schemaUrl\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n }\n }\n }\n }\n },\n \"event\": {\n \"properties\": {\n \"domain\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"name\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"source\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"category\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"type\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"kind\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"result\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"exception\": {\n \"properties\": {\n \"message\": {\n \"ignore_above\": 1024,\n \"type\": \"keyword\"\n },\n \"type\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"stacktrace\": {\n \"type\": \"text\"\n }\n }\n }\n }\n }\n }\n },\n \"settings\": {\n \"index\": {\n \"mapping\": {\n \"total_fields\": {\n \"limit\": 10000\n }\n },\n \"refresh_interval\": \"5s\"\n }\n },\n \"aliases\" : {\n \"otel-events\" : {}\n }\n },\n \"composed_of\": [],\n \"version\": 1\n}\n\n# Create the ss4o_metrics_template index template\n# >> add the \"data_stream\":{} line to apply for data-streams\nPUT _index_template/ss4o_metrics_template\n{\n \"index_patterns\": [\n \"ss4o_metrics-*-*\"\n ],\n \"template\": {\n \"mappings\": {\n \"_meta\": {\n \"version\": \"1.0.0\",\n \"catalog\": \"observability\",\n \"type\": \"metrics\",\n \"component\": \"metrics\",\n \"correlations\" : [\n {\n \"field\": \"spanId\",\n \"foreign-schema\" : \"traces\",\n \"foreign-field\" : \"spanId\"\n },\n {\n \"field\": \"traceId\",\n \"foreign-schema\" : \"traces\",\n \"foreign-field\" : \"traceId\"\n }\n ]\n },\n \"_source\": {\n \"enabled\": true\n },\n \"dynamic_templates\": [\n {\n \"exemplar_attributes_map\": {\n \"mapping\": {\n \"type\": \"keyword\"\n },\n \"path_match\": \"exemplar.attributes.*\"\n }\n },\n {\n \"instrumentation_scope_attributes_map\": {\n \"mapping\": {\n \"type\": \"keyword\"\n },\n \"path_match\": \"instrumentationScope.attributes.*\"\n }\n }\n ],\n \"properties\": {\n \"name\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n },\n \"attributes\": {\n \"type\": \"object\",\n \"properties\": {\n \"data_stream\": {\n \"properties\": {\n \"dataset\": {\n \"ignore_above\": 128,\n \"type\": \"keyword\"\n },\n \"namespace\": {\n \"ignore_above\": 128,\n \"type\": \"keyword\"\n },\n \"type\": {\n \"ignore_above\": 56,\n \"type\": \"keyword\"\n }\n }\n }\n }\n },\n \"description\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n }\n }\n },\n \"unit\": {\n \"type\": \"keyword\",\n \"ignore_above\": 128\n },\n \"kind\": {\n \"type\": \"keyword\",\n \"ignore_above\": 128\n },\n \"aggregationTemporality\": {\n \"type\": \"keyword\",\n \"ignore_above\": 128\n },\n \"monotonic\": {\n \"type\": \"boolean\"\n },\n \"startTime\": {\n \"type\": \"date\"\n },\n \"@timestamp\": {\n \"type\": \"date\"\n },\n \"observedTimestamp\": {\n \"type\": \"date_nanos\"\n },\n \"value@int\": {\n \"type\": \"integer\"\n },\n \"value@double\": {\n \"type\": \"double\"\n },\n \"buckets\": {\n \"type\" : \"nested\",\n \"properties\": {\n \"count\": {\n \"type\": \"long\"\n },\n \"sum\": {\n \"type\": \"double\"\n },\n \"max\": {\n \"type\": \"float\"\n },\n \"min\": {\n \"type\": \"float\"\n }\n }\n },\n \"bucketCount\": {\n \"type\": \"long\"\n },\n \"bucketCountsList\": {\n \"type\": \"long\"\n },\n \"explicitBoundsList\": {\n \"type\": \"float\"\n },\n \"explicitBoundsCount\": {\n \"type\": \"float\"\n },\n \"quantiles\": {\n \"properties\": {\n \"quantile\": {\n \"type\": \"double\"\n },\n \"value\": {\n \"type\": \"double\"\n }\n }\n },\n \"quantileValuesCount\": {\n \"type\": \"long\"\n },\n \"positiveBuckets\": {\n \"type\" : \"nested\",\n \"properties\": {\n \"count\": {\n \"type\": \"long\"\n },\n \"max\": {\n \"type\": \"float\"\n },\n \"min\": {\n \"type\": \"float\"\n }\n }\n },\n \"negativeBuckets\": {\n \"type\" : \"nested\",\n \"properties\": {\n \"count\": {\n \"type\": \"long\"\n },\n \"max\": {\n \"type\": \"float\"\n },\n \"min\": {\n \"type\": \"float\"\n }\n }\n },\n \"negativeOffset\": {\n \"type\": \"integer\"\n },\n \"positiveOffset\": {\n \"type\": \"integer\"\n },\n \"zeroCount\": {\n \"type\": \"long\"\n },\n \"scale\": {\n \"type\": \"long\"\n },\n \"max\": {\n \"type\": \"float\"\n },\n \"min\": {\n \"type\": \"float\"\n },\n \"sum\": {\n \"type\": \"float\"\n },\n \"count\": {\n \"type\": \"long\"\n },\n \"exemplar\": {\n \"properties\": {\n \"time\": {\n \"type\": \"date\"\n },\n \"traceId\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"spanId\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n }\n }\n },\n \"instrumentationScope\": {\n \"properties\": {\n \"name\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n },\n \"version\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n },\n \"droppedAttributesCount\": {\n \"type\": \"integer\"\n },\n \"schemaUrl\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n }\n }\n }\n }\n },\n \"schemaUrl\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n }\n }\n }\n }\n },\n \"aliases\" : {\n \"otel-metrics\" : {}\n },\n \"settings\": {\n \"index\": {\n \"mapping\": {\n \"total_fields\": {\n \"limit\": 10000\n }\n },\n \"refresh_interval\": \"5s\"\n }\n }\n },\n \"composed_of\": [],\n \"version\": 1,\n \"_meta\": {\n \"description\": \"Observability Metrics Mapping Template\",\n \"catalog\": \"observability\",\n \"type\": \"metrics\",\n \"correlations\" : [\n {\n \"field\": \"spanId\",\n \"foreign-schema\" : \"traces\",\n \"foreign-field\" : \"spanId\"\n },\n {\n \"field\": \"traceId\",\n \"foreign-schema\" : \"traces\",\n \"foreign-field\" : \"traceId\"\n }\n ]\n }\n}\n\n# Create the ss4o_services_template index template\n# >> add the \"data_stream\":{} line to apply for data-streams\nPUT _index_template/ss4o_services_template\n{\n \"index_patterns\": [\n \"ss4o_services-*-*\"\n ],\n \"template\": {\n \"mappings\": {\n \"_meta\": {\n \"version\": \"1.0.0\",\n \"catalog\": \"observability\",\n \"type\": \"traces\",\n \"component\": \"services\",\n \"correlations\": [\n {\n \"field\": \"traceGroupName\",\n \"foreign-schema\": \"traceGroups\",\n \"foreign-field\": \"traceGroup\"\n }\n ]\n },\n \"_source\": {\n \"enabled\": true\n },\n \"properties\": {\n \"destination\": {\n \"properties\": {\n \"domain\": {\n \"type\": \"keyword\",\n \"ignore_above\": 1024\n },\n \"resource\": {\n \"type\": \"keyword\",\n \"ignore_above\": 1024\n }\n }\n },\n \"hashId\": {\n \"type\": \"keyword\",\n \"ignore_above\": 1024\n },\n \"serviceName\": {\n \"type\": \"keyword\",\n \"ignore_above\": 1024\n },\n \"kind\": {\n \"type\": \"keyword\",\n \"ignore_above\": 1024\n },\n \"target\": {\n \"properties\": {\n \"domain\": {\n \"type\": \"keyword\",\n \"ignore_above\": 1024\n },\n \"resource\": {\n \"type\": \"keyword\",\n \"ignore_above\": 1024\n }\n }\n },\n \"traceGroupName\": {\n \"type\": \"keyword\",\n \"ignore_above\": 1024\n }\n }\n },\n \"aliases\" : {\n \"open otel-v1-apm-service-map\" : {}\n },\n \"settings\": {\n \"index\": {\n \"mapping\": {\n \"total_fields\": {\n \"limit\": 10000\n }\n },\n \"refresh_interval\": \"5s\"\n }\n }\n },\n \"composed_of\": [],\n \"version\": 1,\n \"_meta\": {\n \"description\": \"Simple Schema For Observability Service\",\n \"catalog\": \"observability\",\n \"type\": \"services\",\n \"correlations\": [\n {\n \"field\": \"traceGroupName\",\n \"foreign-schema\": \"traceGroups\",\n \"foreign-field\": \"traceGroup\"\n }\n ]\n }\n}\n"}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/data/ocsf-samples.json b/server/adaptors/integrations/__data__/repository/ocsf-security/data/ocsf-samples.json
new file mode 100644
index 0000000000..7a9e864415
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/data/ocsf-samples.json
@@ -0,0 +1,3 @@
+{
+ "key": "value"
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/info/dashboard.md b/server/adaptors/integrations/__data__/repository/ocsf-security/info/dashboard.md
new file mode 100644
index 0000000000..46c7684c04
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/info/dashboard.md
@@ -0,0 +1,76 @@
+# Dashboard
+OCSF & AES based security SIEM dashboards logs using the following dashboards:
+
+* [AWS Security Hub](#AWS-Security-Hub)
+* [AWS WAF](#AWS-WAF)
+* [AWS CloudHSM](#AWS-CloudHSM)
+* [Amazon GuardDuty](#Amazon-GuardDuty)
+* [AWS CloudTrail](#AWS-CloudTrail)
+* [Amazon CloudFront](#Amazon-CloudFront)
+* [AWS Client VPN](#AWS-Client-VPN)
+* [Amazon VPC Flow Logs](#Amazon-VPC-Flow-Logs)
+* [Amazon VPC Flow Logs Custom](#Amazon-VPC-Flow-Logs-Custom)
+* [Elastic Load Balancing](#Elastic-Load-Balancing)
+* [S3 Accesslog](#S3-Accesslog)
+* [Amazon Relational Database Service (RDS)](#Amazon-RDS)
+* [Amazon WorkSpaces](#Amazon-WorkSpaces)
+* [Amazon OpenSearch Service Metrics](#Amazon-OpenSearch-Service-Metrics)
+
+## AWS Security Hub
+
+
+
+## AWS WAF
+
+This dashboard was imported from [AWS WAF Dashboard](https://github.com/aws-samples/aws-waf-dashboard) and then was customized
+
+
+
+## AWS CloudHSM
+
+
+
+## Amazon GuardDuty
+
+
+
+## AWS CloudTrail
+
+
+
+## Amazon CloudFront
+
+
+
+## AWS Client VPN
+
+
+
+## Amazon VPC Flow Logs
+
+
+
+## Amazon VPC Flow Logs Custom
+
+
+
+## Elastic Load Balancing
+
+
+
+## S3 Accesslog
+
+
+
+## Amazon RDS
+
+
+
+## Amazon WorkSpaces
+
+
+
+## Amazon OpenSearch Service Metrics
+
+
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-awswaf.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-awswaf.jpg
new file mode 100644
index 0000000000..6a630677e9
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-awswaf.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-clientvpn.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-clientvpn.jpg
new file mode 100644
index 0000000000..6ef6f98bb5
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-clientvpn.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-cloudfront.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-cloudfront.jpg
new file mode 100644
index 0000000000..088638fe3a
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-cloudfront.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-cloudhsm.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-cloudhsm.jpg
new file mode 100644
index 0000000000..1378f6c361
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-cloudhsm.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-cloudtrail.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-cloudtrail.jpg
new file mode 100644
index 0000000000..720f7385dc
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-cloudtrail.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-elb.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-elb.jpg
new file mode 100644
index 0000000000..e2c4c30fec
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-elb.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-guardduty.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-guardduty.jpg
new file mode 100644
index 0000000000..fbbd7a37b0
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-guardduty.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-opensearch-metrics.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-opensearch-metrics.jpg
new file mode 100644
index 0000000000..8b13ab20f7
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-opensearch-metrics.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-rds.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-rds.jpg
new file mode 100644
index 0000000000..ab77ca295b
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-rds.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-s3accesslog.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-s3accesslog.jpg
new file mode 100644
index 0000000000..023acb8886
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-s3accesslog.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-sample.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-sample.jpg
new file mode 100644
index 0000000000..9ee8c53e24
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-sample.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-securityhub.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-securityhub.jpg
new file mode 100644
index 0000000000..2e36bf6704
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-securityhub.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-vpcflowlogs.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-vpcflowlogs.jpg
new file mode 100644
index 0000000000..c66e528fe4
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-vpcflowlogs.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-vpcflowlogscustom.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-vpcflowlogscustom.jpg
new file mode 100644
index 0000000000..ef209a85e7
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-vpcflowlogscustom.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-workspaces.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-workspaces.jpg
new file mode 100644
index 0000000000..c2e5fda944
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/info/img/dashboard-workspaces.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/ocsf-security-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/ocsf-security-1.0.0.json
new file mode 100644
index 0000000000..03cb695910
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/ocsf-security-1.0.0.json
@@ -0,0 +1,116 @@
+{
+ "name": "OCSF-Security",
+ "version": "1.0.0",
+ "displayName": "OCSF Security SIEM Services Dashboards",
+ "description": "OCSF & AES based security SIEM dashboards logs using the following dashboards",
+ "license": "Apache-2.0",
+ "type": "security",
+ "labels": [
+ "log",
+ "ocsf",
+ "aws",
+ "metrics"
+ ],
+ "author": "OpenSearch",
+ "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/ocsf-security/info",
+ "workflows": [
+ {
+ "name": "dashboards",
+ "label": "Dashboards & Visualizations",
+ "description": "Dashboards and indices that enable you to easily visualize important metrics.",
+ "enabled_by_default": false
+ }
+ ],
+ "statics": {
+ "logo": {
+ "annotation": "OCSF Logo",
+ "path": "logo.png"
+ },
+ "gallery": [
+ {
+ "annotation": "AWS WAF",
+ "path": "dashboard-awswaf.jpg"
+ },
+ {
+ "annotation": "AWS Client VPN",
+ "path": "dashboard-clientvpn.jpg"
+ },
+ {
+ "annotation": "AWS Cloud-Front",
+ "path": "dashboard-cloudfront.jpg"
+ },
+ {
+ "annotation": "AWS Cloud-HSM (hardware security modules)",
+ "path": "dashboard-cloudhsm.jpg"
+ },
+ {
+ "annotation": "AWS Cloud-Trail",
+ "path": "dashboard-cloudtrail.jpg"
+ },
+ {
+ "annotation": "AWS ELB (Elastic Load Balancer)",
+ "path": "dashboard-elb.jpg"
+ },
+ {
+ "annotation": "AWS Guard Duty",
+ "path": "dashboard-guardduty.jpg"
+ },
+ {
+ "annotation": "OpenSearch Metrics",
+ "path": "dashboard-opensearch-metrics.jpg"
+ },
+ {
+ "annotation": "AWS RDS (Relational DataStore)",
+ "path": "dashboard-rds.jpg"
+ },
+ {
+ "annotation": "AWS S3 Access Log",
+ "path": "dashboard-s3accesslog.jpg"
+ },
+ {
+ "annotation": "AWS Workspace",
+ "path": "dashboard-workspaces.jpg"
+ },
+ {
+ "annotation": "AWS Security Hub",
+ "path": "dashboard-securityhub.jpg"
+ },
+ {
+ "annotation": "AWS VPC Flow log",
+ "path": "dashboard-vpcflowlogs.jpg"
+ }
+ ]
+ },
+ "components": [
+ {
+ "name": "logs",
+ "version": "1.0.0"
+ },
+ {
+ "name": "metrics",
+ "version": "1.0.0"
+ },
+ {
+ "name": "services",
+ "version": "1.0.0"
+ },
+ {
+ "name": "traces",
+ "version": "1.0.0"
+ }
+ ],
+ "assets": [
+ {
+ "name": "dashboard",
+ "version": "1.0.0",
+ "extension": "ndjson",
+ "type": "savedObjectBundle",
+ "workflows": [
+ "dashboards"
+ ]
+ }
+ ],
+ "sampleData": {
+ "path": "ocsf-samples.json"
+ }
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws-config-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws-config-1.0.0.json
new file mode 100644
index 0000000000..dc2abdedfe
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws-config-1.0.0.json
@@ -0,0 +1,76 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws-config",
+ "labels": [
+ "aws",
+ "config"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "awsRegion": {"type": "keyword"},
+ "configuration.AWS:AWSComponent.Content": {"type": "nested", "properties": {
+ "InstalledTime": {"type": "date"}}},
+ "configuration.AWS:Application.Content": {"type": "nested", "properties": {
+ "InstalledTime": {"type": "date"}}},
+ "configuration.AWS:ComplianceItem.Content.Association": {"type": "nested", "properties": {
+ "InstalledTime": {"type": "date"}}},
+ "configuration.AWS:ComplianceItem.Content.Patch": {"type": "nested", "properties": {
+ "InstalledTime": {"type": "date"}}},
+ "configuration.AWS:Network.Content": {"type": "nested"},
+ "configuration.AWS:WindowsUpdate.Content": {"type": "nested", "properties": {
+ "InstalledTime": {"type": "date"}}},
+ "configuration.CreatedTimestamp": {"type": "date"},
+ "configuration.LastModifiedTimestamp": {"type": "date"},
+ "configuration.Owner": {"type": "keyword"},
+ "configuration.alarmConfigurationUpdatedTimestamp": {"type": "date"},
+ "configuration.billingModeSummary.lastUpdateToPayPerRequestDateTime": {"type": "date"},
+ "configuration.createTime": {"type": "date"},
+ "configuration.createdDate": {"type": "date"},
+ "configuration.createdTime": {"type": "date"},
+ "configuration.creationDate": {"type": "date"},
+ "configuration.creationDateTime": {"type": "date"},
+ "configuration.creationTime": {"type": "date"},
+ "configuration.creationTimestamp": {"type": "date"},
+ "configuration.clusterCreateTime": {"type": "date"},
+ "configuration.dateCreated": {"type": "date"},
+ "configuration.dateModified": {"type": "date"},
+ "configuration.dateUpdated": {"type": "date"},
+ "configuration.deleteTime": {"type": "date"},
+ "configuration.deletionDate": {"type": "date"},
+ "configuration.deletionTime": {"type": "date"},
+ "configuration.configRuleList": {"type": "nested"},
+ "configuration.lastUpdatedDate": {"type": "date"},
+ "configuration.lastUpdatedTime": {"type": "date"},
+ "configuration.metadata.created": {"type": "date"},
+ "configuration.provisionedThroughput.lastIncreaseDateTime": {"type": "date"},
+ "configuration.rules.statement": {"type": "text"},
+ "configuration.serviceSoftwareOptions.automatedUpdateDate": {"type": "date"},
+ "configuration.snapshotCreateTime": {"type": "date"},
+ "configuration.state": {"type": "keyword"},
+ "configuration.state_code": {"type": "keyword"},
+ "configurationStateId": {"type": "keyword"},
+ "newEvaluationResult.configRuleInvokedTime": {"type": "date"},
+ "newEvaluationResult.evaluationResultIdentifier.orderingTimestamp": {"type": "date"},
+ "newEvaluationResult.resultRecordedTime": {"type": "date"},
+ "notificationCreationTime": {"type": "date"},
+ "oldEvaluationResult.configRuleInvokedTime": {"type": "date"},
+ "oldEvaluationResult.evaluationResultIdentifier.orderingTimestamp": {"type": "date"},
+ "oldEvaluationResult.resultRecordedTime": {"type": "date"},
+ "supplementaryConfiguration.StackResourceSummaries": {"type": "nested", "properties": {
+ "lastUpdatedTimestamp": {"type": "date"}}},
+ "supplementaryConfiguration.BucketNotificationConfiguration.configurations": {"type": "nested"},
+ "supplementaryConfiguration.BucketReplicationConfiguration.rules": {"type": "nested"}
+ }
+ }
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_clientvpn-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_clientvpn-1.0.0.json
new file mode 100644
index 0000000000..8a076794c6
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_clientvpn-1.0.0.json
@@ -0,0 +1,40 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws_clientVPN",
+ "labels": ["aws", "clientVPN"]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "clientvpn.client-ip": {"type": "ip"},
+ "clientvpn.client-vpn-endpoint-id": {"type": "keyword"},
+ "clientvpn.common-name": {"type": "keyword"},
+ "clientvpn.connection-attempt-failure-reason": {"type": "keyword"},
+ "clientvpn.connection-attempt-status": {"type": "keyword"},
+ "clientvpn.connection-duration-seconds": {"type": "keyword"},
+ "clientvpn.connection-end-time": {"type": "date"},
+ "clientvpn.connection-id": {"type": "keyword"},
+ "clientvpn.connection-last-update-time": {"type": "date"},
+ "clientvpn.connection-log-type": {"type": "keyword"},
+ "clientvpn.connection-reset-status": {"type": "keyword"},
+ "clientvpn.connection-start-time": {"type": "date"},
+ "clientvpn.device-ip": {"type": "ip"},
+ "clientvpn.device-type": {"type": "keyword"},
+ "clientvpn.egress-bytes": {"type": "long"},
+ "clientvpn.egress-packets": {"type": "long"},
+ "clientvpn.ingress-bytes": {"type": "long"},
+ "clientvpn.ingress-packets": {"type": "long"},
+ "clientvpn.port": {"type": "long"},
+ "clientvpn.transport-protocol": {"type": "keyword"},
+ "clientvpn.username": {"type": "keyword"}
+ }
+ }
+ }
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_cloudfront-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_cloudfront-1.0.0.json
new file mode 100644
index 0000000000..d9ff3a0a82
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_cloudfront-1.0.0.json
@@ -0,0 +1,32 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws_cloudfront",
+ "labels": ["aws", "cloudfront"]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "c_ip": {"type": "ip"},
+ "c_port": {"type": "integer"},
+ "cs_bytes": {"type": "long"},
+ "cs_headers_count": {"type": "short"},
+ "date_time": {"type": "date"},
+ "sc-range-end": {"type": "long"},
+ "sc-range-start": {"type": "long"},
+ "sc_bytes": {"type": "long"},
+ "sc_content_len": {"type": "long"},
+ "sc_status": {"type": "keyword"},
+ "time_taken": {"type": "half_float"},
+ "time_to_first_byte": {"type": "half_float"},
+ "timestamp": {"type": "date", "format": "epoch_second"}
+ }
+ }
+ }
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_cloudhsm-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_cloudhsm-1.0.0.json
new file mode 100644
index 0000000000..06699e24a1
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_cloudhsm-1.0.0.json
@@ -0,0 +1,80 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws_cloudhsm",
+ "labels": [
+ "aws",
+ "cloudhsm"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings": {
+ "properties": {
+ "cloudhsm.command_type_hex": {
+ "type": "keyword"
+ },
+ "cloudhsm.key_handle": {
+ "type": "keyword"
+ },
+ "cloudhsm.host_time": {
+ "type": "date_nanos",
+ "format": "MM/dd/yy HH:mm:ss.SSSSSS||strict_date_optional_time_nanos"
+ },
+ "cloudhsm.host_time_usec": {
+ "type": "long"
+ },
+ "cloudhsm.local_time": {
+ "type": "date_nanos",
+ "format": "MM/dd/yy HH:mm:ss.SSSSSS||strict_date_optional_time_nanos"
+ },
+ "cloudhsm.local_time_usec": {
+ "type": "long"
+ },
+ "cloudhsm.log_type_code": {
+ "type": "keyword"
+ },
+ "cloudhsm.opcode_hex": {
+ "type": "keyword"
+ },
+ "cloudhsm.priv_secret_key_handle": {
+ "type": "keyword"
+ },
+ "cloudhsm.propagation_delay": {
+ "type": "long"
+ },
+ "cloudhsm.public_key_handle": {
+ "type": "keyword"
+ },
+ "cloudhsm.reboot_counter": {
+ "type": "long"
+ },
+ "cloudhsm.response": {
+ "type": "keyword"
+ },
+ "cloudhsm.sequence_no": {
+ "type": "long"
+ },
+ "cloudhsm.session_handle": {
+ "type": "keyword"
+ },
+ "cloudhsm.timestamp": {
+ "type": "date_nanos",
+ "format": "MM/dd/yy HH:mm:ss.SSSSSS||strict_date_optional_time_nanos"
+ },
+ "cloudhsm.timestamp_usec": {
+ "type": "long"
+ },
+ "cloudhsm.unknown_field_value": {
+ "type": "keyword"
+ }
+ }
+ }
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_cloudtrail-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_cloudtrail-1.0.0.json
new file mode 100644
index 0000000000..e6d3414452
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_cloudtrail-1.0.0.json
@@ -0,0 +1,108 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws_cloudtrail",
+ "labels": [
+ "aws",
+ "cloudtrail"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "additionalEventData.bytesTransferredIn": {"type": "float"},
+ "additionalEventData.bytesTransferredOut": {"type": "float"},
+ "additionalEventData.vpcEndpointId": {"type": "keyword"},
+ "awsRegion": {"type": "keyword"},
+ "errorCode": {"type": "keyword"},
+ "eventID": {"type": "keyword"},
+ "requestParameters.CreateFleetRequest.TagSpecification.Tag.Value": {"type": "keyword"},
+ "requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.TagSpecification.Tag.Value": {"type": "keyword"},
+ "requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.TagSpecification.Tag.Value": {"type": "keyword"},
+ "requestParameters.CreateSnapshotsRequest.TagSpecification.Tag.Value": {"type": "keyword"},
+ "requestParameters.CreateVpcEndpointRequest.TagSpecification.Tag.Value": {"type": "keyword"},
+ "requestParameters.DescribeFlowLogsRequest": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateVersion.content": {"type": "keyword"},
+ "requestParameters.FilterValues": {"type": "keyword"},
+ "requestParameters.MaxResults": {"type": "integer"},
+ "requestParameters.NotificationConfiguration.QueueConfiguration.Id": {"type": "keyword"},
+ "requestParameters.ReplicationConfiguration.Rule.Destination.Account": {"type": "keyword"},
+ "requestParameters.ReplicationConfiguration.Rule.Filter": {"type": "keyword"},
+ "requestParameters.Tagging.TagSet.Tag.Value": {"type": "keyword"},
+ "requestParameters.accountIds": {"type": "keyword"},
+ "requestParameters.attribute": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "requestParameters.authParameters": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "requestParameters.bucketPolicy.Statement": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "requestParameters.configuration.text": {"type": "text"},
+ "requestParameters.containerOverrides.environment.value": {"type": "keyword"},
+ "requestParameters.content": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "requestParameters.disableApiStop": {"type": "boolean"},
+ "requestParameters.disableApiTermination": {"type": "boolean"},
+ "requestParameters.description": {"type": "keyword"},
+ "requestParameters.ebsOptimized": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "requestParameters.endTime": {"type": "date", "format": "MMM d, yyyy h:mm:ss a||epoch_millis"},
+ "requestParameters.filter": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "requestParameters.groupDescription": {"type": "keyword"},
+ "requestParameters.iamInstanceProfile": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "requestParameters.imageId": {"type": "keyword"},
+ "requestParameters.instanceType": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "requestParameters.logStreamNamePrefix": {"type": "keyword"},
+ "requestParameters.maxItems": {"type": "integer"},
+ "requestParameters.maxResults": {"type": "integer"},
+ "requestParameters.metrics": {"type": "keyword"},
+ "requestParameters.overrides.containerOverrides.environment.value": {"type": "keyword"},
+ "requestParameters.parameters": {"type": "object"},
+ "requestParameters.partitionInputList": {"type": "text"},
+ "requestParameters.principal": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "requestParameters.result": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "requestParameters.searchExpression.subExpressions.subExpressions.filters.value": {"type": "keyword"},
+ "requestParameters.size": {"type": "integer"},
+ "requestParameters.sort": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "requestParameters.sortBy": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "requestParameters.source": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "requestParameters.startTime": {"type": "date", "format": "MMM d, yyyy h:mm:ss a||epoch_millis"},
+ "requestParameters.status": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "requestParameters.subnets": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "requestParameters.tableInput.parameters": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "requestParameters.tagSpecificationSet.items.tags.value": {"type": "keyword"},
+ "requestParameters.tags.value": {"type": "keyword"},
+ "requestParameters.target": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "requestParameters.value": {"type": "keyword"},
+ "requestParameters.vpc": {"type": "keyword"},
+ "responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateData.tagSpecificationSet.item.tagSet.item.value": {"type": "keyword"},
+ "responseElements.CreateSnapshotsResponse.snapshotSet.item.tagSet.item.value": {"type": "keyword"},
+ "responseElements.CreateVpcEndpointResponse.vpcEndpoint.tagSet.item.value": {"type": "keyword"},
+ "responseElements.availabilityZones": {"type": "keyword"},
+ "responseElements.createTime": {"type": "date", "format": "epoch_millis||MMM d, yyyy h:mm:ss a"},
+ "responseElements.createdDate": {"type": "date", "format": "strict_date_optional_time||MMM d, yyyy h:mm:ss a"},
+ "responseElements.dBSubnetGroup": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "responseElements.data": {"type": "keyword"},
+ "responseElements.description": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "responseElements.endpoint": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "responseElements.errors.partitionValues": {"type": "keyword"},
+ "responseElements.imageId": {"type": "keyword"},
+ "responseElements.lastModified": {"type": "date", "format": "strict_date_optional_time||MMM d, yyyy h:mm:ss a"},
+ "responseElements.lastUpdatedDate": {"type": "date", "format": "strict_date_optional_time||MMM d, yyyy h:mm:ss a"},
+ "responseElements.multiAZ": {"type": "keyword"},
+ "responseElements.networkInterface.tagSet.items.value": {"type": "keyword"},
+ "responseElements.policy.value": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "responseElements.responseParameters.method.response.header.Access-Control-Allow-Headers": {"type": "keyword"},
+ "responseElements.responseParameters.method.response.header.Access-Control-Allow-Methods": {"type": "keyword"},
+ "responseElements.responseParameters.method.response.header.Access-Control-Allow-Origin": {"type": "keyword"},
+ "responseElements.role": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "responseElements.subnets": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "responseElements.tasks.overrides.containerOverrides.environment.value": {"type": "keyword"},
+ "responseElements.version": {"type": "keyword"},
+ "serviceEventDetails.eventRequestDetails": {"type": "keyword", "fields": {"text": {"type": "text"}}}
+ }
+ }
+ }
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_elasticache-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_elasticache-1.0.0.json
new file mode 100644
index 0000000000..526f9993f0
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_elasticache-1.0.0.json
@@ -0,0 +1,31 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws_elasticache",
+ "labels": [
+ "aws",
+ "elasticache"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "elasticache.CacheClusterId": {"type": "keyword"},
+ "elasticache.CacheNodeId": {"type": "keyword"},
+ "elasticache.Id": {"type": "keyword"},
+ "elasticache.Timestamp": {"type": "date", "format": "epoch_second"},
+ "elasticache.Duration_us": {"type": "long"},
+ "elasticache.Command": {"type": "keyword"},
+ "elasticache.ClientAddress": {"type": "keyword"},
+ "elasticache.ClientName": {"type": "keyword"}
+ }
+ }
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_elb-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_elb-1.0.0.json
new file mode 100644
index 0000000000..85fd621a02
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_elb-1.0.0.json
@@ -0,0 +1,46 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws_elb",
+ "labels": [
+ "aws",
+ "elb"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "backend_ip": {"type": "ip"},
+ "backend_port": {"type": "integer"},
+ "backend_processing_time": {"type": "half_float"},
+ "backend_status_code": {"type": "short"},
+ "client_ip": {"type": "ip"},
+ "client_port": {"type": "integer"},
+ "connection_time": {"type": "integer"},
+ "destination_ip": {"type": "ip"},
+ "destination_port": {"type": "integer"},
+ "elb_status_code": {"type": "short"},
+ "http_port": {"type": "integer"},
+ "http_version": {"type": "keyword"},
+ "matched_rule_priority": {"type": "integer"},
+ "received_bytes": {"type": "integer"},
+ "request_creation_time": {"type": "date"},
+ "request_processing_time": {"type": "half_float"},
+ "response_processing_time": {"type": "half_float"},
+ "sent_bytes": {"type": "integer"},
+ "target_ip": {"type": "ip"},
+ "target_port": {"type": "integer"},
+ "target_processing_time": {"type": "half_float"},
+ "target_status_code": {"type": "short"},
+ "timestamp": {"type": "date"}
+ }
+ }
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_guardduty-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_guardduty-1.0.0.json
new file mode 100644
index 0000000000..558f24136a
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_guardduty-1.0.0.json
@@ -0,0 +1,54 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws_guardduty",
+ "labels": [
+ "aws",
+ "guardduty"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings": {
+ "properties": {
+ "description": {"type": "text"},
+ "resource.instanceDetails.launchTime": {"type": "date"},
+ "resource.instanceDetails.networkInterfaces.privateIpAddress": {"type": "ip"},
+ "resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress": {"type": "ip"},
+ "resource.instanceDetails.networkInterfaces.publicIp": {"type": "ip"},
+ "service.action.awsApiCallAction.remoteIpDetails.geoLocation": {"type": "geo_point"},
+ "service.action.awsApiCallAction.remoteIpDetails.ipAddressV4": {"type": "ip"},
+ "service.action.awsApiCallAction.remoteIpDetails.ipAddressV6": {"type": "ip"},
+ "service.action.awsApiCallAction.remoteIpDetails.organization.asn": {"type": "integer"},
+ "service.action.networkConnectionAction.localIpDetails.ipAddressV4": {"type": "ip"},
+ "service.action.networkConnectionAction.localPortDetails.port": {"type": "integer"},
+ "service.action.networkConnectionAction.remoteIpDetails.geoLocation": {"type": "geo_point"},
+ "service.action.networkConnectionAction.remoteIpDetails.ipAddressV4": {"type": "ip"},
+ "service.action.networkConnectionAction.remoteIpDetails.organization.asn": {"type": "integer"},
+ "service.action.portProbeAction.portProbeDetails.localIpDetails.ipAddressV4": {"type": "ip"},
+ "service.action.portProbeAction.portProbeDetails.remoteIpDetails.geoLocation": {"type": "geo_point"},
+ "service.action.portProbeAction.portProbeDetails.remoteIpDetails.ipAddressV4": {"type": "ip"},
+ "service.additionalInfo.apiCalls.firstSeen": {"type": "date"},
+ "service.additionalInfo.apiCalls.lastSeen": {"type": "date"},
+ "service.additionalInfo.inBytes": {"type": "long"},
+ "service.additionalInfo.localPort": {"type": "integer"},
+ "service.additionalInfo.newPolicy.maxPasswordAge": {"type": "short"},
+ "service.additionalInfo.newPolicy.minimumPasswordLength": {"type": "short"},
+ "service.additionalInfo.newPolicy.passwordReusePrevention": {"type": "short"},
+ "service.additionalInfo.oldPolicy.maxPasswordAge": {"type": "short"},
+ "service.additionalInfo.oldPolicy.minimumPasswordLength": {"type": "short"},
+ "service.additionalInfo.oldPolicy.passwordReusePrevention": {"type": "short"},
+ "service.additionalInfo.outBytes": {"type": "long"},
+ "service.additionalInfo.recentCredentials.ipAddressV4": {"type": "ip"},
+ "service.additionalInfo.unusual": {"type": "text"}
+ }
+ }
+
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_inspector-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_inspector-1.0.0.json
new file mode 100644
index 0000000000..0e39af5ba8
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_inspector-1.0.0.json
@@ -0,0 +1,34 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws_inspector",
+ "labels": [
+ "aws",
+ "inspector"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "inspector.awsAccountId": {"type": "keyword"},
+ "inspector.firstObservedAt": {"type": "date"},
+ "inspector.inspectorScore": {"type": "float"},
+ "inspector.inspectorScoreDetails.adjustedCvss.score": {"type": "float"},
+ "inspector.inspectorScoreDetails.adjustedCvss.version": {"type": "keyword"},
+ "inspector.lastObservedAt": {"type": "date"},
+ "inspector.packageVulnerabilityDetails.cvss": {"type": "nested", "properties": {
+ "baseScore": {"type": "float"},
+ "version": {"type": "keyword"}}},
+ "inspector.packageVulnerabilityDetails.vulnerablePackages": {"type": "nested"},
+ "inspector.updatedAt": {"type": "date"}
+ }
+ }
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_msk-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_msk-1.0.0.json
new file mode 100644
index 0000000000..c274235d95
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_msk-1.0.0.json
@@ -0,0 +1,28 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws_msk",
+ "labels": [
+ "aws",
+ "msk"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "msk.broker_id": {"type": "keyword"},
+ "msk.max_lag": {"type": "long"},
+ "msk.message": {"type": "text"},
+ "msk.sum_lag": {"type": "long"},
+ "msk.time_lag": {"type": "long"}
+ }
+ }
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_networkfirewall-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_networkfirewall-1.0.0.json
new file mode 100644
index 0000000000..171c099e91
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_networkfirewall-1.0.0.json
@@ -0,0 +1,36 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws_networkfirewall",
+ "labels": [
+ "aws",
+ "networkfirewall"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "event.alert.rev": {"type": "keyword"},
+ "event.alert.severity": {"type": "long"},
+ "event.alert.signature_id": {"type": "keyword"},
+ "event.dest_ip": {"type": "ip"},
+ "event.dest_port": {"type": "long"},
+ "event.http.length": {"type": "long"},
+ "event.netflow.bytes": {"type": "long"},
+ "event.netflow.max_ttl": {"type": "long"},
+ "event.netflow.min_ttl": {"type": "long"},
+ "event.netflow.pkts": {"type": "long"},
+ "event.src_ip": {"type": "ip"},
+ "event.src_port": {"type": "long"},
+ "event.tcp.tcp_flag": {"type": "keyword"}
+ }
+ }
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_opensearch-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_opensearch-1.0.0.json
new file mode 100644
index 0000000000..dd63fa6072
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_opensearch-1.0.0.json
@@ -0,0 +1,29 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws_opensearch",
+ "labels": [
+ "aws",
+ "opensearch"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "opensearch.audit_format_version": {"type": "keyword"},
+ "opensearch.audit_request_body": {"type": "text"},
+ "opensearch.audit_request_remote_address": {"type": "ip"},
+ "opensearch.audit_trace_shard_id": {"type": "keyword"},
+ "opensearch.timestamp": {"type": "date"}
+ }
+ }
+
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_r53resolver-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_r53resolver-1.0.0.json
new file mode 100644
index 0000000000..6ac392734c
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_r53resolver-1.0.0.json
@@ -0,0 +1,28 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws_r53resolver",
+ "labels": [
+ "aws",
+ "r53resolver"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "answers": {"type": "object"},
+ "query_timestamp": {"type": "date"},
+ "srcaddr": {"type": "ip"},
+ "srcport": {"type": "integer"},
+ "version": {"type": "keyword"}
+ }
+ }
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_rds-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_rds-1.0.0.json
new file mode 100644
index 0000000000..2d8aea3cea
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_rds-1.0.0.json
@@ -0,0 +1,47 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws_rds",
+ "labels": [
+ "aws",
+ "rds"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "mysql.lock_time": {"type": "float"},
+ "mysql.message": {"type": "text"},
+ "mysql.object": {"type": "keyword"},
+ "mysql.query": {"type": "text"},
+ "mysql.query_id": {"type": "long"},
+ "mysql.query_time": {"type": "float"},
+ "mysql.retcode": {"type": "keyword"},
+ "mysql.source_ip": {"type": "ip"},
+ "mysql.thread_id": {"type": "long"},
+ "mysql.timestamp": {"type": "date", "format": "date_optional_time||uMMdd [ ]H:m:s||epoch_second||u-MM-dd [ ]H:m:s"},
+ "postgresql.duration_ms": {"type": "float"},
+ "postgresql.message": {"type": "text"},
+ "postgresql.pid": {"type": "integer"},
+ "postgresql.query": {"type": "text"},
+ "postgresql.session_time_seconds": {"type": "float"},
+ "postgresql.source_port": {"type": "integer"},
+ "postgresql.thread_id": {"type": "integer"},
+ "postgresql.timestamp": {"type": "date"},
+ "rds.cluster_identifier": {"type": "keyword"},
+ "rds.database_name": {"type": "keyword"},
+ "rds.instance_identifier": {"type": "keyword"},
+ "rds.message": {"type": "text"},
+ "rds.query": {"type": "text"},
+ "rds.query_time": {"type": "float"}
+ }
+ }
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_s3accesslog-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_s3accesslog-1.0.0.json
new file mode 100644
index 0000000000..bb628f905c
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_s3accesslog-1.0.0.json
@@ -0,0 +1,31 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws_s3accesslog",
+ "labels": [
+ "aws",
+ "s3accesslog"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "BytesSent": {"type": "integer"},
+ "HTTPstatus": {"type": "short"},
+ "ObjectSize": {"type": "integer"},
+ "RemoteIP": {"type": "ip"},
+ "RequestDateTime": {"type": "date", "format": "dd/MMM/yyyy:HH:mm:ss a"},
+ "TotalTime": {"type": "integer"},
+ "TurnAroundTime": {"type": "integer"}
+ }
+ }
+
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_securityhub-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_securityhub-1.0.0.json
new file mode 100644
index 0000000000..7eba13ac9f
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_securityhub-1.0.0.json
@@ -0,0 +1,29 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws_securityhub",
+ "labels": [
+ "aws",
+ "securityhub"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "ProductFields.aws/inspector/inspectorScore": {"type": "float"},
+ "ProductFields.aws/inspector/ProductVersion": {"type": "keyword"},
+ "Vulnerabilities.Cvss.BaseScore": {"type": "float"},
+ "Vulnerabilities.VulnerablePackages.Epoch": {"type": "date", "format": "epoch_second"},
+ "Vulnerabilities.VulnerablePackages.Release": {"type": "keyword"},
+ "Vulnerabilities.VulnerablePackages.Version": {"type": "keyword"}
+ }
+ }
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_trustedadvisor-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_trustedadvisor-1.0.0.json
new file mode 100644
index 0000000000..d240bb98c7
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_trustedadvisor-1.0.0.json
@@ -0,0 +1,58 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws_trustedadvisor",
+ "labels": [
+ "aws",
+ "trustedadvisor"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "trustedadvisor.check.id": {"type": "keyword"},
+ "trustedadvisor.check.name": {"type": "keyword"},
+ "trustedadvisor.check.description": {"type": "text"},
+ "trustedadvisor.check.category": {"type": "keyword"},
+ "trustedadvisor.check.metadata": {"type": "keyword"},
+ "trustedadvisor.check_ja.id": {"type": "keyword"},
+ "trustedadvisor.check_ja.name": {"type": "keyword"},
+ "trustedadvisor.check_ja.description": {"type": "text"},
+ "trustedadvisor.check_ja.category": {"type": "keyword"},
+ "trustedadvisor.check_ja.metadata": {"type": "keyword"},
+ "trustedadvisor.creation_date": {"type": "date"},
+ "trustedadvisor.refreshable": {"type": "boolean"},
+ "trustedadvisor.requestid": {"type": "keyword"},
+ "trustedadvisor.result.checkId": {"type": "keyword"},
+ "trustedadvisor.result.flaggedResource.isSuppressed": {"type": "boolean"},
+ "trustedadvisor.result.flaggedResource.metadata": {"type": "keyword"},
+ "trustedadvisor.result.flaggedResource.number": {"type": "integer"},
+ "trustedadvisor.result.flaggedResource.region": {"type": "keyword"},
+ "trustedadvisor.result.flaggedResource.resourceId": {"type": "keyword"},
+ "trustedadvisor.result.flaggedResource.status": {"type": "keyword"},
+ "trustedadvisor.result.flaggedResources.isSuppressed": {"type": "boolean"},
+ "trustedadvisor.result.flaggedResources.metadata": {"type": "keyword"},
+ "trustedadvisor.result.flaggedResources.number": {"type": "integer"},
+ "trustedadvisor.result.flaggedResources.region": {"type": "keyword"},
+ "trustedadvisor.result.flaggedResources.resourceId": {"type": "keyword"},
+ "trustedadvisor.result.flaggedResources.status": {"type": "keyword"},
+ "trustedadvisor.result.resourcesSummary.resourcesFlagged": {"type": "long"},
+ "trustedadvisor.result.resourcesSummary.resourcesIgnored": {"type": "long"},
+ "trustedadvisor.result.resourcesSummary.resourcesProcessed": {"type": "long"},
+ "trustedadvisor.result.resourcesSummary.resourcesSuppressed": {"type": "long"},
+ "trustedadvisor.result.status": {"type": "keyword"},
+ "trustedadvisor.result.timestamp": {"type": "date"},
+ "trustedadvisor.result.categorySpecificSummary.costOptimizing.estimatedMonthlySavings": {"type": "float"},
+ "trustedadvisor.result.categorySpecificSummary.costOptimizing.estimatedPercentMonthlySavings": {"type": "float"}
+ }
+ }
+
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_vpcflowlogs-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_vpcflowlogs-1.0.0.json
new file mode 100644
index 0000000000..ee11fe6225
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_vpcflowlogs-1.0.0.json
@@ -0,0 +1,49 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws_vpcflowlogs",
+ "labels": [
+ "aws",
+ "vpcflowlogs"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "account_id": {"type": "keyword"},
+ "action": {"type": "keyword"},
+ "bytes": {"type": "integer"},
+ "dstaddr": {"type": "ip"},
+ "dstport": {"type": "integer"},
+ "end": {"type": "date", "format": "epoch_second"},
+ "instance_id": {"type": "keyword"},
+ "interface_id": {"type": "keyword"},
+ "log_status": {"type": "keyword"},
+ "packets": {"type": "integer"},
+ "packets_lost_no_route": {"type": "long"},
+ "packets_lost_blackhole": {"type": "long"},
+ "packets_lost_mtu_exceeded": {"type": "long"},
+ "packets_lost_ttl_expired": {"type": "long"},
+ "protocol": {"type": "short"},
+ "srcaddr": {"type": "ip"},
+ "srcport": {"type": "integer"},
+ "start": {"type": "date", "format": "epoch_second"},
+ "subnet_id": {"type": "keyword"},
+ "tcp_flags": {"type": "byte"},
+ "tgw_src_vpc_account_id": {"type": "keyword"},
+ "tgw_dst_vpc_account_id": {"type": "keyword"},
+ "traffic_path": {"type": "keyword"},
+ "version": {"type": "keyword"},
+ "vpc_id": {"type": "keyword"}
+ }
+ }
+
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_waf-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_waf-1.0.0.json
new file mode 100644
index 0000000000..c693da6ee4
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_waf-1.0.0.json
@@ -0,0 +1,33 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws_waf",
+ "labels": [
+ "aws",
+ "waf"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "formatVersion": {"type": "keyword"},
+ "httpRequest.clientIp": {"type": "ip"},
+ "httpRequest.header.cache_control": {"type": "keyword"},
+ "httpRequest.header.content_length": {"type": "keyword"},
+ "httpRequest.header.dnt": {"type": "keyword"},
+ "httpRequest.header.host": {"type": "keyword"},
+ "httpRequest.header.upgrade_insecure_requests": {"type": "keyword"},
+ "httpRequest.header.user_agent": {"type": "keyword"},
+ "timestamp": {"type": "date", "format": "epoch_millis"}
+ }
+ }
+
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_workspace-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_workspace-1.0.0.json
new file mode 100644
index 0000000000..d127cd2837
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/aws_workspace-1.0.0.json
@@ -0,0 +1,27 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "aws_workspace",
+ "labels": [
+ "aws",
+ "workspace"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "ConnectionStateCheckTimestamp": {"type": "date"},
+ "LastKnownUserConnectionTimestamp": {"type": "date"},
+ "clientIpAddress": {"type": "ip"},
+ "loginTime": {"type": "date"}
+ }
+ }
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/log-ecs-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/log-ecs-1.0.0.mapping.json
new file mode 100644
index 0000000000..ba759ac3c9
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/log-ecs-1.0.0.mapping.json
@@ -0,0 +1,268 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "ecs",
+ "labels": ["ecs"]
+ },
+ "settings": {
+ "refresh_interval" : "2s",
+ "index.mapping.ignore_malformed": true,
+ "index.max_docvalue_fields_search": 200,
+ "number_of_shards": 3
+ },
+ "mappings": {
+ "dynamic_templates": [{
+ "strings": {
+ "match_mapping_type": "string",
+ "mapping": {"type": "keyword"}
+ }
+ }],
+ "properties": {
+ "@timestamp": {"type": "date"},
+ "@message": {"type": "text"},
+ "cwl_timestamp": {"type": "date", "format": "epoch_millis"},
+ "cwe_timestamp": {"type": "date"},
+ "base": {"type": "object"},
+ "base.tags": {"type": "keyword"},
+ "base.labels": {"type": "object"},
+ "agent": {"type": "object"},
+ "as": {"type": "object"},
+ "client": {"type": "object"},
+ "cloud": {"type": "object"},
+ "code_signature": {"type": "object"},
+ "container": {"type": "object"},
+ "container.image.tag": {"type": "keyword"},
+ "container.labels": {"type": "object"},
+ "data_stream": {"type": "object"},
+ "destination": {"type": "object"},
+ "destination.as.number": {"type": "integer"},
+ "destination.as.organization.name": {"type": "keyword"},
+ "destination.bytes": {"type": "long"},
+ "destination.geo.city_name": {"type": "keyword"},
+ "destination.geo.country_iso_code": {"type": "keyword"},
+ "destination.geo.country_name": {"type": "keyword"},
+ "destination.geo.location": {"type": "geo_point"},
+ "destination.ip": {"type": "ip"},
+ "destination.nat.ip": {"type": "ip"},
+ "destination.nat.port": {"type": "integer"},
+ "destination.packets": {"type": "long"},
+ "destination.port": {"type": "integer"},
+ "dll": {"type": "object"},
+ "dns": {"type": "object"},
+ "dns.answers": {"type": "object"},
+ "dns.answers.ttl": {"type": "long"},
+ "dns.id": {"type": "keyword"},
+ "dns.header_flags": {"type": "keyword"},
+ "dns.resolved_ip": {"type": "ip"},
+ "ecs": {"type": "object"},
+ "elf": {"type": "object"},
+ "error": {"type": "object"},
+ "error.message": {"type": "text"},
+ "event": {"type": "object"},
+ "event.category": {"type": "keyword"},
+ "event.code": {"type": "keyword"},
+ "event.created": {"type": "date"},
+ "event.duration": {"type": "long"},
+ "event.end": {"type": "date"},
+ "event.id": {"type": "keyword"},
+ "event.ingested": {"type": "date"},
+ "event.kind": {"type": "keyword"},
+ "event.outcome": {"type": "keyword"},
+ "event.risk_score": {"type": "float"},
+ "event.risk_score_norm": {"type": "float"},
+ "event.sequence": {"type": "long"},
+ "event.severity": {"type": "long"},
+ "event.start": {"type": "date"},
+ "event.timezone": {"type": "keyword"},
+ "event.type": {"type": "keyword"},
+ "file": {"type": "object"},
+ "file.accessed": {"type": "date"},
+ "file.attributes": {"type": "keyword"},
+ "file.created": {"type": "date"},
+ "file.ctime": {"type": "date"},
+ "file.gid": {"type": "keyword"},
+ "file.inode": {"type": "keyword"},
+ "file.mode": {"type": "keyword"},
+ "file.mtime": {"type": "date"},
+ "file.size": {"type": "long"},
+ "file.uid": {"type": "keyword"},
+ "geo": {"type": "object"},
+ "group": {"type": "object"},
+ "group.id": {"type": "keyword"},
+ "hash": {"type": "object"},
+ "host": {"type": "object"},
+ "host.disk.read.bytes": {"type": "long"},
+ "host.disk.write.bytes": {"type": "long"},
+ "host.hostname": {"type": "keyword"},
+ "host.id": {"type": "keyword"},
+ "host.ip": {"type": "ip"},
+ "host.mac": {"type": "keyword"},
+ "host.network.egress.bytes": {"type": "long"},
+ "host.network.egress.packets": {"type": "long"},
+ "host.network.ingress.bytes": {"type": "long"},
+ "host.network.ingress.packets": {"type": "long"},
+ "host.uptime": {"type": "long"},
+ "http": {"type": "object"},
+ "http.request.body.bytes": {"type": "long"},
+ "http.request.body.content": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "http.request.bytes": {"type": "long"},
+ "http.response.body.bytes": {"type": "long"},
+ "http.response.body.content": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "http.response.bytes": {"type": "long"},
+ "http.response.status_code": {"type": "short"},
+ "http.version": {"type": "keyword"},
+ "interface": {"type": "object"},
+ "interface.alias": {"type": "keyword"},
+ "interface.id": {"type": "keyword"},
+ "interface.name": {"type": "keyword"},
+ "log": {"type": "object"},
+ "log.level": {"type": "keyword"},
+ "log.origin.file.line": {"type": "long"},
+ "log.syslog": {"type": "object"},
+ "log.syslog.facility.code": {"type": "long"},
+ "log.syslog.priority": {"type": "long"},
+ "log.syslog.severity.code": {"type": "long"},
+ "network": {"type": "object"},
+ "network.bytes": {"type": "integer"},
+ "network.community_id": {"type": "keyword"},
+ "network.forwarded_ip": {"type": "ip"},
+ "network.iana_number": {"type": "short"},
+ "network.inner": {"type": "object"},
+ "network.packets": {"type": "long"},
+ "observer": {"type": "object"},
+ "observer.ip": {"type": "ip"},
+ "observer.mac": {"type": "keyword"},
+ "observer.serial_number": {"type": "keyword"},
+ "observer.version": {"type": "keyword"},
+ "orchestrator": {"type": "object"},
+ "organization": {"type": "object"},
+ "organization.id": {"type": "keyword"},
+ "os": {"type": "object"},
+ "os.family": {"type": "keyword"},
+ "os.full": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "os.kernel": {"type": "keyword"},
+ "os.name": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "os.platform": {"type": "keyword"},
+ "os.type": {"type": "keyword"},
+ "os.version": {"type": "keyword"},
+ "package": {"type": "object"},
+ "pe": {"type": "object"},
+ "process": {"type": "object"},
+ "process.args": {"type": "keyword"},
+ "process.args_count": {"type": "long"},
+ "process.command_line": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "process.entity_id": {"type": "keyword"},
+ "process.exit_code": {"type": "long"},
+ "process.pgid": {"type": "long"},
+ "process.pid": {"type": "long"},
+ "process.ppid": {"type": "long"},
+ "process.start": {"type": "date"},
+ "process.thread.id": {"type": "long"},
+ "process.uptime": {"type": "long"},
+ "registry": {"type": "object"},
+ "related": {"type": "object"},
+ "related.hash": {"type": "keyword"},
+ "related.hosts": {"type": "keyword"},
+ "related.ip": {"type": "ip"},
+ "related.user": {"type": "keyword"},
+ "rule": {"type": "object"},
+ "rule.author": {"type": "keyword"},
+ "rule.category": {"type": "keyword"},
+ "rule.description": {"type": "keyword"},
+ "rule.id": {"type": "keyword"},
+ "rule.uuid": {"type": "keyword"},
+ "rule.version": {"type": "keyword"},
+ "server": {"type": "object"},
+ "service": {"type": "object"},
+ "service.ephemeral_id": {"type": "keyword"},
+ "service.id": {"type": "keyword"},
+ "service.version": {"type": "keyword"},
+ "source": {"type": "object"},
+ "source.address": {"type": "keyword"},
+ "source.as.number": {"type": "integer"},
+ "source.as.organization.name": {"type": "keyword"},
+ "source.bytes": {"type": "long"},
+ "source.geo.city_name": {"type": "keyword"},
+ "source.geo.country_iso_code": {"type": "keyword"},
+ "source.geo.country_name": {"type": "keyword"},
+ "source.geo.location": {"type": "geo_point"},
+ "source.ip": {"type": "ip"},
+ "source.nat.ip": {"type": "ip"},
+ "source.nat.port": {"type": "integer"},
+ "source.packets": {"type": "long"},
+ "source.port": {"type": "integer"},
+ "threat": {"type": "object"},
+ "threat.enrichments": {"type": "nested", "properties": {
+ "indicator": {"type": "object"},
+ "indicator.confidence": {"type": "keyword"},
+ "indicator.description": {"type": "keyword"},
+ "indicator.email.address": {"type": "keyword"},
+ "indicator.first_seen": {"type": "date"},
+ "indicator.ip": {"type": "ip"},
+ "indicator.last_seen": {"type": "date"},
+ "indicator.marking.tlp": {"type": "keyword"},
+ "indicator.modified_at": {"type": "date"},
+ "indicator.name": {"type": "keyword"},
+ "indicator.port": {"type": "long"},
+ "indicator.provider": {"type": "keyword"},
+ "indicator.reference": {"type": "keyword"},
+ "indicator.scanner_stats": {"type": "long"},
+ "indicator.sightings": {"type": "long"},
+ "indicator.type": {"type": "keyword"},
+ "matched.atomic": {"type": "keyword"},
+ "matched.field": {"type": "keyword"},
+ "matched.id": {"type": "keyword"},
+ "matched.index": {"type": "keyword"},
+ "matched.occurred": {"type": "date"},
+ "matched.type": {"type": "keyword"}}},
+ "threat.matched.indicators": {"type": "keyword"},
+ "threat.matched.names": {"type": "keyword"},
+ "threat.matched.providers": {"type": "keyword"},
+ "threat.matched.types": {"type": "keyword"},
+ "tls": {"type": "object"},
+ "span.id": {"type": "keyword"},
+ "trace.id": {"type": "keyword"},
+ "transaction.id": {"type": "keyword"},
+ "url": {"type": "object"},
+ "url.full": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "url.original": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "url.port": {"type": "long"},
+ "user": {"type": "object"},
+ "user.id": {"type": "keyword"},
+ "user.name": {"type": "keyword"},
+ "user.roles": {"type": "keyword"},
+ "user_agent": {"type": "object"},
+ "user_agent.device.name": {"type": "keyword"},
+ "user_agent.name": {"type": "keyword"},
+ "user_agent.original": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "user_agent.os.family": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "user_agent.os.full": {"type": "keyword"},
+ "user_agent.os.kernel": {"type": "keyword"},
+ "user_agent.os.name": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "user_agent.os.platform": {"type": "keyword"},
+ "user_agent.os.type": {"type": "keyword"},
+ "user_agent.os.version": {"type": "keyword"},
+ "user_agent.version": {"type": "keyword"},
+ "vlan": {"type": "object"},
+ "vlan.id": {"type": "keyword"},
+ "vulnerability.category": {"type": "keyword"},
+ "vulnerability.classification": {"type": "keyword"},
+ "vulnerability.description": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "vulnerability.enumeration": {"type": "keyword"},
+ "vulnerability.id": {"type": "keyword"},
+ "vulnerability.reference": {"type": "keyword"},
+ "vulnerability.report_id": {"type": "keyword"},
+ "vulnerability.scanner.vendor": {"type": "keyword"},
+ "vulnerability.score.base": {"type": "float"},
+ "vulnerability.score.environmental": {"type": "float"},
+ "vulnerability.score.temporal": {"type": "float"},
+ "vulnerability.score.version": {"type": "keyword"},
+ "vulnerability.severity": {"type": "keyword"},
+ "x509": {"type": "object"}
+ }
+ }
+ }
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/log-linux-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/log-linux-1.0.0.json
new file mode 100644
index 0000000000..bcd50b36b7
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/log-linux-1.0.0.json
@@ -0,0 +1,26 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "log-linux",
+ "labels": [
+ "linux"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "syslog_message": {"type": "text"},
+ "syslog_timestamp": {"type": "keyword"},
+ "pid": {"type": "integer"}
+ }
+ }
+
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/log-ocsf-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/log-ocsf-1.0.0.json
new file mode 100644
index 0000000000..9d39ba40eb
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/log-ocsf-1.0.0.json
@@ -0,0 +1,84 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "log-ocsf",
+ "labels": [
+ "ocsf"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings": {
+ "properties": {
+ "_time": {"type": "date"},
+ "activity": {"type": "keyword"},
+ "activity_id": {"type": "short"},
+ "api.operation": {"type": "keyword"},
+ "api.request.uid": {"type": "keyword"},
+ "api.response.error": {"type": "keyword"},
+ "api.response.error_message": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "api.response.message": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "api.response.uid": {"type": "keyword"},
+ "api.version": {"type": "keyword"},
+ "category": {"type": "keyword"},
+ "category_name": {"type": "keyword"},
+ "category_uid": {"type": "short"},
+ "class_name": {"type": "keyword"},
+ "class_uid": {"type": "short"},
+ "cloud.account_uid": {"type": "keyword"},
+ "count": {"type": "long"},
+ "dst_endpoint.ip": {"type": "ip"},
+ "dst_endpoint.port": {"type": "integer"},
+ "duration": {"type": "long"},
+ "end_time": {"type": "date"},
+ "finding.created_time": {"type": "date"},
+ "finding.first_seen_time": {"type": "date"},
+ "finding.last_seen_time": {"type": "date"},
+ "finding.modified_time": {"type": "date"},
+ "finding.title": {"type": "keyword"},
+ "finding.uid": {"type": "keyword"},
+ "http_request.user_agent": {"type": "keyword"},
+ "identity.session.created_time": {"type": "date"},
+ "identity.user.account_uid": {"type": "keyword"},
+ "message": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "metadata.logged_time": {"type": "date"},
+ "metadata.modified_time": {"type": "date"},
+ "metadata.processed_time": {"type": "date"},
+ "metadata.product.name": {"type": "keyword"},
+ "metadata.product.vendor_name": {"type": "keyword"},
+ "metadata.product.version": {"type": "keyword"},
+ "metadata.version": {"type": "keyword"},
+ "product.lang": {"type": "keyword"},
+ "product.uid": {"type": "keyword"},
+ "product.name": {"type": "keyword"},
+ "product.version": {"type": "keyword"},
+ "query_time": {"type": "date"},
+ "response_time": {"type": "date"},
+ "severity": {"type": "keyword"},
+ "severity_id": {"type": "short"},
+ "status": {"type": "keyword"},
+ "status_id": {"type": "short"},
+ "origin.cloud.account_uid": {"type": "keyword"},
+ "origin.cloud.region": {"type": "keyword"},
+ "ref_time": {"type": "keyword"},
+ "src_endpoint.domain": {"type": "keyword"},
+ "src_endpoint.ip": {"type": "ip"},
+ "src_endpoint.port": {"type": "integer"},
+ "start_time": {"type": "date"},
+ "time": {"type": "date"},
+ "timezone_offset": {"type": "integer"},
+ "type_uid": {"type": "integer"},
+ "type_name": {"type": "keyword"},
+ "update_time": {"type": "date"}
+ }
+ }
+
+
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/log-win-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/log-win-1.0.0.json
new file mode 100644
index 0000000000..18e187f049
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/log-win-1.0.0.json
@@ -0,0 +1,71 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "logs",
+ "component": "log-win",
+ "labels": [
+ "win"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings" : {
+ "properties": {
+ "Event.EventData.Data.0": {"type": "keyword", "fields": {"text": {"type": "text"}}},
+ "Event.EventData.Data.1": {"type": "keyword"},
+ "Event.EventData.Data.2": {"type": "keyword"},
+ "Event.EventData.Data.3": {"type": "keyword"},
+ "Event.EventData.Data.4": {"type": "keyword"},
+ "Event.EventData.Data.5": {"type": "keyword"},
+ "Event.EventData.Data.6": {"type": "keyword"},
+ "Event.EventData.Data.7": {"type": "keyword"},
+ "Event.EventData.Data.8": {"type": "keyword"},
+ "Event.EventData.Data.9": {"type": "keyword"},
+ "Event.EventData.Data.10": {"type": "keyword"},
+ "Event.EventData.Data.11": {"type": "keyword"},
+ "Event.EventData.Data.12": {"type": "keyword"},
+ "Event.EventData.Data.13": {"type": "keyword"},
+ "Event.EventData.Data.14": {"type": "keyword"},
+ "Event.EventData.Data.15": {"type": "keyword"},
+ "Event.EventData.Data.16": {"type": "keyword"},
+ "Event.EventData.Data.17": {"type": "keyword"},
+ "Event.EventData.Data.18": {"type": "keyword"},
+ "Event.EventData.Data.19": {"type": "keyword"},
+ "Event.EventData.Data.20": {"type": "keyword"},
+ "Event.EventData.Data.AccountExpires": {"type": "keyword"},
+ "Event.EventData.Data.BitlockerUserInputTime": {"type": "keyword"},
+ "Event.EventData.Data.ClientCreationTime": {"type": "keyword"},
+ "Event.EventData.Data.CreationUtcTime": {"type": "keyword"},
+ "Event.EventData.Data.DestAddress": {"type": "ip"},
+ "Event.EventData.Data.DestPort": {"type": "integer"},
+ "Event.EventData.Data.DeviceTime": {"type": "keyword"},
+ "Event.EventData.Data.IpAddress": {"type": "ip"},
+ "Event.EventData.Data.IpPort": {"type": "integer"},
+ "Event.EventData.Data.NewTime": {"type": "keyword"},
+ "Event.EventData.Data.OldTime": {"type": "keyword"},
+ "Event.EventData.Data.PasswordLastSet": {"type": "keyword"},
+ "Event.EventData.Data.PreviousCreationUtcTime": {"type": "keyword"},
+ "Event.EventData.Data.PreviousTime": {"type": "keyword"},
+ "Event.EventData.Data.ProcessingTimeInMilliseconds": {"type": "keyword"},
+ "Event.EventData.Data.SourceAddress": {"type": "ip"},
+ "Event.EventData.Data.SourcePort": {"type": "integer"},
+ "Event.EventData.Data.StartTime": {"type": "keyword"},
+ "Event.EventData.Data.StopTime": {"type": "keyword"},
+ "Event.EventData.Data.TimeSource": {"type": "keyword"},
+ "Event.EventData.Data.TimeSourceRefId": {"type": "keyword"},
+ "Event.RenderingInfo.Message": {"type": "text"},
+ "Event.System.EventID": {"type": "keyword"},
+ "Event.System.Execution.ProcessID": {"type": "long"},
+ "Event.System.Execution.ThreadID": {"type": "long"},
+ "Event.System.TimeCreated.SystemTime": {"type": "date"}
+ }
+ }
+
+
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-clientvpc-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-clientvpc-1.0.0.mapping.json
new file mode 100644
index 0000000000..12b5d0905c
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-clientvpc-1.0.0.mapping.json
@@ -0,0 +1,11 @@
+{
+ "index_patterns": [
+ "log-aws-clientvpn-*"
+ ],
+ "priority": 100,
+ "composed_of": [
+ "log-ecs",
+ "aws_clientvpn"
+ ],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-cloudfront-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-cloudfront-1.0.0.mapping.json
new file mode 100644
index 0000000000..986f0afe9d
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-cloudfront-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "index_patterns": ["log-aws-cloudfront-*"],
+ "priority": 100,
+ "composed_of": [
+ "log-ecs",
+ "aws_cloudfront"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-cloudhsm-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-cloudhsm-1.0.0.mapping.json
new file mode 100644
index 0000000000..ac3a694259
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-cloudhsm-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "index_patterns": ["log-aws-cloudhsm-*"],
+ "priority": 100,
+ "composed_of": [
+ "log-ecs",
+ "aws_cloudhsm"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-cloudtrail-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-cloudtrail-1.0.0.mapping.json
new file mode 100644
index 0000000000..d4393f2583
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-cloudtrail-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "index_patterns": ["log-aws-cloudtrail-*"],
+ "priority": 100,
+ "composed_of": [
+ "log-ecs",
+ "aws_cloudtrail"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-config-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-config-1.0.0.mapping.json
new file mode 100644
index 0000000000..66ff7800a2
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-config-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "index_patterns": ["log-aws-config-*"],
+ "priority": 2,
+ "composed_of": [
+ "log-ecs",
+ "aws_config"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-elasticache-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-elasticache-1.0.0.mapping.json
new file mode 100644
index 0000000000..b30514675d
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-elasticache-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "priority": 100,
+ "index_patterns": ["log-aws-elasticache-*"],
+ "composed_of": [
+ "log-ecs",
+ "aws_elasticache"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-elb-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-elb-1.0.0.mapping.json
new file mode 100644
index 0000000000..84358800f0
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-elb-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "index_patterns": ["log-aws-elb-*"],
+ "priority": 2,
+ "composed_of": [
+ "log-ecs",
+ "aws_elb"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-guardduty-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-guardduty-1.0.0.mapping.json
new file mode 100644
index 0000000000..89e52de01e
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-guardduty-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "index_patterns": ["log-aws-guardduty-*"],
+ "priority": 100,
+ "composed_of": [
+ "log-ecs",
+ "aws_guardduty"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-inspector-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-inspector-1.0.0.mapping.json
new file mode 100644
index 0000000000..33d6a441fa
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-inspector-1.0.0.mapping.json
@@ -0,0 +1,9 @@
+{
+ "index_patterns": ["log-aws-inspector-*"],
+ "priority": 100,
+ "composed_of": [
+ "log-ecs",
+ "aws_inspector"
+ ],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-msk-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-msk-1.0.0.mapping.json
new file mode 100644
index 0000000000..84d14766e8
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-msk-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "index_patterns": ["log-aws-msk-*"],
+ "priority": 100,
+ "composed_of": [
+ "log-ecs",
+ "aws_msk"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-networkfirewall-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-networkfirewall-1.0.0.mapping.json
new file mode 100644
index 0000000000..1cc324f0b5
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-networkfirewall-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "index_patterns": ["log-aws-networkfirewall-*"],
+ "priority": 100,
+ "composed_of": [
+ "log-ecs",
+ "aws_networkfirewall"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-opensearch-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-opensearch-1.0.0.mapping.json
new file mode 100644
index 0000000000..06c091d3b3
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-opensearch-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "index_patterns": ["log-aws-opensearch-*"],
+ "priority": 100,
+ "composed_of": [
+ "log-ecs",
+ "aws_opensearch"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-r53resolver-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-r53resolver-1.0.0.mapping.json
new file mode 100644
index 0000000000..57582332e5
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-r53resolver-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "index_patterns": ["log-aws-r53resolver-*"],
+ "priority": 100,
+ "composed_of": [
+ "log-ecs",
+ "aws_r53resolver"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-rds-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-rds-1.0.0.mapping.json
new file mode 100644
index 0000000000..5d35fec2ac
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-rds-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "index_patterns": ["log-aws-rds-*"],
+ "priority": 100,
+ "composed_of": [
+ "log-ecs",
+ "aws_rds"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-s3accesslog-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-s3accesslog-1.0.0.mapping.json
new file mode 100644
index 0000000000..2b5dc88577
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-s3accesslog-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "index_patterns": ["log-aws-s3accesslog-*"],
+ "priority": 100,
+ "composed_of": [
+ "log-ecs",
+ "aws_s3accesslog"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-securityhub-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-securityhub-1.0.0.mapping.json
new file mode 100644
index 0000000000..5436cd7369
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-securityhub-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "index_patterns": ["log-aws-securityhub-*"],
+ "priority": 100,
+ "composed_of": [
+ "log-ecs",
+ "aws_securityhub"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-trustedadvisor-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-trustedadvisor-1.0.0.mapping.json
new file mode 100644
index 0000000000..43a2a1fa2f
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-trustedadvisor-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "index_patterns": ["log-aws-trustedadvisor-*"],
+ "priority": 100,
+ "composed_of": [
+ "log-ecs",
+ "aws_trustedadvisor"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-vpcflowlogs-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-vpcflowlogs-1.0.0.mapping.json
new file mode 100644
index 0000000000..1a324ceea4
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-vpcflowlogs-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "index_patterns": ["log-aws-vpcflowlogs-*"],
+ "priority": 100,
+ "composed_of": [
+ "log-ecs",
+ "aws_vpcflowlogs"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-waf-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-waf-1.0.0.mapping.json
new file mode 100644
index 0000000000..07b178fb82
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-waf-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "index_patterns": ["log-aws-waf-*"],
+ "priority": 100,
+ "composed_of": [
+ "log-ecs",
+ "aws_waf"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-workspaces-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-workspaces-1.0.0.mapping.json
new file mode 100644
index 0000000000..ca6b95e796
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-aws-workspaces-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "index_patterns": ["log-aws-workspaces-*"],
+ "priority": 100,
+ "composed_of": [
+ "log-ecs",
+ "aws_workspaces"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-linux-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-linux-1.0.0.mapping.json
new file mode 100644
index 0000000000..571605a682
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-linux-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "priority": 100,
+ "index_patterns": ["log-linux-*"],
+ "composed_of": [
+ "log-ecs",
+ "log-linux"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-ocsf-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-ocsf-1.0.0.json
new file mode 100644
index 0000000000..005816655c
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-ocsf-1.0.0.json
@@ -0,0 +1,9 @@
+{
+ "index_patterns": ["log-ocsf-*"],
+ "template": {},
+ "priority": 100,
+ "composed_of": [
+ "log-ecs",
+ "log-ocsf"
+ ]
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-win-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-win-1.0.0.mapping.json
new file mode 100644
index 0000000000..8c95b4a1a2
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-win-1.0.0.mapping.json
@@ -0,0 +1,8 @@
+{
+ "priority": 100,
+ "index_patterns": ["log-win-*"],
+ "composed_of": [
+ "log-ecs",
+ "log-win"],
+ "version": 1
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-win-directory-service-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-win-directory-service-1.0.0.json
new file mode 100644
index 0000000000..64b70237e2
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-win-directory-service-1.0.0.json
@@ -0,0 +1,17 @@
+{
+ "index_patterns": [
+ "log-directory-service-*"
+ ],
+ "priority": 100,
+ "template": {
+ "aliases": {
+ "log-win-aws-directory-service": {
+ "is_write_index": false
+ }
+ }
+ },
+ "composed_of": [
+ "log-ecs",
+ "log-win"
+ ]
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-win-fsx-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-win-fsx-1.0.0.json
new file mode 100644
index 0000000000..8523fdbcf6
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/logs-win-fsx-1.0.0.json
@@ -0,0 +1,13 @@
+{
+ "index_patterns": [
+ "log-fsx-win-*"
+ ],
+ "priority": 100,
+ "template": {
+ "aliases": {"log-win-aws-fsx-win": {"is_write_index": false}}
+ },
+ "composed_of": [
+ "log-ecs",
+ "log-win"
+ ]
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/metrics-opensearch-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/metrics-opensearch-1.0.0.json
new file mode 100644
index 0000000000..c0035461bc
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/metrics-opensearch-1.0.0.json
@@ -0,0 +1,8 @@
+{
+ "index_patterns": ["metrics-opensearch-index-*"],
+ "priority": 100,
+ "composed_of": [
+ "log-ecs",
+ "opensearch"
+ ]
+}
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/opensearch-1.0.0.json b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/opensearch-1.0.0.json
new file mode 100644
index 0000000000..081d25ccb1
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/ocsf-security/schemas/opensearch-1.0.0.json
@@ -0,0 +1,76 @@
+{
+ "template": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "security",
+ "type": "metrics",
+ "component": "opensearch",
+ "labels": [
+ "opensearch"
+ ]
+ },
+ "settings": {
+ "refresh_interval": "30s",
+ "number_of_shards": "1"
+ },
+ "mappings": {
+ "properties": {
+ "opensearch.cluster.id": {"type": "keyword"},
+ "opensearch.cluster.name": {"type": "keyword"},
+ "opensearch.index.creation.date": {"type": "date"},
+ "opensearch.index.end_time": {"type": "date"},
+ "opensearch.index.hidden": {"type": "boolean"},
+ "opensearch.index.index_status": {"type": "keyword"},
+ "opensearch.index.name": {"type": "keyword"},
+ "opensearch.index.status": {"type": "keyword"},
+ "opensearch.index.storage_tier": {"type": "keyword"},
+ "opensearch.index.primaries.docs.count": {"type": "long"},
+ "opensearch.index.primaries.docs.deleted": {"type": "long"},
+ "opensearch.index.primaries.indexing.index_time_in_millis": {"type": "long"},
+ "opensearch.index.primaries.indexing.index_total": {"type": "long"},
+ "opensearch.index.primaries.indexing.throttle_time_in_millis": {"type": "long"},
+ "opensearch.index.primaries.merges.total_size_in_bytes": {"type": "long"},
+ "opensearch.index.primaries.refresh.total_time_in_millis": {"type": "long"},
+ "opensearch.index.primaries.segments.count": {"type": "long"},
+ "opensearch.index.primaries.store.size_in_bytes": {"type": "long"},
+ "opensearch.index.shards.total": {"type": "long"},
+ "opensearch.index.shards.primaries": {"type": "long"},
+ "opensearch.index.start_time": {"type": "date"},
+ "opensearch.index.status": {"type": "keyword"},
+ "opensearch.index.total.docs.count": {"type": "long"},
+ "opensearch.index.total.docs.deleted": {"type": "long"},
+ "opensearch.index.total.fielddata.memory_size_in_bytes": {"type": "long"},
+ "opensearch.index.total.indexing.index_time_in_millis": {"type": "long"},
+ "opensearch.index.total.indexing.index_total": {"type": "long"},
+ "opensearch.index.total.indexing.throttle_time_in_millis": {"type": "long"},
+ "opensearch.index.total.merges.total_size_in_bytes": {"type": "long"},
+ "opensearch.index.total.refresh.total_time_in_millis": {"type": "long"},
+ "opensearch.index.total.search.query_time_in_millis": {"type": "long"},
+ "opensearch.index.total.search.query_total": {"type": "long"},
+ "opensearch.index.total.segments.count": {"type": "long"},
+ "opensearch.index.total.segments.doc_values_memory_in_bytes": {"type": "long"},
+ "opensearch.index.total.segments.fixed_bit_set_memory_in_bytes": {"type": "long"},
+ "opensearch.index.total.segments.index_writer_memory_in_bytes": {"type": "long"},
+ "opensearch.index.total.segments.memory_in_bytes": {"type": "long"},
+ "opensearch.index.total.segments.norms_memory_in_bytes": {"type": "long"},
+ "opensearch.index.total.segments.points_memory_in_bytes": {"type": "long"},
+ "opensearch.index.total.segments.stored_fields_memory_in_bytes": {"type": "long"},
+ "opensearch.index.total.segments.term_vectors_memory_in_bytes": {"type": "long"},
+ "opensearch.index.total.segments.terms_memory_in_bytes": {"type": "long"},
+ "opensearch.index.total.segments.version_map_memory_in_bytes": {"type": "long"},
+ "opensearch.index.total.store.size_in_bytes": {"type": "long"},
+ "opensearch.index.uuid": {"type": "keyword"},
+ "opensearch.node.id": {"type": "keyword"},
+ "opensearch.shard.docs.count": {"type": "long"},
+ "opensearch.shard.number": {"type": "long"},
+ "opensearch.shard.primary": {"type": "boolean"},
+ "opensearch.shard.source_node.name": {"type": "keyword"},
+ "opensearch.shard.source_node.uuid": {"type": "keyword"},
+ "opensearch.shard.state": {"type": "keyword"},
+ "opensearch.shard.store.size_in_bytes": {"type": "long"}
+ }
+ }
+
+ }
+}
+
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-awswaf.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-awswaf.jpg
new file mode 100644
index 0000000000..6a630677e9
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-awswaf.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-clientvpn.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-clientvpn.jpg
new file mode 100644
index 0000000000..6ef6f98bb5
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-clientvpn.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-cloudfront.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-cloudfront.jpg
new file mode 100644
index 0000000000..088638fe3a
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-cloudfront.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-cloudhsm.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-cloudhsm.jpg
new file mode 100644
index 0000000000..1378f6c361
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-cloudhsm.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-cloudtrail.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-cloudtrail.jpg
new file mode 100644
index 0000000000..720f7385dc
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-cloudtrail.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-elb.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-elb.jpg
new file mode 100644
index 0000000000..e2c4c30fec
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-elb.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-guardduty.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-guardduty.jpg
new file mode 100644
index 0000000000..fbbd7a37b0
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-guardduty.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-opensearch-metrics.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-opensearch-metrics.jpg
new file mode 100644
index 0000000000..8b13ab20f7
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-opensearch-metrics.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-rds.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-rds.jpg
new file mode 100644
index 0000000000..ab77ca295b
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-rds.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-s3accesslog.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-s3accesslog.jpg
new file mode 100644
index 0000000000..023acb8886
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-s3accesslog.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-sample.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-sample.jpg
new file mode 100644
index 0000000000..9ee8c53e24
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-sample.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-securityhub.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-securityhub.jpg
new file mode 100644
index 0000000000..2e36bf6704
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-securityhub.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-vpcflowlogs.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-vpcflowlogs.jpg
new file mode 100644
index 0000000000..c66e528fe4
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-vpcflowlogs.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-vpcflowlogscustom.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-vpcflowlogscustom.jpg
new file mode 100644
index 0000000000..ef209a85e7
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-vpcflowlogscustom.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-workspaces.jpg b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-workspaces.jpg
new file mode 100644
index 0000000000..c2e5fda944
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/static/dashboard-workspaces.jpg differ
diff --git a/server/adaptors/integrations/__data__/repository/ocsf-security/static/logo.png b/server/adaptors/integrations/__data__/repository/ocsf-security/static/logo.png
new file mode 100644
index 0000000000..1813a4aa05
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/ocsf-security/static/logo.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/assets/demo-langing-page-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/otel-services/assets/demo-langing-page-1.0.0.ndjson
new file mode 100644
index 0000000000..c83b28ac89
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/otel-services/assets/demo-langing-page-1.0.0.ndjson
@@ -0,0 +1,3 @@
+{"attributes":{"description":"OTEL demo landing page","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"title":"OTEL demo landing page","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OTEL demo landing page\",\"type\":\"markdown\",\"aggs\":[],\"params\":{\"fontSize\":12,\"markdown\":\"\\n\\n# OpenSearch Observability OTEL Demo\\n\\nWelcome to the [OpenSearch](https://opensearch.org/docs/latest) OpenTelemetry [Demo](https://opentelemetry.io/docs/demo/) documentation, which covers how to install and run the demo, and some scenarios you can use to view OpenTelemetry in action.\\n\\n## Purpose\\nThe purpose of this demo is to demonstrate the different capabilities of OpenSearch Observability to investigate and reflect your system.\\n\\n\\n\\n### Services\\n[OTEL DEMO](https://opentelemetry.io/docs/demo/services/) Describes the list of services that are composing the Astronomy Shop.\\n\\nThe main services that are open to user interactions:\\n\\n- [Dashboards](https://observability.playground.opensearch.org/)\\n\\n- [Demo Proxy](https://observability.playground.demo-proxy.opensearch.org/)\\n\\n- [Demo loader](https://observability.playground.demo-loader.opensearch.org/)\\n\\n- [Demo feature-flag](https://observability.playground.demo-feature-flag.opensearch.org/)\\n\\n---\\n\\n### Screenshots\\n\\n_**The Shop**_\\n\\n\\n\\n\\n\\n\\n_**The load generator**_\\n\\n\\n\\n\\n---\\n\\n### [Integrations](http://localhost:5601/app/integrations#/available) \\n\\n\\nThe integration service is a list of pre-canned assets that are loaded in a combined manner to allow users the ability for simple and automatic way to discover and review their services topology.\\n\\nThese [OTEL demo](https://github.com/opensearch-project/opensearch-catalog/pull/91) integrations contain the following assets:\\n- components & index template mapping\\n - [traces mapping](http://localhost:5601/app/opensearch_index_management_dashboards#/create-template/ss4o_traces_template)\\n - [logs mapping](http://localhost:5601/app/opensearch_index_management_dashboards#/create-template/ss4o_logs_template)\\n - [metrics mapping](http://localhost:5601/app/opensearch_index_management_dashboards#/create-template/ss4o_metrics_template)\\n\\n- Index Patterns\\n - [traces](http://localhost:5601/app/management/opensearch-dashboards/indexPatterns/)\\n - [logs](http://localhost:5601/app/management/opensearch-dashboards/indexPatterns/)\\n - [metrics](http://localhost:5601/app/management/opensearch-dashboards/indexPatterns/)\\n\\n- Index Aliases\\n - [traces](http://localhost:5601/app/opensearch_index_management_dashboards#/aliases)\\n - [logs](http://localhost:5601/app/opensearch_index_management_dashboards#/aliases)\\n - [metrics](http://localhost:5601/app/opensearch_index_management_dashboards#/aliases)\\n\\n- datasources\\n - [Prometheus](http://localhost:5601/app/datasources#/manage/prometheus) \\n- data-stream & indices\\n - [Traces / Data-prepper](http://localhost:5601/app/opensearch_index_management_dashboards#/index-detail/otel-v1-apm-span-000001) \\n - [Traces / Jaeger](http://localhost:5601/app/opensearch_index_management_dashboards#/index-detail/jaeger-span-2023-12-13) \\n - [Services / Data-prepper](http://localhost:5601/app/opensearch_index_management_dashboards#/index-detail/otel-v1-apm-service-map) \\n - [Services / Jaeger](http://localhost:5601/app/opensearch_index_management_dashboards#/index-detail/jaeger-service-2023-12-13) \\n - [Metrics / Data-prepper ](http://localhost:5601/app/opensearch_index_management_dashboards#/index-detail/otel-metrics-2023.12.13) \\n - [Log-Events / Data-prepper ](http://localhost:5601/app/opensearch_index_management_dashboards#/index-detail/otel-events-2023.12.13) \\n\\n\\n- dashboards\\n - [OTEL Architecture](http://localhost:5601/app/dashboards#/view/67e37e40-f750-11ed-b6d0-850581e4a72d)\\n - [System-Wide AMP](http://localhost:5601/app/dashboards#/view/b0d09c20-9893-11ee-8bb8-69dd3b5541dd)\\n---\\n### Ingestion\\nThe ingestion capabilities for OpenSearch is to be able to support multiple pipelines:\\n- [Data-Prepper](https://github.com/opensearch-project/data-prepper/) is an OpenSearch ingestion project that allows ingestion of OTEL standard signals using Otel-Collector\\n- [Jaeger](https://opensearch.org/docs/latest/observing-your-data/trace/trace-analytics-jaeger/) is an ingestion framework which has a build in capability for pushing OTEL signals into OpenSearch\\n- [Fluent-Bit](https://docs.fluentbit.io/manual/pipeline/outputs/opensearch) is an ingestion framework which has a build in capability for pushing OTEL signals into OpenSearch\\n\",\"openLinksInNewTab\":false}}"},"id":"dd4bebe0-f66a-11ed-9518-f5d5eb1d70bf","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-12-13T03:47:42.872Z","version":"WzEzNCw3XQ=="}
+{"attributes":{"description":"OTEL demo landing page","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"0e0c418a-81f8-4d85-8ba7-8d8ef6e2b1d7\",\"w\":24,\"x\":0,\"y\":0},\"panelIndex\":\"0e0c418a-81f8-4d85-8ba7-8d8ef6e2b1d7\",\"version\":\"2.11.0\",\"panelRefName\":\"panel_0\"}]","timeRestore":false,"title":"OTEL demo landing page","version":1},"id":"e66e2da0-f66a-11ed-9518-f5d5eb1d70bf","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"dd4bebe0-f66a-11ed-9518-f5d5eb1d70bf","name":"panel_0","type":"visualization"}],"type":"dashboard","updated_at":"2023-12-13T03:54:43.163Z","version":"WzEzNSw3XQ=="}
+{"exportedCount":2,"missingRefCount":0,"missingReferences":[]}
\ No newline at end of file
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/assets/otel-architecture-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/otel-services/assets/otel-architecture-1.0.0.ndjson
new file mode 100644
index 0000000000..64705b215a
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/otel-services/assets/otel-architecture-1.0.0.ndjson
@@ -0,0 +1,3 @@
+{"attributes":{"description":"OTEL Astronomy Demo Application architecture","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"otel-architecture","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"otel-architecture\",\"type\":\"markdown\",\"aggs\":[],\"params\":{\"fontSize\":12,\"openLinksInNewTab\":false,\"markdown\":\"# OTEL Astronomy Demo Application\\n\\nThe following diagram presents the OTEL Astronomy shop services architecture:\\n\\n\\n\\n\\n### Trace Collectors\\nGaining a macro-level perspective on incoming data, such as sample counts and cardinality, is essential for comprehending the collector’s internal dynamics. However, when delving into the details, the interconnections can become complex. The Collector Data Flow Dashboard aims to demonstrate the capabilities of the OpenTelemetry demo application, offering a solid foundation for users to build upon.\\n\\nMonitoring data flow through the OpenTelemetry Collector is crucial for several reasons.\\n - All services are traces in all the development languages\\n - Auto instrumented\\n - Manual spans and attributes\\n - Span events\\n - Span links\\n\\nTrace Headers are propagated across all services (**Context propagation**)\\n\\n\\n### Metric Collectors\\nCollecting all the KPI information into Prometheus time series storage including:\\n - runtime metrics\\n - HTTP / gRPC latency distribution\\n\\n### Data Flow Overview\\nCollector Data Flow Dashboard provides valuable guidance on which metrics to monitor. Users can tailor their own dashboard variations by adding necessary metrics specific to their use cases, such as memory_delimiter processor or other data flow indicators. This demo dashboard serves as a starting point, enabling users to explore diverse usage scenarios and adapt the tool to their unique monitoring needs.\\n\\n\\n\\nThe diagram below provides an overview of the system components, showcasing the configuration derived from the OpenTelemetry Collector (otelcol) configuration file utilized by the OpenTelemetry demo application. Additionally, it highlights the observability data (traces and metrics) flow within the system.\\n\\n#### Simple purchase use case\\nThis flow diagram shows the trace evolution from the user selecting a purchased item going through different backend services until reaching the storage database.\\n\\n\\n#### Services\\n- [All Services](http://localhost:5601/app/observability-traces#/services)\\n \\n \\n - [accountingservice](http://localhost:5601/app/observability-traces#/services/accountingservice)\\n - [measurements ](http://localhost:5601/app/dashboards#/view/b0d09c20-9893-11ee-8bb8-69dd3b5541dd?_g=(filters:!(),refreshInterval:(pause:!t,value:0),time:(from:now-15d,to:now))&_a=(description:'disk%20utilization%0Acpu%20utilization%0Ajvm.heap%0Anetwork',filters:!(('$state':(store:appState),meta:(alias:!n,disabled:!f,index:'8ca59f40-92e3-11ee-8253-ff1f9ce273b1',key:serviceName.keyword,negate:!f,params:(query:recommendationservice),type:phrase),query:(match_phrase:(serviceName.keyword:recommendationservice)))),fullScreenMode:!f,options:(hidePanelTitles:!f,useMargins:!t),panels:!((embeddableConfig:(),gridData:(h:15,i:'4de730c8-c5cd-45a1-8df4-1988e8e10f2e',w:24,x:0,y:0),id:'86922340-98b9-11ee-8bb8-69dd3b5541dd',panelIndex:'4de730c8-c5cd-45a1-8df4-1988e8e10f2e',type:visualization,version:'2.11.0'),(embeddableConfig:(),gridData:(h:15,i:'9278872d-ac7e-4d01-8608-923cd1e2c867',w:24,x:24,y:0),id:'6dca4bd0-98b9-11ee-8bb8-69dd3b5541dd',panelIndex:'9278872d-ac7e-4d01-8608-923cd1e2c867',type:visualization,version:'2.11.0'),(embeddableConfig:(),gridData:(h:15,i:'223eb983-bf4e-4896-9c9e-c3e85f5bfecd',w:24,x:0,y:15),id:c92ac860-98b9-11ee-8bb8-69dd3b5541dd,panelIndex:'223eb983-bf4e-4896-9c9e-c3e85f5bfecd',type:visualization,version:'2.11.0'),(embeddableConfig:(hidePanelTitles:!f),gridData:(h:15,i:'1d66438e-7d9c-4850-9316-a46a69a74688',w:24,x:24,y:15),id:d8ed8300-98b9-11ee-8bb8-69dd3b5541dd,panelIndex:'1d66438e-7d9c-4850-9316-a46a69a74688',title:services.cpu.time,type:visualization,version:'2.11.0'),(embeddableConfig:(),gridData:(h:15,i:'8504673d-3fdd-4ad7-8edd-d68f60431302',w:24,x:0,y:30),id:'952a8320-98c3-11ee-8bb8-69dd3b5541dd',panelIndex:'8504673d-3fdd-4ad7-8edd-d68f60431302',type:visualization,version:'2.11.0'),(embeddableConfig:(),gridData:(h:15,i:c56a2e16-34a9-4ab7-8786-53f217afc7de,w:24,x:24,y:30),id:b36d3f30-98c3-11ee-8bb8-69dd3b5541dd,panelIndex:c56a2e16-34a9-4ab7-8786-53f217afc7de,type:visualization,version:'2.11.0'),(embeddableConfig:(),gridData:(h:15,i:'3a2051d7-348d-4d44-b037-fbcce680d83d',w:24,x:0,y:45),id:e4d3c5c0-98c4-11ee-8bb8-69dd3b5541dd,panelIndex:'3a2051d7-348d-4d44-b037-fbcce680d83d',type:visualization,version:'2.11.0'),(embeddableConfig:(),gridData:(h:15,i:'12ccbeba-d6c9-4a0d-a295-7aecfd32a2ca',w:24,x:24,y:45),id:'033888c0-98c5-11ee-8bb8-69dd3b5541dd',panelIndex:'12ccbeba-d6c9-4a0d-a295-7aecfd32a2ca',type:visualization,version:'2.11.0'),(embeddableConfig:(),gridData:(h:15,i:f705b89b-d364-45d4-b632-af5df69b90ad,w:24,x:0,y:60),id:'164cb850-98c5-11ee-8bb8-69dd3b5541dd',panelIndex:f705b89b-d364-45d4-b632-af5df69b90ad,type:visualization,version:'2.11.0'),(embeddableConfig:(),gridData:(h:15,i:'4d6aede1-5a70-4f12-b4ad-4eb896b5f550',w:24,x:24,y:60),id:'3e2fe6d0-98c5-11ee-8bb8-69dd3b5541dd',panelIndex:'4d6aede1-5a70-4f12-b4ad-4eb896b5f550',type:visualization,version:'2.11.0')),query:(language:kuery,query:''),timeRestore:!f,title:SystemWide-APM,viewMode:edit))\\n - [adservice](http://localhost:5601/app/observability-traces#/services/adservice)\\n - [cartservice](http://localhost:5601/app/observability-traces#/services/cartservice)\\n - [checkoutservice](http://localhost:5601/app/observability-traces#/services/checkoutservice)\\n - [currencyservice](http://localhost:5601/app/observability-traces#/services/currencyservice)\\n - [emailservice](http://localhost:5601/app/observability-traces#/services/emailservice)\\n - [featureflagservice](http://localhost:5601/app/observability-traces#/services/featureflagservice)\\n - [frauddetectionservice](http://localhost:5601/app/observability-traces#/services/frauddetectionservice)\\n - [frontend](http://localhost:5601/app/observability-traces#/services/frontend)\\n - [frauddetectionservice](http://localhost:5601/app/observability-traces#/services/frauddetectionservice)\\n - [loadgenerator](http://localhost:5601/app/observability-traces#/services/loadgenerator)\\n - [measurements ](http://localhost:5601/app/dashboards#/view/57a35630-9936-11ee-8bb8-69dd3b5541dd?_g=(filters:!(),refreshInterval:(pause:!t,value:0),time:(from:'2023-12-04T18:51:48.732Z',to:'2023-12-05T00:50:48.914Z'))&_a=(description:'',filters:!(),fullScreenMode:!f,options:(hidePanelTitles:!f,useMargins:!t),query:(language:kuery,query:''),timeRestore:!f,title:loadgenerators-services,viewMode:view))\\n - [paymentservice](http://localhost:5601/app/observability-traces#/services/paymentservice)\\n - [productcatalogservice](http://localhost:5601/app/observability-traces#/services/productcatalogservice)\\n - [quoteservice](http://localhost:5601/app/observability-traces#/services/quoteservice)\\n - [recommendationservice](http://localhost:5601/app/observability-traces#/services/recommendationservice)\\n- [shippingservice](http://localhost:5601/app/observability-traces#/services/shippingservice)\\n---\\n## OTEL collector pipelines\\n\\n### Logs\\n\\n\\n### Metrics\\n\\n\\n### Traces\\n\\n\\n\\n---\\n## Reference\\n**_OTEL Demo info_**\\n- [architecture](https://opentelemetry.io/docs/demo/architecture/)\\n- [collector-data-flow-dashboard](https://opentelemetry.io/docs/demo/collector-data-flow-dashboard/)\\n- [services](https://opentelemetry.io/docs/demo/services/)\\n\\n**_OTEL Demo repository_**\\n - [OpenSearch: OpenTelemetry community demo](https://github.com/opensearch-project/opentelemetry-demo)\\n\"}}"},"id":"5c297aa0-f750-11ed-b6d0-850581e4a72d","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-12-14T22:44:55.303Z","version":"WzE3Nyw4XQ=="}
+{"attributes":{"description":"OTEL Astronomy Demo Application architecture","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"cc8d389f-6ab0-4590-bd7d-140ed04a28b1\",\"w\":24,\"x\":0,\"y\":0},\"panelIndex\":\"cc8d389f-6ab0-4590-bd7d-140ed04a28b1\",\"version\":\"2.11.0\",\"panelRefName\":\"panel_0\"}]","timeRestore":false,"title":"otel-demo-architecture","version":1},"id":"67e37e40-f750-11ed-b6d0-850581e4a72d","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"5c297aa0-f750-11ed-b6d0-850581e4a72d","name":"panel_0","type":"visualization"}],"type":"dashboard","updated_at":"2023-12-12T21:39:40.356Z","version":"WzEwMSw2XQ=="}
+{"exportedCount":2,"missingRefCount":0,"missingReferences":[]}
\ No newline at end of file
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/assets/otel-service-flow-use-case-integration-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/otel-services/assets/otel-service-flow-use-case-integration-1.0.0.ndjson
new file mode 100644
index 0000000000..ac60f38e9e
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/otel-services/assets/otel-service-flow-use-case-integration-1.0.0.ndjson
@@ -0,0 +1,42 @@
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aggregationTemporality\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aggregationTemporality.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aggregationTemporality\"}}},{\"count\":0,\"name\":\"attributes.instrumentationScope.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.instrumentationScope.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.instrumentationScope.name\"}}},{\"count\":0,\"name\":\"attributes.instrumentationScope.version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.instrumentationScope.version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.instrumentationScope.version\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_request_type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_request_type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.app@ads@ad_request_type\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_response_type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_response_type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.app@ads@ad_response_type\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.app@payment@currency\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.app@payment@currency.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.app@payment@currency\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.client-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.client-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.client-id\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.count\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.count.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.count\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.cpu\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.currency_code\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.currency_code.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.currency_code\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.daemon\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.device\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.device.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.device\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.direction\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.direction.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.direction\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.dropped\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.family\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.generation\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.generation.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.generation\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@flavor\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@flavor.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@flavor\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@host\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@host.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@host\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@method\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@method.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@method\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@route\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@route.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@route\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@scheme\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@scheme.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@scheme\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@status_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.method\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.method.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.method\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.net@host@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.net@host@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.net@host@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.net@host@port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.net@peer@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.net@peer@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.net@peer@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.net@peer@port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.node-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.node-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.node-id\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.operation\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.operation.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.operation\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.partition\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.partition.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.partition\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.pool\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.pool.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.pool\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.processor\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.processor.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.processor\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.processorType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.processorType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.processorType\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.protocol\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.protocol.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.protocol\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.recommendation@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.recommendation@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.recommendation@type\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@grpc@status_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@method\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@method.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.rpc@method\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@service\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@service.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.rpc@service\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@system\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@system.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.rpc@system\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.service@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.service@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.span@kind\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.span@kind.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.span@kind\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.span@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.span@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.span@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.state\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.status\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.status@code\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.status@code.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.status@code\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.success\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.target\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.target.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.target\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.topic\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.topic.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.topic\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.type\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.container@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.container@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.container@id\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.host@arch\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.host@arch.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.host@arch\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.host@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.host@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.host@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@description\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@type\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@command\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_args\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_args.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@command_args\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_line\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_line.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@command_line\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@executable@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@path\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@path.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@executable@path\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@owner\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@owner.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@owner\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@runtime@description\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@runtime@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@runtime@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@instance@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@instance@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@instance@id\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@namespace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@namespace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@namespace\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@auto@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@auto@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@auto@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@language\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@language.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@sdk@language\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@sdk@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@sdk@version\"}}},{\"count\":0,\"name\":\"bucketCounts\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"bucketCountsList\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"buckets.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"buckets.max\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"buckets.min\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"description\"}}},{\"count\":0,\"name\":\"exemplars.attributes.exemplar.attributes.net@sock@peer@addr\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"exemplars.attributes.exemplar.attributes.net@sock@peer@addr.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"exemplars.attributes.exemplar.attributes.net@sock@peer@addr\"}}},{\"count\":0,\"name\":\"exemplars.spanId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"exemplars.spanId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"exemplars.spanId\"}}},{\"count\":0,\"name\":\"exemplars.time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"exemplars.traceId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"exemplars.traceId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"exemplars.traceId\"}}},{\"count\":0,\"name\":\"exemplars.value\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"explicitBounds\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"explicitBoundsCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"flags\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"isMonotonic\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kind\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kind.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kind\"}}},{\"count\":0,\"name\":\"name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"name\"}}},{\"count\":0,\"name\":\"schemaUrl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"schemaUrl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"schemaUrl\"}}},{\"count\":0,\"name\":\"serviceName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"serviceName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"serviceName\"}}},{\"count\":0,\"name\":\"startTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sum\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"unit\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"unit.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"unit\"}}},{\"count\":0,\"name\":\"value\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"time","title":"otel-metrics-*"},"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMDgsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"title":"otel-service-investigation-flow","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"otel-service-investigation-flow\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n\\n \\\"title\\\":\\\"Services Investigation Flow\\\",\\n \\\"autosize\\\": \\\"pad\\\",\\n \\\"padding\\\": 5,\\n \\\"signals\\\": [\\n { \\\"name\\\": \\\"w\\\", \\\"value\\\": 15},\\n { \\\"name\\\": \\\"h\\\", \\\"value\\\": 15},\\n { \\\"name\\\": \\\"aspect\\\", \\\"value\\\": true },\\n { \\\"name\\\": \\\"smooth\\\", \\\"value\\\": true},\\n { \\\"name\\\": \\\"align\\\", \\\"value\\\": \\\"left\\\"},\\n { \\\"name\\\": \\\"baseline\\\", \\\"value\\\": \\\"top\\\" },\\n {\\\"name\\\": \\\"nodeWidth\\\", \\\"value\\\": 190},\\n {\\\"name\\\": \\\"nodeHeight\\\", \\\"value\\\": 45},\\n {\\\"name\\\": \\\"verticalNodeGap\\\", \\\"value\\\": 10},\\n {\\\"name\\\": \\\"horizontalNodeGap\\\", \\\"value\\\": 140},\\n {\\n \\\"name\\\": \\\"startingDepth\\\",\\n \\\"value\\\": 1,\\n \\\"on\\\": [{\\\"events\\\": {\\\"type\\\": \\\"timer\\\", \\\"throttle\\\": 0}, \\\"update\\\": \\\"-1\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"node\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\\"events\\\": {\\\"type\\\": \\\"timer\\\", \\\"throttle\\\": 10}, \\\"update\\\": \\\"0\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"nodeHighlight\\\",\\n \\\"value\\\": \\\"[0]\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"type\\\": \\\"mouseover\\\", \\\"markname\\\": \\\"node\\\"},\\n \\\"update\\\": \\\"pluck(treeAncestors('treeCalcs', datum.id), 'id')\\\"\\n },\\n {\\\"events\\\": {\\\"type\\\": \\\"mouseout\\\"}, \\\"update\\\": \\\"[0]\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"isExpanded\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"type\\\": \\\"click\\\", \\\"markname\\\": \\\"node\\\"},\\n \\\"update\\\": \\\"datum.children > 0 && indata('treeClickStorePerm', 'id', datum.childrenIds[0])?true:false\\\"\\n }\\n ]\\n },\\n {\\\"name\\\": \\\"xrange\\\", \\\"update\\\": \\\"[0, width]\\\"},\\n {\\\"name\\\": \\\"yrange\\\", \\\"update\\\": \\\"[0, height]\\\"},\\n {\\n \\\"name\\\": \\\"down\\\",\\n \\\"value\\\": null,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"touchend\\\", \\\"update\\\": \\\"null\\\"},\\n {\\\"events\\\": \\\"mousedown, touchstart\\\", \\\"update\\\": \\\"xy()\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"xcur\\\",\\n \\\"value\\\": null,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"mousedown, touchstart, touchend\\\", \\\"update\\\": \\\"slice(xdom)\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"ycur\\\",\\n \\\"value\\\": null,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"mousedown, touchstart, touchend\\\", \\\"update\\\": \\\"slice(ydom)\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"delta\\\",\\n \\\"value\\\": [0, 0],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"mousemove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\\"type\\\": \\\"mousedown\\\"},\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"mouseup\\\"}\\n ]\\n },\\n {\\n \\\"type\\\": \\\"touchmove\\\",\\n \\\"consume\\\": true,\\n \\\"filter\\\": \\\"event.touches.length === 1\\\"\\n }\\n ],\\n \\\"update\\\": \\\"down ? [down[0]-x(), down[1]-y()] : [0,0]\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"anchor\\\",\\n \\\"value\\\": [0, 0],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"wheel\\\",\\n \\\"update\\\": \\\"[invert('xscale', x()), invert('yscale', y())]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"type\\\": \\\"touchstart\\\",\\n \\\"filter\\\": \\\"event.touches.length===2\\\"\\n },\\n \\\"update\\\": \\\"[(xdom[0] + xdom[1]) / 2, (ydom[0] + ydom[1]) / 2]\\\"\\n }\\n ]\\n },\\n {\\\"name\\\": \\\"xext\\\", \\\"update\\\": \\\"[0,width]\\\"},\\n {\\\"name\\\": \\\"yext\\\", \\\"update\\\": \\\"[0,height]\\\"},\\n {\\n \\\"name\\\": \\\"zoom\\\",\\n \\\"value\\\": 1,\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"wheel!\\\",\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"dist2\\\"},\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"dist1 / dist2\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"dist1\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"type\\\": \\\"touchstart\\\",\\n \\\"filter\\\": \\\"event.touches.length===2\\\"\\n },\\n \\\"update\\\": \\\"pinchDistance(event)\\\"\\n },\\n {\\\"events\\\": {\\\"signal\\\": \\\"dist2\\\"}, \\\"update\\\": \\\"dist2\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"dist2\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"type\\\": \\\"touchmove\\\",\\n \\\"consume\\\": true,\\n \\\"filter\\\": \\\"event.touches.length===2\\\"\\n },\\n \\\"update\\\": \\\"pinchDistance(event)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"xdom\\\",\\n \\\"update\\\": \\\"slice(xext)\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"delta\\\"},\\n \\\"update\\\": \\\"[xcur[0] + span(xcur) * delta[0] / width, xcur[1] + span(xcur) * delta[0] / width]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"zoom\\\"},\\n \\\"update\\\": \\\"[anchor[0] + (xdom[0] - anchor[0]) * zoom, anchor[0] + (xdom[1] - anchor[0]) * zoom]\\\"\\n },\\n {\\\"events\\\": \\\"dblclick\\\", \\\"update\\\": \\\"[0,width]\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"ydom\\\",\\n \\\"update\\\": \\\"slice(yext)\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"delta\\\"},\\n \\\"update\\\": \\\"[ycur[0] + span(ycur) * delta[1] / height, ycur[1] + span(ycur) * delta[1] / height]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"zoom\\\"},\\n \\\"update\\\": \\\"[anchor[1] + (ydom[0] - anchor[1]) * zoom, anchor[1] + (ydom[1] - anchor[1]) * zoom]\\\"\\n },\\n {\\\"events\\\": \\\"dblclick\\\", \\\"update\\\": \\\"[0,height]\\\"}\\n ]\\n },\\n {\\\"name\\\": \\\"scaledImgW\\\", \\\"update\\\": \\\"(w/ span(xdom))*width\\\"},\\n {\\n \\\"name\\\": \\\"scaledImgH\\\",\\n \\\"update\\\": \\\"abs(h/ span(ydom))*height\\\"\\n },\\n\\n {\\\"name\\\": \\\"scaledNodeWidth\\\", \\\"update\\\": \\\"(nodeWidth/ span(xdom))*width\\\"},\\n {\\n \\\"name\\\": \\\"scaledNodeHeight\\\",\\n \\\"update\\\": \\\"abs(nodeHeight/ span(ydom))*height\\\"\\n },\\n {\\\"name\\\": \\\"scaledFont13\\\", \\\"update\\\": \\\"(13/ span(xdom))*width\\\"},\\n {\\\"name\\\": \\\"scaledFont12\\\", \\\"update\\\": \\\"(12/ span(xdom))*width\\\"},\\n {\\\"name\\\": \\\"scaledFont11\\\", \\\"update\\\": \\\"(11/ span(xdom))*width\\\"},\\n {\\\"name\\\": \\\"scaledKPIHeight\\\", \\\"update\\\": \\\"(5/ span(xdom))*width\\\"},\\n {\\\"name\\\": \\\"scaledLimit\\\", \\\"update\\\": \\\"(20/ span(xdom))*width\\\"}\\n ],\\n \\\"data\\\": [\\n {\\n \\\"name\\\": \\\"source\\\",\\n \\\"values\\\": [\\n { \\\"level1\\\": \\\"OTEL\\\", \\\"details\\\": \\\"Install Integration\\\",\\n \\\"info\\\":{\\n \\\"name\\\":\\\"OTEL Integration\\\",\\n \\\"description\\\":\\\"Go here to read the documentation of the OTEL services\\\",\\n \\\"references\\\":\\\"https://opentelemetry.io/\\\"\\n },\\n \\\"url\\\":\\\"http://localhost:5601/app/integrations#/available/otel-services\\\", \\\"kpi\\\": 75 },\\n {\\n \\\"level1\\\": \\\"OTEL\\\",\\n \\\"level2\\\": \\\"OTEL Ingestion\\\",\\n \\\"details\\\": \\\"Inspect Signal Rates\\\",\\n \\\"info\\\":{\\n \\\"name\\\":\\\"OTEL Ingestion\\\",\\n \\\"description\\\":\\\"Go here to review the (OTEL) signals ingestion rate\\\",\\n \\\"references\\\":\\\"https://opensearch.org/docs/latest/data-prepper/\\\"\\n },\\n \\\"url\\\":\\\"http://localhost:5601/app/dashboards#/view/data-ingestion-rate-dashboard-1_0_0_ID\\\",\\n \\\"kpi\\\": 80\\n },\\n {\\n \\\"level1\\\": \\\"OTEL\\\",\\n \\\"level2\\\": \\\"OTEL Integrations\\\",\\n \\\"details\\\": \\\"Services Dashboard\\\",\\n \\\"url\\\":\\\"http://localhost:5601/app/dashboards#/view/otel-services-dashboard-1_0_0_ID\\\",\\n \\\"info\\\":{\\n \\\"name\\\":\\\"OTEL Services\\\",\\n \\\"description\\\":\\\"Go here to monitor the application's services\\\",\\n \\\"references\\\":\\\"https://opentelemetry.io/docs/demo/services/\\\"\\n },\\n \\\"kpi\\\": 50\\n },\\n {\\n \\\"level1\\\": \\\"OTEL\\\",\\n \\\"level2\\\": \\\"OTEL Integrations\\\",\\n \\\"level3\\\" : \\\"Single Services Dashboard\\\",\\n \\\"details\\\": \\\"Deep Dive Service Details\\\",\\n \\\"info\\\":{\\n \\\"name\\\":\\\"Single Service Deep Dive\\\",\\n \\\"description\\\":\\\"Go here to analyze and monitor a specific service\\\",\\n \\\"references\\\":\\\"https://opentelemetry.io/docs/demo/services/\\\"\\n },\\n \\\"url\\\":\\\"http://localhost:5601/app/dashboards#/view/single-service-correlated-dashboard-1_0_0_ID\\\",\\n \\\"kpi\\\": 50\\n },\\n {\\n \\\"level1\\\": \\\"OTEL\\\",\\n \\\"level2\\\": \\\"OTEL Integrations\\\",\\n \\\"level3\\\" : \\\"Single Services Dashboard\\\",\\n \\\"level4\\\" : \\\"Service System Details\\\",\\n \\\"details\\\": \\\"Service System Metrics\\\",\\n \\\"url\\\":\\\"http://localhost:5601/app/dashboards#/view/apm-system-metrics-dashboard-1_0_0_ID\\\",\\n \\\"info\\\":{\\n \\\"name\\\":\\\"APM System Metrics Monitor\\\",\\n \\\"description\\\":\\\"Go here to analyze the services system's metrics \\\",\\n \\\"references\\\":\\\"https://opentelemetry.io/docs/concepts/signals/metrics/\\\"\\n },\\n \\\"kpi\\\": 50\\n },\\n {\\n \\\"level1\\\": \\\"OTEL\\\",\\n \\\"level2\\\": \\\"OTEL Integrations\\\",\\n \\\"level3\\\" : \\\"Single Services Dashboard\\\",\\n \\\"level4\\\" : \\\"Service Network Details\\\",\\n \\\"info\\\":{\\n \\\"name\\\":\\\"APM Network Metrics Monitor\\\",\\n \\\"description\\\":\\\"Go here to analyze the services network's metrics \\\",\\n \\\"references\\\":\\\"https://opentelemetry.io/docs/concepts/signals/metrics/\\\"\\n },\\n \\\"details\\\": \\\"Service Network Metrics\\\",\\n \\\"url\\\":\\\"http://localhost:5601/app/dashboards#/view/apm-network-metrics-dashboard-1_0_0_ID\\\",\\n \\\"kpi\\\": 50\\n }]},\\n {\\n \\\"name\\\": \\\"wideToTall\\\",\\n \\\"source\\\": \\\"source\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"{key: datum.level1,parent: null, details:datum.details, kpi:datum.kpi, link:datum.url, info:datum.info}\\\",\\n \\\"as\\\": \\\"l1\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"{key: datum.level1+ '|'+datum.level2,parent: datum.level1, details:datum.details, kpi:datum.kpi, link:datum.url, info:datum.info}\\\",\\n \\\"as\\\": \\\"l2\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"{key:datum.level1 + '|'+datum.level2+ '|'+datum.level3,parent: datum.level1+ '|'+datum.level2, details:datum.details, kpi:datum.kpi, link:datum.url, info:datum.info}\\\",\\n \\\"as\\\": \\\"l3\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"{key:datum.level1 + '|'+datum.level2+ '|'+datum.level3+ '|'+ datum.level4,parent: datum.level1 + '|'+datum.level2+ '|'+datum.level3, details:datum.details, kpi:datum.kpi, link:datum.url, info:datum.info}\\\",\\n \\\"as\\\": \\\"l4\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"{key:datum.level1 + '|'+datum.level2+ '|'+datum.level3+ '|'+ datum.level4+ '|'+ datum.level5,parent: datum.level1 + '|'+datum.level2+ '|'+datum.level3+ '|'+ datum.level4, details:datum.details, link:datum.url, info:datum.info, kpi:datum.kpi}\\\",\\n \\\"as\\\": \\\"l5\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"{key:datum.level1 + '|'+datum.level2+ '|'+datum.level3+ '|'+ datum.level4+ '|'+ datum.level5+ '|'+ datum.level6,parent: datum.level1 + '|'+datum.level2+ '|'+datum.level3+ '|'+ datum.level4+ '|'+ datum.level5, details:datum.details, link:datum.url, info:datum.info, kpi:datum.kpi}\\\",\\n \\\"as\\\": \\\"l6\\\"\\n },\\n {\\\"type\\\": \\\"fold\\\", \\\"fields\\\": [\\\"l1\\\", \\\"l2\\\", \\\"l3\\\", \\\"l4\\\", \\\"l5\\\",\\\"l6\\\"]},\\n {\\\"type\\\": \\\"project\\\", \\\"fields\\\": [\\\"key\\\", \\\"value\\\"]},\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"datum.value.key\\\", \\\"as\\\": \\\"id\\\"},\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"reverse(split(datum.value.key,'|'))[0]\\\",\\n \\\"as\\\": \\\"title\\\"\\n },\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"datum.value.parent\\\", \\\"as\\\": \\\"parent\\\"},\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"datum.title != 'null' && datum.title != 'undefined'\\\"\\n },\\n {\\\"type\\\": \\\"aggregate\\\", \\\"groupby\\\": [\\\"id\\\", \\\"parent\\\", \\\"title\\\", \\\"value\\\"]},\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"datum.value.details\\\", \\\"as\\\": \\\"details\\\"},\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"datum.value.kpi\\\", \\\"as\\\": \\\"kpi\\\"},\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"datum.value.link\\\", \\\"as\\\": \\\"link\\\"},\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"datum.value.info\\\", \\\"as\\\": \\\"info\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"treeCalcs\\\",\\n \\\"source\\\": \\\"wideToTall\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"stratify\\\", \\\"key\\\": \\\"id\\\", \\\"parentKey\\\": \\\"parent\\\"},\\n {\\n \\\"type\\\": \\\"tree\\\",\\n \\\"method\\\": {\\\"signal\\\": \\\"'tidy'\\\"},\\n \\\"separation\\\": {\\\"signal\\\": \\\"false\\\"},\\n \\\"as\\\": [\\\"y\\\", \\\"x\\\", \\\"depth\\\", \\\"children\\\"]\\n },\\n {\\\"as\\\": \\\"parent\\\", \\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"datum.parent\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"treeChildren\\\",\\n \\\"source\\\": \\\"treeCalcs\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"aggregate\\\",\\n \\\"groupby\\\": [\\\"parent\\\"],\\n \\\"fields\\\": [\\\"parent\\\"],\\n \\\"ops\\\": [\\\"values\\\"],\\n \\\"as\\\": [\\\"childrenObjects\\\"]\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"pluck(datum.childrenObjects,'id')\\\",\\n \\\"as\\\": \\\"childrenIds\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"treeAncestors\\\",\\n \\\"source\\\": \\\"treeCalcs\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"treeAncestors\\\",\\n \\\"expr\\\": \\\"treeAncestors('treeCalcs', datum.id, 'root')\\\"\\n },\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"treeAncestors\\\"]},\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"datum.treeAncestors.parent\\\",\\n \\\"as\\\": \\\"allParents\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"treeChildrenAll\\\",\\n \\\"source\\\": \\\"treeAncestors\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\n \\\"allParents\\\",\\n \\\"id\\\",\\n \\\"name\\\",\\n \\\"parent\\\",\\n \\\"x\\\",\\n \\\"y\\\",\\n \\\"depth\\\",\\n \\\"children\\\"\\n ]\\n },\\n {\\n \\\"type\\\": \\\"aggregate\\\",\\n \\\"fields\\\": [\\\"parent\\\", \\\"parent\\\", \\\"id\\\"],\\n \\\"ops\\\": [\\\"values\\\", \\\"count\\\", \\\"min\\\"],\\n \\\"groupby\\\": [\\\"allParents\\\"],\\n \\\"as\\\": [\\\"allChildrenObjects\\\", \\\"allChildrenCount\\\", \\\"id\\\"]\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"pluck(datum.allChildrenObjects,'id')\\\",\\n \\\"as\\\": \\\"allChildrenIds\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"treeClickStoreTemp\\\",\\n \\\"source\\\": \\\"treeAncestors\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"id\\\", \\\"name\\\", \\\"parent\\\", \\\"x\\\", \\\"y\\\", \\\"depth\\\", \\\"children\\\"]\\n },\\n {\\n \\\"type\\\": \\\"aggregate\\\",\\n \\\"fields\\\": [\\\"id\\\"],\\n \\\"ops\\\": [\\\"min\\\"],\\n \\\"groupby\\\": [\\\"id\\\", \\\"name\\\", \\\"parent\\\", \\\"x\\\", \\\"y\\\", \\\"depth\\\", \\\"children\\\"]\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"treeClickStorePerm\\\",\\n \\\"values\\\": [],\\n \\\"on\\\": [\\n {\\\"trigger\\\": \\\"startingDepth>=0\\\", \\\"insert\\\": \\\"data('treeClickStoreTemp')\\\"},\\n {\\n \\\"trigger\\\": \\\"node\\\",\\n \\\"insert\\\": \\\"!isExpanded? data('treeClickStoreTemp'):false\\\"\\n },\\n {\\n \\\"trigger\\\": \\\"node\\\",\\n \\\"remove\\\": \\\"isExpanded?data('treeClickStoreTemp'):false\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"treeLayout\\\",\\n \\\"source\\\": \\\"wideToTall\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"indata('treeClickStorePerm', 'id', datum.id)\\\"\\n },\\n {\\\"type\\\": \\\"stratify\\\", \\\"key\\\": \\\"id\\\", \\\"parentKey\\\": \\\"parent\\\"},\\n {\\n \\\"type\\\": \\\"tree\\\",\\n \\\"method\\\": {\\\"signal\\\": \\\"'tidy'\\\"},\\n \\\"nodeSize\\\": [\\n {\\\"signal\\\": \\\"nodeHeight+verticalNodeGap\\\"},\\n {\\\"signal\\\": \\\"nodeWidth+horizontalNodeGap\\\"}\\n ],\\n \\\"separation\\\": {\\\"signal\\\": \\\"false\\\"},\\n \\\"as\\\": [\\\"y\\\", \\\"x\\\", \\\"depth\\\", \\\"children\\\"]\\n },\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"datum.y+(height/2)\\\", \\\"as\\\": \\\"y\\\"},\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"scale('xscale',datum.x)\\\", \\\"as\\\": \\\"xscaled\\\"},\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"datum.info\\\",\\n \\\"as\\\": \\\"info\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"datum.link\\\",\\n \\\"as\\\": \\\"link\\\"\\n },\\n {\\\"as\\\": \\\"parent\\\", \\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"datum.parent\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"fullTreeLayout\\\",\\n \\\"source\\\": \\\"treeLayout\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"lookup\\\",\\n \\\"from\\\": \\\"treeChildren\\\",\\n \\\"key\\\": \\\"parent\\\",\\n \\\"fields\\\": [\\\"id\\\"],\\n \\\"values\\\": [\\\"childrenObjects\\\", \\\"childrenIds\\\"]\\n },\\n {\\n \\\"type\\\": \\\"lookup\\\",\\n \\\"from\\\": \\\"treeChildrenAll\\\",\\n \\\"key\\\": \\\"allParents\\\",\\n \\\"fields\\\": [\\\"id\\\"],\\n \\\"values\\\": [\\\"allChildrenIds\\\", \\\"allChildrenObjects\\\"]\\n },\\n {\\n \\\"type\\\": \\\"lookup\\\",\\n \\\"from\\\": \\\"treeCalcs\\\",\\n \\\"key\\\": \\\"id\\\",\\n \\\"fields\\\": [\\\"id\\\"],\\n \\\"values\\\": [\\\"children\\\"]\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"reverse(pluck(treeAncestors('treeCalcs', datum.id), 'id'))[1]\\\",\\n \\\"as\\\": \\\"treeParent\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"visibleNodes\\\",\\n \\\"source\\\": \\\"fullTreeLayout\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"indata('treeClickStorePerm', 'id', datum.id)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"maxWidthAndHeight\\\",\\n \\\"source\\\": \\\"visibleNodes\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"aggregate\\\",\\n \\\"groupby\\\": [\\\"depth\\\"],\\n \\\"fields\\\": [\\\"depth\\\", \\\"x\\\", \\\"y\\\"],\\n \\\"ops\\\": [\\\"count\\\", \\\"max\\\", \\\"max\\\"],\\n \\\"as\\\": [\\\"count\\\", \\\"x\\\", \\\"y\\\"]\\n },\\n {\\n \\\"type\\\": \\\"aggregate\\\",\\n \\\"fields\\\": [\\\"depth\\\", \\\"count\\\", \\\"x\\\", \\\"y\\\"],\\n \\\"ops\\\": [\\\"max\\\", \\\"max\\\", \\\"max\\\", \\\"max\\\"],\\n \\\"as\\\": [\\\"maxDepth\\\", \\\"maxNodes\\\", \\\"maxX\\\", \\\"maxY\\\"]\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"links\\\",\\n \\\"source\\\": \\\"treeLayout\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"treelinks\\\"},\\n {\\n \\\"type\\\": \\\"linkpath\\\",\\n \\\"orient\\\": \\\"horizontal\\\",\\n \\\"shape\\\": \\\"diagonal\\\",\\n \\\"sourceY\\\": {\\\"expr\\\": \\\"scale('yscale', datum.source.y)\\\"},\\n \\\"sourceX\\\": {\\\"expr\\\": \\\"scale('xscale', datum.source.x+nodeWidth)\\\"},\\n \\\"targetY\\\": {\\\"expr\\\": \\\"scale('yscale', datum.target.y)\\\"},\\n \\\"targetX\\\": {\\\"expr\\\": \\\"scale('xscale', datum.target.x)\\\"}\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\" indata('treeClickStorePerm', 'id', datum.target.id)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"xscale\\\",\\n \\\"zero\\\": false,\\n \\\"domain\\\": {\\\"signal\\\": \\\"xdom\\\"},\\n \\\"range\\\": {\\\"signal\\\": \\\"xrange\\\"}\\n },\\n {\\n \\\"name\\\": \\\"yscale\\\",\\n \\\"zero\\\": false,\\n \\\"domain\\\": {\\\"signal\\\": \\\"ydom\\\"},\\n \\\"range\\\": {\\\"signal\\\": \\\"yrange\\\"}\\n },\\n {\\n \\\"name\\\": \\\"kpiscale\\\",\\n \\\"zero\\\": false,\\n \\\"domain\\\": [0, 100],\\n \\\"range\\\": {\\\"signal\\\": \\\"[0,scaledNodeWidth]\\\"}\\n },\\n {\\n \\\"name\\\": \\\"colour\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"range\\\": [\\n \\\"#6f6f6f\\\",\\n \\\"#4472C4\\\",\\n \\\"#3A8E50\\\",\\n \\\"#ED7D31\\\",\\n \\\"#a63939\\\",\\n \\\"#6338a6\\\",\\n \\\"#3843a6\\\",\\n \\\"#38a695\\\"\\n ],\\n \\\"domain\\\": {\\\"data\\\": \\\"visibleNodes\\\", \\\"field\\\": \\\"treeParent\\\"}\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"path\\\",\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"links\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"path\\\": {\\\"field\\\": \\\"path\\\"},\\n \\\"strokeWidth\\\": {\\n \\\"signal\\\": \\\"indexof(nodeHighlight, datum.target.id)> -1? 2.5:0.4\\\"\\n },\\n \\\"stroke\\\": {\\n \\\"scale\\\": \\\"colour\\\",\\n \\\"signal\\\": \\\"reverse(pluck(treeAncestors('treeCalcs', datum.target.id), 'id'))[1]\\\"\\n }\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"node\\\",\\n \\\"description\\\": \\\"The parent node\\\",\\n \\\"type\\\": \\\"group\\\",\\n \\\"clip\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"visibleNodes\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"field\\\": \\\"x\\\", \\\"scale\\\": \\\"xscale\\\"},\\n \\\"width\\\": {\\\"signal\\\": \\\"scaledNodeWidth\\\"},\\n \\\"yc\\\": {\\\"field\\\": \\\"y\\\", \\\"scale\\\": \\\"yscale\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"scaledNodeHeight\\\"},\\n \\\"fill\\\": {\\n \\\"signal\\\": \\\"merge(hsl(scale('colour', datum.treeParent)), {l:0.94})\\\"\\n },\\n \\\"stroke\\\": {\\n \\\"signal\\\": \\\"merge(hsl(scale('colour', datum.treeParent)), {l:0.79})\\\"\\n },\\n \\\"cornerRadius\\\": {\\\"value\\\": 2},\\n \\\"cursor\\\": {\\\"signal\\\": \\\"datum.children>0?'pointer':''\\\"},\\n \\\"tooltip\\\": {\\\"signal\\\": \\\"\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"linkImage\\\",\\n \\\"type\\\": \\\"image\\\",\\n \\\"interactive\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"url\\\": {\\\"value\\\": \\\"https://icons.veryicon.com/png/o/education-technology/product-icon-of-apstar-big-data/opensearch-blue.png\\\"}\\n },\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 1},\\n \\\"x\\\": {\\\"signal\\\": \\\"(180/ span(xdom))*width\\\"},\\n \\\"y\\\": {\\\"signal\\\": \\\"-10\\\"},\\n \\\"width\\\": {\\\"signal\\\": \\\"scaledImgW\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"scaledImgH\\\"},\\n \\\"aspect\\\": {\\\"signal\\\": \\\"aspect\\\"},\\n \\\"smooth\\\": {\\\"signal\\\": \\\"smooth\\\"},\\n \\\"align\\\": {\\\"signal\\\": \\\"align\\\"},\\n \\\"baseline\\\": {\\\"signal\\\": \\\"baseline\\\"},\\n \\\"tooltip\\\": {\\\"signal\\\": \\\"parent.info\\\"}\\n\\n },\\n \\\"hover\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.5}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"infoImage\\\",\\n \\\"type\\\": \\\"image\\\",\\n \\\"interactive\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"url\\\": {\\\"value\\\": \\\"https://opensearch.org/assets/brand/SVG/Mark/opensearch_mark_default.svg\\\"}\\n },\\n \\\"update\\\": {\\n \\\"href\\\": {\\\"signal\\\":\\\"parent.link\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 1},\\n \\\"x\\\": {\\\"signal\\\": \\\"item.mark.group.x1\\\"},\\n \\\"y\\\": {\\\"signal\\\": \\\"-10\\\"},\\n \\\"width\\\": {\\\"signal\\\": \\\"scaledImgW\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"scaledImgH\\\"},\\n \\\"aspect\\\": {\\\"signal\\\": \\\"aspect\\\"},\\n \\\"smooth\\\": {\\\"signal\\\": \\\"smooth\\\"},\\n \\\"align\\\": {\\\"signal\\\": \\\"align\\\"},\\n \\\"baseline\\\": {\\\"signal\\\": \\\"baseline\\\"}\\n },\\n \\\"hover\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.5}\\n }\\n }\\n },\\n\\n {\\n \\\"name\\\": \\\"highlight\\\",\\n \\\"description\\\": \\\"highlight (seems like a Vega bug as this doens't work on the group element)\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"signal\\\": \\\"item.mark.group.x1\\\"},\\n \\\"y\\\": {\\\"signal\\\": \\\"0\\\"},\\n \\\"fill\\\": {\\n \\\"signal\\\": \\\"indexof(nodeHighlight, parent.id)> -1? merge(hsl(scale('colour', parent.treeParent)), {l:0.82}):0\\\"\\n },\\n \\\"stroke\\\": {\\n \\\"signal\\\": \\\"indexof(nodeHighlight, parent.id)> -1? merge(hsl(scale('colour', parent.treeParent)), {l:0.79}):0\\\"\\n },\\n \\\"height\\\": {\\\"signal\\\": \\\"item.mark.group.height\\\"},\\n \\\"width\\\": {\\\"signal\\\": \\\"item.mark.group.width\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"KPI background\\\",\\n \\\"description\\\": \\\"KPI background\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"interactive\\\": false,\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"signal\\\": \\\"item.mark.group.x1\\\"},\\n \\\"y\\\": {\\\"signal\\\": \\\"item.mark.group.height-scaledKPIHeight\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"scaledKPIHeight\\\"},\\n \\\"width\\\": {\\\"signal\\\": \\\"(item.mark.group.width)\\\"},\\n \\\"fill\\\": {\\\"scale\\\": \\\"colour\\\", \\\"signal\\\": \\\"parent.treeParent\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.2}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"KPI\\\",\\n \\\"description\\\": \\\"KPI\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"interactive\\\": false,\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"signal\\\": \\\"item.mark.group.x1\\\"},\\n \\\"y\\\": {\\\"signal\\\": \\\"item.mark.group.height-scaledKPIHeight\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"scaledKPIHeight\\\"},\\n \\\"width\\\": {\\\"signal\\\": \\\"scale('kpiscale',parent.kpi)\\\"},\\n \\\"fill\\\": {\\\"scale\\\": \\\"colour\\\", \\\"signal\\\": \\\"parent.treeParent\\\"}\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"text\\\",\\n \\\"interactive\\\": false,\\n \\\"name\\\": \\\"name\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"signal\\\": \\\"(10/ span(xdom))*width\\\"},\\n \\\"y\\\": {\\\"signal\\\": \\\"(6/ span(xdom))*width\\\"},\\n \\\"fontWeight\\\": {\\\"value\\\": \\\"600\\\"},\\n \\\"baseline\\\": {\\\"value\\\": \\\"top\\\"},\\n \\\"fill\\\": {\\\"scale\\\": \\\"colour\\\", \\\"signal\\\": \\\"parent.treeParent\\\"},\\n \\\"text\\\": {\\\"signal\\\": \\\"parent.details\\\"},\\n \\\"fontSize\\\": {\\\"signal\\\": \\\"scaledFont13\\\"},\\n \\\"limit\\\": {\\\"signal\\\": \\\"scaledNodeWidth-scaledLimit\\\"},\\n \\\"font\\\": {\\\"value\\\": \\\"Calibri\\\"}\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"text\\\",\\n \\\"interactive\\\": false,\\n \\\"name\\\": \\\"title\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"signal\\\": \\\"(10/ span(xdom))*width\\\"},\\n \\\"y\\\": {\\\"signal\\\": \\\"(22/ span(xdom))*width\\\"},\\n \\\"align\\\": {\\\"value\\\": \\\"left\\\"},\\n \\\"baseline\\\": {\\\"value\\\": \\\"top\\\"},\\n \\\"fill\\\": {\\\"signal\\\": \\\"'#4D4B44'\\\"},\\n \\\"text\\\": {\\\"signal\\\": \\\"parent.title\\\"},\\n \\\"fontSize\\\": {\\\"signal\\\": \\\"scaledFont11\\\"},\\n \\\"limit\\\": {\\\"signal\\\": \\\"scaledNodeWidth-scaledLimit\\\"},\\n \\\"font\\\": {\\\"value\\\": \\\"Calibri\\\"}\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"text\\\",\\n \\\"interactive\\\": false,\\n \\\"name\\\": \\\"node children\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"signal\\\": \\\"item.mark.group.width - (9/ span(xdom))*width\\\"},\\n \\\"y\\\": {\\\"signal\\\": \\\"item.mark.group.height/2\\\"},\\n \\\"align\\\": {\\\"value\\\": \\\"right\\\"},\\n \\\"baseline\\\": {\\\"value\\\": \\\"middle\\\"},\\n \\\"fill\\\": {\\\"scale\\\": \\\"colour\\\", \\\"signal\\\": \\\"parent.treeParent\\\"},\\n \\\"text\\\": {\\\"signal\\\": \\\"parent.children>0?parent.children:''\\\"},\\n \\\"fontSize\\\": {\\\"signal\\\": \\\"scaledFont12\\\"},\\n \\\"font\\\": {\\\"value\\\": \\\"Calibri\\\"}\\n }\\n }\\n }\\n ]\\n }\\n ]\\n}\"}}"},"id":"375873f0-121d-11ef-b612-e9a167e5758e","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMjQsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"system-services-metrics-tree-map","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"system-services-metrics-tree-map\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"padding\\\": 5,\\n\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"labels\\\", \\\"value\\\": true\\n },\\n {\\n \\\"name\\\": \\\"layout\\\", \\\"value\\\": \\\"tidy\\\"\\n },\\n {\\n \\\"name\\\": \\\"links\\\", \\\"value\\\": \\\"diagonal\\\"\\n \\n },\\n {\\n \\\"name\\\": \\\"separation\\\", \\\"value\\\": false\\n }\\n ],\\n\\n \\\"data\\\": [\\n{\\n \\\"name\\\": \\\"raw-data\\\",\\n \\\"values\\\": [\\n {\\\"id\\\": 1, \\\"name\\\": \\\"system\\\"},\\n {\\\"id\\\": 2, \\\"name\\\": \\\"disk\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 3, \\\"name\\\": \\\"io\\\", \\\"parent\\\": 2},\\n {\\\"id\\\": 4, \\\"name\\\": \\\"operations\\\", \\\"parent\\\": 2},\\n {\\\"id\\\": 5, \\\"name\\\": \\\"time\\\", \\\"parent\\\": 2},\\n {\\\"id\\\": 8, \\\"name\\\": \\\"cpu\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 9, \\\"name\\\": \\\"time\\\", \\\"parent\\\": 8},\\n {\\\"id\\\": 10, \\\"name\\\": \\\"utilization\\\", \\\"parent\\\": 8},\\n {\\\"id\\\": 11, \\\"name\\\": \\\"network\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 12, \\\"name\\\": \\\"dropped_packets\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 13, \\\"name\\\": \\\"errors\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 14, \\\"name\\\": \\\"io\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 15, \\\"name\\\": \\\"packets\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 16, \\\"name\\\": \\\"memory\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 17, \\\"name\\\": \\\"usage\\\", \\\"parent\\\": 16},\\n {\\\"id\\\": 18, \\\"name\\\": \\\"utilization\\\", \\\"parent\\\": 16},\\n {\\\"id\\\": 23, \\\"name\\\": \\\"connections\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 24, \\\"name\\\": \\\"swap\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 25, \\\"name\\\": \\\"usage\\\", \\\"parent\\\": 24},\\n {\\\"id\\\": 26, \\\"name\\\": \\\"utilization\\\", \\\"parent\\\": 24},\\n {\\\"id\\\": 30, \\\"name\\\": \\\"thread_count\\\", \\\"parent\\\": 1}\\n ]\\n},\\n\\n {\\n \\\"name\\\": \\\"tree\\\",\\n \\\"source\\\":\\\"raw-data\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"stratify\\\",\\n \\\"key\\\": \\\"id\\\",\\n \\\"parentKey\\\": \\\"parent\\\"\\n },\\n {\\n \\\"type\\\": \\\"lookup\\\",\\n \\\"from\\\": \\\"raw-data\\\",\\n \\\"key\\\": \\\"id\\\",\\n \\\"fields\\\": [\\\"parent\\\"],\\n \\\"as\\\": [\\\"parentData\\\"]\\n },\\n {\\n \\\"type\\\": \\\"tree\\\",\\n \\\"method\\\": {\\\"signal\\\": \\\"layout\\\"},\\n \\\"size\\\": [{\\\"signal\\\": \\\"height\\\"}, {\\\"signal\\\": \\\"width - 100\\\"}],\\n \\\"separation\\\": {\\\"signal\\\": \\\"separation\\\"},\\n \\\"as\\\": [\\\"y\\\", \\\"x\\\", \\\"depth\\\", \\\"children\\\"]\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"links\\\",\\n \\\"source\\\": \\\"tree\\\",\\n \\\"transform\\\": [\\n { \\\"type\\\": \\\"treelinks\\\" },\\n {\\n \\\"type\\\": \\\"linkpath\\\",\\n \\\"orient\\\": \\\"horizontal\\\",\\n \\\"shape\\\": {\\\"signal\\\": \\\"links\\\"}\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"parentName\\\",\\n \\\"expr\\\": \\\"datum.source.name\\\"\\n }\\n ]\\n }\\n ],\\n\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"parentColor\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"tree\\\", \\\"field\\\": \\\"parent\\\"},\\n \\\"range\\\": {\\\"scheme\\\": \\\"category20\\\"}\\n }\\n ],\\n\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"path\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"links\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"path\\\": {\\\"field\\\": \\\"path\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"#ccc\\\"}\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"tree\\\"},\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"size\\\": {\\\"value\\\": 200},\\n \\\"stroke\\\": {\\\"value\\\": \\\"#fff\\\"}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"field\\\": \\\"x\\\"},\\n \\\"y\\\": {\\\"field\\\": \\\"y\\\"},\\n \\\"fill\\\": {\\\"scale\\\": \\\"parentColor\\\", \\\"field\\\": \\\"parent\\\"},\\n \\\"size\\\": {\\\"signal\\\": \\\"datum.children ? 150 : 200\\\"}, \\n \\\"shape\\\": {\\\"signal\\\": \\\"datum.children ? 'circle' : 'square'\\\"}, \\n \\\"strokeWidth\\\": {\\\"value\\\": 1.5}\\n },\\n \\\"hover\\\": {\\n \\\"size\\\":{\\\"value\\\": 400},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"datum.parentData ? {'Name': datum.name, 'Parent Group': datum.parentData.name} : {'Name': datum.name}\\\"\\n\\n }\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"text\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"tree\\\"},\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"black\\\"},\\n \\\"text\\\": {\\\"field\\\": \\\"name\\\"},\\n \\\"fontSize\\\": {\\\"value\\\": 12},\\n \\\"baseline\\\": {\\\"value\\\": \\\"middle\\\"}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"field\\\": \\\"x\\\"},\\n \\\"y\\\": {\\\"field\\\": \\\"y\\\"},\\n \\\"dx\\\": {\\\"signal\\\": \\\"datum.children ? -7 : 7\\\"},\\n \\\"align\\\": {\\\"signal\\\": \\\"datum.children ? 'right' : 'left'\\\"},\\n \\\"opacity\\\": {\\\"signal\\\": \\\"labels ? 1 : 0\\\"}\\n }\\n }\\n }\\n ]\\n}\\n\"}}"},"id":"1df769d0-e2f6-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-05-18T08:15:50.408Z","version":"WzEzNTIsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"multi-line-selectable-date-metrics-request-rate","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"multi-line-selectable-date-metrics-request-rate\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"title\\\": \\\"Metrics Requests Rate\\\",\\n \\\"data\\\": [\\n {\\n \\\"name\\\": \\\"rawdata\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"%context%\\\": true,\\n \\\"%timefield%\\\": \\\"time\\\",\\n \\\"body\\\": {\\n \\\"size\\\": 0,\\n \\\"aggs\\\": {\\n \\\"metrics\\\": {\\n \\\"terms\\\": {\\n \\\"field\\\": \\\"name.keyword\\\",\\n \\\"size\\\": 10\\n },\\n \\\"aggs\\\": {\\n \\\"time_buckets\\\": {\\n \\\"date_histogram\\\": {\\n \\\"field\\\": \\\"time\\\",\\n \\\"interval\\\": {\\\"%autointerval%\\\": true},\\n \\\"extended_bounds\\\": {\\n \\\"min\\\": {\\\"%timefilter%\\\": \\\"min\\\"},\\n \\\"max\\\": {\\\"%timefilter%\\\": \\\"max\\\"}\\n },\\n \\\"min_doc_count\\\":0\\n }\\n }\\n }\\n }\\n\\n }\\n }\\n },\\n \\\"format\\\": {\\\"property\\\": \\\"aggregations.metrics.buckets\\\"}\\n },\\n {\\n \\\"name\\\": \\\"flatdata\\\",\\n \\\"source\\\": \\\"rawdata\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"flatten\\\",\\n \\\"fields\\\": [\\\"time_buckets.buckets\\\"],\\n \\\"as\\\": [\\\"val\\\"]\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"count\\\",\\n \\\"expr\\\":\\\"datum.val.doc_count\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"time\\\",\\n \\\"expr\\\": \\\"timeFormat(utcParse(datum.val.key_as_string,'%Y-%m-%dT%H:%M:%S.%LZ'), '%B %d, %Y %H:%M')\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"filter-key\\\",\\n \\\"expr\\\": \\\"datum.key + '.keyword'\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"hasSelection\\\",\\n \\\"values\\\": [{}],\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"filter\\\", \\\"expr\\\": \\\"selected[0] != selected[1]\\\"}\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"groupScale\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"padding\\\": 0.1,\\n \\\"domain\\\": {\\\"data\\\": \\\"rawdata\\\", \\\"field\\\": \\\"key\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"height\\\"\\n },\\n {\\n \\\"name\\\": \\\"xScale\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"flatdata\\\", \\\"field\\\": \\\"val.key\\\"},\\n \\\"range\\\": \\\"width\\\",\\n \\\"padding\\\": 5\\n },\\n {\\n \\\"name\\\": \\\"yScale\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"flatdata\\\", \\\"field\\\": \\\"val.doc_count\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"bandwidth('groupScale')\\\"}, 0]\\n },\\n {\\n \\\"name\\\": \\\"colorScale\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"rawdata\\\", \\\"field\\\": \\\"key\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"category\\\"\\n }\\n ],\\n \\\"axes\\\": [\\n {\\\"orient\\\": \\\"bottom\\\", \\\"scale\\\": \\\"xScale\\\", \\\"tickCount\\\": 5}\\n ],\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"currentX\\\",\\n \\\"value\\\": -1,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"view:mousemove\\\", \\\"update\\\": \\\"clamp(x(), 0, width)\\\"},\\n {\\\"events\\\": \\\"view:mouseout\\\", \\\"update\\\": \\\"-1\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"selected\\\",\\n \\\"value\\\": [0, 0],\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"@grapharea:mousedown\\\", \\\"update\\\": \\\"[x(), x()]\\\"},\\n {\\n \\\"events\\\": \\\"[@grapharea:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"[selected[0], clamp(x(), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"delta\\\"},\\n \\\"update\\\": \\\"clampRange([anchor[0] + delta, anchor[1] + delta], 0, width)\\\"\\n },\\n {\\n \\\"events\\\": \\\"[@leftEdge:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"[clamp(x(), 0, width), selected[1]]\\\"\\n },\\n {\\n \\\"events\\\": \\\"[@rightEdge:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"[selected[0], clamp(x(), 0, width)]\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"anchor\\\",\\n \\\"value\\\": null,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"@selectedRect:mousedown\\\", \\\"update\\\": \\\"selected\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"xDown\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"@selectedRect:mousedown\\\", \\\"update\\\": \\\"x()\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"delta\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"[@selectedRect:mousedown, window:mouseup] > window:mousemove!\\\", \\\"update\\\": \\\"x() - xDown\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"applyTimeFilter\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"@applyTimeFilterButton:click, @selectedRect:dblclick\\\",\\n \\\"update\\\": \\\"opensearchDashboardsSetTimeFilter(invert('xScale',selected[0]), invert('xScale',selected[1]))\\\"\\n },\\n {\\\"events\\\": \\\"@grapharea:dblclick\\\", \\\"update\\\": \\\"opensearchDashboardsSetTimeFilter('now-15d', 'now')\\\"}\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"grapharea\\\",\\n \\\"type\\\": \\\"group\\\",\\n \\\"from\\\": {\\n \\\"facet\\\": {\\\"name\\\": \\\"facets\\\", \\\"data\\\": \\\"rawdata\\\", \\\"field\\\": \\\"time_buckets.buckets\\\"}\\n },\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"y\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"field\\\": \\\"key\\\"},\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"x\\\": {\\\"value\\\": 0},\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0},\\n \\\"fill\\\": {\\\"value\\\": \\\"#000\\\"},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'metrics': datum['key']}\\\"\\n }\\n }\\n },\\n \\\"axes\\\": [\\n {\\n \\\"orient\\\": \\\"left\\\",\\n \\\"scale\\\": \\\"yScale\\\",\\n \\\"title\\\": {\\\"signal\\\": \\\"parent.key\\\"},\\n \\\"tickCount\\\": 4,\\n \\\"encode\\\": {\\n \\\"title\\\": {\\n \\\"name\\\": \\\"extFilter\\\",\\n \\\"interactive\\\": true,\\n \\\"update\\\": {\\n \\\"cursor\\\": {\\\"value\\\": \\\"pointer\\\"},\\n \\\"fontSize\\\": {\\\"value\\\": 8},\\n \\\"fill\\\": {\\\"value\\\": \\\"steelblue\\\"}\\n },\\n \\\"hover\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"}\\n }\\n }\\n }\\n }\\n ],\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"updateErrFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"source\\\": \\\"scope\\\", \\\"markname\\\": \\\"extErrorFilter\\\", \\\"type\\\": \\\"click\\\"},\\n \\\"update\\\": \\\"{'match': {'status.code': {'query': 2, 'type': 'phrase'}}}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"applyErrorFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"updateErrFilterObj\\\"},\\n \\\"update\\\": \\\"length(domain('groupScale')) > 1 ? opensearchDashboardsAddFilter(updateErrFilterObj) : opensearchDashboardsRemoveFilter(updateErrFilterObj)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"updateFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"source\\\": \\\"scope\\\", \\\"markname\\\": \\\"extFilter\\\", \\\"type\\\": \\\"click\\\"},\\n \\\"update\\\": \\\"{'match': {'name.keyword': {'query': parent.key , 'type': 'phrase'}}}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"applyFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"updateFilterObj\\\"},\\n \\\"update\\\": \\\"length(domain('groupScale')) > 1 ? opensearchDashboardsAddFilter(updateFilterObj) : opensearchDashboardsRemoveFilter(updateFilterObj)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"line\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"facets\\\"},\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"scale\\\": \\\"xScale\\\", \\\"field\\\": \\\"key\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"yScale\\\", \\\"field\\\": \\\"doc_count\\\"},\\n \\\"fill\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.2},\\n \\\"stroke\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}}\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"from\\\": {\\n \\\"data\\\": \\\"facets\\\"\\n },\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\n \\\"scale\\\": \\\"xScale\\\",\\n \\\"field\\\": \\\"key\\\"\\n },\\n \\\"y\\\": {\\n \\\"scale\\\": \\\"yScale\\\",\\n \\\"field\\\": \\\"doc_count\\\"\\n },\\n \\\"size\\\": {\\n \\\"value\\\": 8\\n },\\n \\\"stroke\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'Date': timeFormat(datum['key'], '%Y-%m-%d %H:%M'), 'Value': datum['doc_count']}\\\"\\n }\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"hasSelection\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"selectedRect\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.2},\\n \\\"cursor\\\": {\\\"value\\\": \\\"move\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"selected[0]\\\"},\\n \\\"x2\\\": {\\\"signal\\\": \\\"selected[1]\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"leftEdge\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"width\\\": {\\\"value\\\": 2},\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"},\\n \\\"cursor\\\": {\\\"value\\\": \\\"ew-resize\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"selected[0]\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"rightEdge\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"width\\\": {\\\"value\\\": 2},\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"},\\n \\\"cursor\\\": {\\\"value\\\": \\\"ew-resize\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"selected[1]\\\"}\\n }\\n }\\n }\\n ]\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"applyTimeFilterButton\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"hasSelection\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"cursor\\\": {\\\"value\\\": \\\"pointer\\\"},\\n \\\"cornerRadius\\\": {\\\"value\\\": 6},\\n \\\"fill\\\": {\\\"value\\\": \\\"#f5f5f5\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"#c1c1c1\\\"},\\n \\\"strokeWidth\\\": {\\\"value\\\": 2},\\n \\\"xc\\\": {\\\"signal\\\": \\\"width/2\\\"},\\n \\\"y\\\": {\\\"value\\\": 30},\\n \\\"width\\\": {\\\"value\\\": 80},\\n \\\"height\\\": {\\\"value\\\": 30},\\n \\\"opacity\\\": {\\\"value\\\": 1}\\n },\\n \\\"hover\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"text\\\",\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"xc\\\": {\\\"field\\\": {\\\"group\\\": \\\"width\\\"}, \\\"mult\\\": 0.5},\\n \\\"yc\\\": {\\\"field\\\": {\\\"group\\\": \\\"height\\\"}, \\\"mult\\\": 0.5, \\\"offset\\\": 2},\\n \\\"align\\\": {\\\"value\\\": \\\"center\\\"},\\n \\\"baseline\\\": {\\\"value\\\": \\\"middle\\\"},\\n \\\"fontWeight\\\": {\\\"value\\\": \\\"bold\\\"},\\n \\\"text\\\": {\\\"value\\\": \\\"Apply Filter\\\"}\\n }\\n }\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"rule\\\",\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"y\\\": {\\\"value\\\": 0},\\n \\\"y2\\\": {\\\"signal\\\": \\\"height\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"gray\\\"},\\n \\\"strokeDash\\\": {\\\"value\\\": [2, 1]},\\n \\\"x\\\": {\\\"signal\\\": \\\"max(currentX,0)\\\"},\\n \\\"strokeOpacity\\\": {\\\"signal\\\": \\\"currentX > 0 ? 1 : 0\\\"}\\n }\\n }\\n }\\n ]\\n}\\n\"}}"},"id":"8d7b0350-e406-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-05-18T09:39:12.145Z","version":"WzEzODIsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.network.dropped_packets\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.network.dropped_packets\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"network-dropped-packets-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"network-dropped-packets-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"Network Dropped Packets Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":5000,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.direction']\\\", \\\"as\\\":\\\"direction\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"Direction\\\\\\\": isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; Direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"direction\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"direction\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 1000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 1000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"Direction\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"1290f940-e34a-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMzcsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"apm-read_write-direction-pie","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"apm-read_write-direction-pie\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"R/W - Direction\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"attributes.metric.attributes.direction.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":500,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"R/W - Direction\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"59e73f60-e2fb-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMTQsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"state-metrics-pie-chart","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"state-metrics-pie-chart\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"states\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"attributes.metric.attributes.state.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":500,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"States\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"ed5276d0-e2fa-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMTUsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.network.errors\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.network.errors\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"network-errors-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"network-errors-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"Network Errors Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":5000,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.direction']\\\", \\\"as\\\":\\\"direction\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"Direction\\\\\\\": isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; Direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"direction\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"direction\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 1000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 1000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"Direction\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"e2088130-e349-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMzYsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.network.packets\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.network.packets\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"network.packets-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"network.packets-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"Network Packets Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":1500,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.state']\\\", \\\"as\\\":\\\"state\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"state\\\\\\\": isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; state: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; State: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"state\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"state\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 500000000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 500000000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"State\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"134ba140-e34b-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMzksMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.network.io\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.network.io\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"network.io-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"network.io-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"Network I/O Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":5000,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.direction']\\\", \\\"as\\\":\\\"direction\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"Direction\\\\\\\": isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; Direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"direction\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"direction\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 1000000000000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 1000000000000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"Direction\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"dc616700-e34a-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMzgsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"amp-devices-pie-chart","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"amp-devices-pie-chart\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"devices\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"attributes.metric.attributes.device.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":500,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"devices\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"93148140-e2fa-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMTMsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.network.connections\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.network.connections\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"network.connections-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"network.connections-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"Network Connections Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":1500,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.state']\\\", \\\"as\\\":\\\"state\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"state\\\\\\\": isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; state: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; State: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"state\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"state\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 10000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 10000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"State\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"62e6cf90-e34b-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzNDAsMl0="}
+{"attributes":{"description":"connections\npackets\nerrors\ndevices","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"type\":\"phrases\",\"key\":\"name.keyword\",\"value\":\"system.network.errors, system.network.dropped_packets, system.network.packets, system.network.io, system.network.connections\",\"params\":[\"system.network.errors\",\"system.network.dropped_packets\",\"system.network.packets\",\"system.network.io\",\"system.network.connections\"],\"alias\":null,\"negate\":false,\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"bool\":{\"should\":[{\"match_phrase\":{\"name.keyword\":\"system.network.errors\"}},{\"match_phrase\":{\"name.keyword\":\"system.network.dropped_packets\"}},{\"match_phrase\":{\"name.keyword\":\"system.network.packets\"}},{\"match_phrase\":{\"name.keyword\":\"system.network.io\"}},{\"match_phrase\":{\"name.keyword\":\"system.network.connections\"}}],\"minimum_should_match\":1}},\"$state\":{\"store\":\"appState\"}}]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"2.14.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":48,\"h\":13,\"i\":\"f1029985-936a-4b14-8717-bef98c88d484\"},\"panelIndex\":\"f1029985-936a-4b14-8717-bef98c88d484\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":0,\"y\":13,\"w\":48,\"h\":15,\"i\":\"b523c90e-37d7-4221-8a89-8fc709d29fc8\"},\"panelIndex\":\"b523c90e-37d7-4221-8a89-8fc709d29fc8\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":0,\"y\":28,\"w\":48,\"h\":18,\"i\":\"579912ae-2182-4248-9f46-640315dc369d\"},\"panelIndex\":\"579912ae-2182-4248-9f46-640315dc369d\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":24,\"y\":46,\"w\":24,\"h\":19,\"i\":\"055dbb32-0a99-4605-8980-ef01fdb29961\"},\"panelIndex\":\"055dbb32-0a99-4605-8980-ef01fdb29961\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":0,\"y\":46,\"w\":12,\"h\":11,\"i\":\"ecab2abf-0675-4aa7-a289-b96a22e46270\"},\"panelIndex\":\"ecab2abf-0675-4aa7-a289-b96a22e46270\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":12,\"y\":46,\"w\":12,\"h\":11,\"i\":\"d76c5ec8-c86f-4f65-8feb-1e7f2aa8331f\"},\"panelIndex\":\"d76c5ec8-c86f-4f65-8feb-1e7f2aa8331f\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":0,\"y\":57,\"w\":24,\"h\":19,\"i\":\"a610a74c-ed1c-4e5a-a639-e79075f8cbed\"},\"panelIndex\":\"a610a74c-ed1c-4e5a-a639-e79075f8cbed\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":24,\"y\":65,\"w\":24,\"h\":20,\"i\":\"eb67768e-8278-4169-ae7d-e4c549c6737b\"},\"panelIndex\":\"eb67768e-8278-4169-ae7d-e4c549c6737b\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":0,\"y\":76,\"w\":24,\"h\":20,\"i\":\"ad0e2bce-65d6-4eff-bb96-0543337500d9\"},\"panelIndex\":\"ad0e2bce-65d6-4eff-bb96-0543337500d9\",\"embeddableConfig\":{},\"panelRefName\":\"panel_8\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":24,\"y\":85,\"w\":24,\"h\":19,\"i\":\"5fc8b689-cf46-48ef-aa14-1f07c03931f1\"},\"panelIndex\":\"5fc8b689-cf46-48ef-aa14-1f07c03931f1\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Devices\",\"panelRefName\":\"panel_9\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":0,\"y\":96,\"w\":24,\"h\":19,\"i\":\"3b04d06d-7f0d-4c96-aabc-4170b23cd033\"},\"panelIndex\":\"3b04d06d-7f0d-4c96-aabc-4170b23cd033\",\"embeddableConfig\":{},\"panelRefName\":\"panel_10\"}]","timeRestore":false,"title":"APM-Network-Metrics","version":1},"id":"apm-network-metrics-dashboard-1_0_0_ID","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"375873f0-121d-11ef-b612-e9a167e5758e","name":"panel_0","type":"visualization"},{"id":"1df769d0-e2f6-11ee-9823-49d05dd2659c","name":"panel_1","type":"visualization"},{"id":"8d7b0350-e406-11ee-9823-49d05dd2659c","name":"panel_2","type":"visualization"},{"id":"1290f940-e34a-11ee-9823-49d05dd2659c","name":"panel_3","type":"visualization"},{"id":"59e73f60-e2fb-11ee-9823-49d05dd2659c","name":"panel_4","type":"visualization"},{"id":"ed5276d0-e2fa-11ee-9823-49d05dd2659c","name":"panel_5","type":"visualization"},{"id":"e2088130-e349-11ee-9823-49d05dd2659c","name":"panel_6","type":"visualization"},{"id":"134ba140-e34b-11ee-9823-49d05dd2659c","name":"panel_7","type":"visualization"},{"id":"dc616700-e34a-11ee-9823-49d05dd2659c","name":"panel_8","type":"visualization"},{"id":"93148140-e2fa-11ee-9823-49d05dd2659c","name":"panel_9","type":"visualization"},{"id":"62e6cf90-e34b-11ee-9823-49d05dd2659c","name":"panel_10","type":"visualization"}],"type":"dashboard","updated_at":"2024-05-18T08:18:50.385Z","version":"WzEzNTYsMl0="}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"droppedEventsCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"droppedLinksCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"durationInNanos\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"endTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"events.attributes.app@payment@transaction@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@payment@transaction@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@payment@transaction@id\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@quote@cost@total\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@cost@total\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@cost@total.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@shipping@cost@total\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@tracking@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@tracking@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@shipping@tracking@id\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@message.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@message\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@stacktrace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@stacktrace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@stacktrace\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@type\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.message@type\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.name\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.time\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"instrumentationScope.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.name\"}}},{\"count\":0,\"name\":\"instrumentationScope.version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.version\"}}},{\"count\":0,\"name\":\"kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"links.droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.spanId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.spanId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.spanId\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.traceId\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.traceState\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"parentSpanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.container@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.host@arch\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.host@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command_args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@executable@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@executable@path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@pid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@instance@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@auto@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@language\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@ad_request_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@ad_response_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@contextKeys\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@contextKeys@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@cart@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@currency@conversion@from\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@currency@conversion@to\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@email@recipient\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@featureflag@enabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@featureflag@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@filtered_products@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@filtered_products@list\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@card_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@card_valid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@charged\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@quantity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@products@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@products_recommended@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@quote@cost@total\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@quote@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@recommendation@cache_enabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@cost@total\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@tracking@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@zip_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@synthetic_request\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@user@currency\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@user@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.busy_ns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@filepath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@function\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@lineno\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@instance\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@redis@database_index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@redis@flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@statement\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.decode_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.grpc@error_message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.grpc@error_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@client_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@flavor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@request_content_length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@request_content_length_uncompressed\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@response_content_length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@route\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@scheme\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@status_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@status_text\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@target\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.idle_ns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.idle_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@client_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@destination@kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@destination@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@consumer@group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@destination@partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@message@offset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@message@payload_size_bytes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@host@addr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@peer@addr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@peer@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@transport\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.peer@service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.phoenix@action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.phoenix@plug\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.query_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.queue_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@grpc@status_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.sinatra@template_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.thread@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.thread@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.total_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"spanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"startTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status.code\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.durationInNanos\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.endTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.statusCode\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"traceState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"traceState\"}}}]","timeFieldName":"startTime","title":"otel-v1-apm-span*"},"id":"f67e4370-d84f-11ee-8f84-1b81ddb8574c","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMjYsMl0="}
+{"attributes":{"description":"otel-v1-amp-span* index ingestion rate graph","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ingest-spans-per-min","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ingest-spans-per-min\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"startTime\",\"timeRange\":{\"from\":\"2024-05-15T01:37:00.088Z\",\"to\":\"2024-05-16T14:43:39.441Z\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"m\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"count spans\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":true},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"3ba73630-14f2-11ef-8c27-a723ded8020e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"f67e4370-d84f-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:40:08.720Z","version":"WzEzNjIsMl0="}
+{"attributes":{"description":"otel-metrics-* (ss4o_metrics-*-*) index ingested metrics signals graph","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ingest-metrics-per-min","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ingest-metrics-per-min\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"time\",\"timeRange\":{\"from\":\"2024-05-15T01:37:00.088Z\",\"to\":\"2024-05-16T14:43:39.441Z\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"m\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"metrics count\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":true},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"03adaed0-14f2-11ef-8c27-a723ded8020e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:38:34.813Z","version":"WzEzNjEsMl0="}
+{"attributes":{"fields":"[{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"body\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"body.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"body\"}}},{\"count\":0,\"name\":\"droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"flags\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"instrumentationScope.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.name\"}}},{\"count\":0,\"name\":\"log.attributes.address\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.address.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.address\"}}},{\"count\":0,\"name\":\"log.attributes.contentRoot\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.contentRoot.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.contentRoot\"}}},{\"count\":0,\"name\":\"log.attributes.context\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.context.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.context\"}}},{\"count\":0,\"name\":\"log.attributes.envName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.envName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.envName\"}}},{\"count\":0,\"name\":\"log.attributes.heartbeatDuration\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.heartbeatDuration.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.heartbeatDuration\"}}},{\"count\":0,\"name\":\"log.attributes.interval\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.interval.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.interval\"}}},{\"count\":0,\"name\":\"log.attributes.now\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.now.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.now\"}}},{\"count\":0,\"name\":\"log.attributes.otelServiceName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.otelServiceName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.otelServiceName\"}}},{\"count\":0,\"name\":\"log.attributes.otelSpanID\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.otelSpanID.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.otelSpanID\"}}},{\"count\":0,\"name\":\"log.attributes.otelTraceID\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.otelTraceID.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.otelTraceID\"}}},{\"count\":0,\"name\":\"log.attributes.otelTraceSampled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.attributes.productId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.productId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.productId\"}}},{\"count\":0,\"name\":\"log.attributes.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.attributes.userId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.userId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.userId\"}}},{\"count\":0,\"name\":\"observedTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.container@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.container@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.container@id\"}}},{\"count\":0,\"name\":\"resource.attributes.host@arch\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.host@arch.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.host@arch\"}}},{\"count\":0,\"name\":\"resource.attributes.host@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.host@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.host@name\"}}},{\"count\":0,\"name\":\"resource.attributes.os@description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.os@description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.os@description\"}}},{\"count\":0,\"name\":\"resource.attributes.os@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.os@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.os@name\"}}},{\"count\":0,\"name\":\"resource.attributes.os@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.os@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.os@type\"}}},{\"count\":0,\"name\":\"resource.attributes.os@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.os@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.os@version\"}}},{\"count\":0,\"name\":\"resource.attributes.process@command\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@command.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@command\"}}},{\"count\":0,\"name\":\"resource.attributes.process@command_args\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@command_args.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@command_args\"}}},{\"count\":0,\"name\":\"resource.attributes.process@command_line\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@command_line.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@command_line\"}}},{\"count\":0,\"name\":\"resource.attributes.process@executable@path\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@executable@path.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@executable@path\"}}},{\"count\":0,\"name\":\"resource.attributes.process@owner\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@owner.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@owner\"}}},{\"count\":0,\"name\":\"resource.attributes.process@pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@runtime@description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@runtime@description\"}}},{\"count\":0,\"name\":\"resource.attributes.process@runtime@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@runtime@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@runtime@name\"}}},{\"count\":0,\"name\":\"resource.attributes.process@runtime@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@runtime@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@runtime@version\"}}},{\"count\":0,\"name\":\"resource.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.service@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.service@name\"}}},{\"count\":0,\"name\":\"resource.attributes.service@namespace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.service@namespace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.service@namespace\"}}},{\"count\":0,\"name\":\"resource.attributes.service@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.service@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.service@version\"}}},{\"count\":0,\"name\":\"resource.attributes.telemetry@auto@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.telemetry@auto@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.telemetry@auto@version\"}}},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@language\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@language.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.telemetry@sdk@language\"}}},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.telemetry@sdk@name\"}}},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.telemetry@sdk@version\"}}},{\"count\":0,\"name\":\"schemaUrl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"schemaUrl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"schemaUrl\"}}},{\"count\":0,\"name\":\"serviceName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"serviceName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"serviceName\"}}},{\"count\":0,\"name\":\"severityNumber\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severityText\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"severityText.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"severityText\"}}},{\"count\":0,\"name\":\"spanId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"spanId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"spanId\"}}},{\"count\":0,\"name\":\"time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"traceId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"traceId\"}}}]","timeFieldName":"time","title":"otel-events-*"},"id":"2ba34950-14f1-11ef-8c27-a723ded8020e","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2024-05-18T08:32:32.356Z","version":"WzEzNTksMl0="}
+{"attributes":{"description":"count services events","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ingest-services-events-count","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ingest-services-events-count\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"serviceName.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":25,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"service\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"a7d3d1a0-14f3-11ef-8c27-a723ded8020e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"2ba34950-14f1-11ef-8c27-a723ded8020e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:50:19.705Z","version":"WzEzNjUsMl0="}
+{"attributes":{"description":"services span signals count","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ingest-services-spans-count","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ingest-services-spans-count\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"serviceName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":25,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"service\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"fb5a9200-14f3-11ef-8c27-a723ded8020e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"f67e4370-d84f-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:52:39.840Z","version":"WzEzNjcsMl0="}
+{"attributes":{"description":"count services metrics signals","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ingest-services-metrics-count","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ingest-services-metrics-count\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"serviceName.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":25,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"service\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"d07ebcf0-14f3-11ef-8c27-a723ded8020e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:51:27.934Z","version":"WzEzNjYsMl0="}
+{"attributes":{"description":"otel-events index ingestion rate for otel events","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ingest-events-per-min","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ingest-events-per-min\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"events\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"time\",\"timeRange\":{\"from\":\"now-3w\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"m\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"events Per Min\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":true},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"events\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"events\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"a4a16850-14f1-11ef-8c27-a723ded8020e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"2ba34950-14f1-11ef-8c27-a723ded8020e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:35:55.348Z","version":"WzEzNjAsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"spans-count-per-minute-zoomable-chart","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"spans-count-per-minute-zoomable-chart\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"Signals\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"brush_store\\\"},\\n {\\n \\\"name\\\": \\\"raw-event\\\",\\n \\\"url\\\": {\\n \\\"%context%\\\": true,\\n \\\"%timefield%\\\": \\\"time\\\",\\n \\\"index\\\": \\\"otel-events-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\": 0,\\n \\\"aggs\\\": {\\n \\\"time_buckets\\\": {\\n \\\"date_histogram\\\": {\\n \\\"field\\\": \\\"time\\\",\\n \\\"interval\\\": {\\\"%autointerval%\\\": true},\\n \\\"extended_bounds\\\": {\\n \\\"min\\\": {\\\"%timefilter%\\\": \\\"min\\\"},\\n \\\"max\\\": {\\\"%timefilter%\\\": \\\"max\\\"}\\n },\\n \\\"min_doc_count\\\": 1\\n }\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"aggregations.time_buckets.buckets\\\",\\n \\\"type\\\": \\\"json\\\",\\n \\\"parse\\\": {\\\"key_as_string\\\": \\\"date\\\"}\\n }\\n }, \\n {\\n \\\"name\\\": \\\"raw-span\\\",\\n \\\"url\\\": {\\n \\\"%context%\\\": true,\\n \\\"%timefield%\\\": \\\"startTime\\\",\\n \\\"index\\\": \\\"otel-v1-apm-span-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\": 0,\\n \\\"aggs\\\": {\\n \\\"time_buckets\\\": {\\n \\\"date_histogram\\\": {\\n \\\"field\\\": \\\"startTime\\\",\\n \\\"interval\\\": {\\\"%autointerval%\\\": true},\\n \\\"extended_bounds\\\": {\\n \\\"min\\\": {\\\"%timefilter%\\\": \\\"min\\\"},\\n \\\"max\\\": {\\\"%timefilter%\\\": \\\"max\\\"}\\n },\\n \\\"min_doc_count\\\": 1\\n }\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"aggregations.time_buckets.buckets\\\",\\n \\\"type\\\": \\\"json\\\",\\n \\\"parse\\\": {\\\"key_as_string\\\": \\\"date\\\"}\\n }\\n },\\n {\\n \\\"name\\\": \\\"raw-metric\\\",\\n \\\"url\\\": {\\n \\\"%context%\\\": true,\\n \\\"%timefield%\\\": \\\"time\\\",\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\": 0,\\n \\\"aggs\\\": {\\n \\\"time_buckets\\\": {\\n \\\"date_histogram\\\": {\\n \\\"field\\\": \\\"time\\\",\\n \\\"interval\\\": {\\\"%autointerval%\\\": true},\\n \\\"extended_bounds\\\": {\\n \\\"min\\\": {\\\"%timefilter%\\\": \\\"min\\\"},\\n \\\"max\\\": {\\\"%timefilter%\\\": \\\"max\\\"}\\n },\\n \\\"min_doc_count\\\": 1\\n }\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"aggregations.time_buckets.buckets\\\",\\n \\\"type\\\": \\\"json\\\",\\n \\\"parse\\\": {\\\"key_as_string\\\": \\\"date\\\"}\\n }\\n },\\n {\\n \\\"name\\\": \\\"data_metric_0\\\",\\n \\\"source\\\": \\\"raw-metric\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"impute\\\",\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"groupby\\\": [],\\n \\\"key\\\": \\\"key_as_string\\\",\\n \\\"method\\\": \\\"value\\\",\\n \\\"value\\\": 0\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"key_as_string\\\"],\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"doc_count_start\\\", \\\"doc_count_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_metric_1\\\",\\n \\\"source\\\": \\\"raw-metric\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"impute\\\",\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"groupby\\\": [],\\n \\\"key\\\": \\\"key_as_string\\\",\\n \\\"method\\\": \\\"value\\\",\\n \\\"value\\\": 0\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"key_as_string\\\"],\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"doc_count_start\\\", \\\"doc_count_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_span_0\\\",\\n \\\"source\\\": \\\"raw-span\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"impute\\\",\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"groupby\\\": [],\\n \\\"key\\\": \\\"key_as_string\\\",\\n \\\"method\\\": \\\"value\\\",\\n \\\"value\\\": 0\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"key_as_string\\\"],\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"doc_count_start\\\", \\\"doc_count_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_span_1\\\",\\n \\\"source\\\": \\\"raw-span\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"impute\\\",\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"groupby\\\": [],\\n \\\"key\\\": \\\"key_as_string\\\",\\n \\\"method\\\": \\\"value\\\",\\n \\\"value\\\": 0\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"key_as_string\\\"],\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"doc_count_start\\\", \\\"doc_count_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_event_0\\\",\\n \\\"source\\\": \\\"raw-event\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"impute\\\",\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"groupby\\\": [],\\n \\\"key\\\": \\\"key_as_string\\\",\\n \\\"method\\\": \\\"value\\\",\\n \\\"value\\\": 0\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"key_as_string\\\"],\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"doc_count_start\\\", \\\"doc_count_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n }\\n ]\\n }\\n,\\n {\\n \\\"name\\\": \\\"data_event_1\\\",\\n \\\"source\\\": \\\"raw-event\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"impute\\\",\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"groupby\\\": [],\\n \\\"key\\\": \\\"key_as_string\\\",\\n \\\"method\\\": \\\"value\\\",\\n \\\"value\\\": 0\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"key_as_string\\\"],\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"doc_count_start\\\", \\\"doc_count_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n }\\n ]\\n } \\n ], \\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"concat_0_height\\\", \\\"value\\\": 250},\\n {\\\"name\\\": \\\"concat_1_height\\\", \\\"value\\\": 80},\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"brush\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"brush_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_0_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_0_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_0_span_marks\\\",\\n \\\"type\\\": \\\"area\\\",\\n \\\"clip\\\": true,\\n \\\"style\\\": [\\\"area\\\"],\\n \\\"sort\\\": {\\\"field\\\": \\\"datum[\\\\\\\"key_as_string\\\\\\\"]\\\"},\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_span_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"orient\\\": {\\\"value\\\": \\\"vertical\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.5},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'signal': 'spans','Date': timeFormat(datum['key_as_string'], '%b %d, %Y'), 'Doc Count': datum['doc_count']}\\\"\\n}\\n \\\"fill\\\": {\\\"value\\\": \\\"#4c78a8\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"key_as_string: \\\\\\\" + (timeFormat(datum[\\\\\\\"key_as_string\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; doc_count: \\\\\\\" + (format(datum[\\\\\\\"doc_count\\\\\\\"], \\\\\\\"\\\\\\\"))\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_0_x\\\", \\\"field\\\": \\\"key_as_string\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_0_y\\\", \\\"field\\\": \\\"doc_count_end\\\"},\\n \\\"y2\\\": {\\\"scale\\\": \\\"concat_0_y\\\", \\\"field\\\": \\\"doc_count_start\\\"},\\n \\\"defined\\\": {\\n \\\"signal\\\": \\\"isValid(datum[\\\\\\\"key_as_string\\\\\\\"]) && isFinite(+datum[\\\\\\\"key_as_string\\\\\\\"]) && isValid(datum[\\\\\\\"doc_count\\\\\\\"]) && isFinite(+datum[\\\\\\\"doc_count\\\\\\\"])\\\"\\n }\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"concat_0_event_marks\\\",\\n \\\"type\\\": \\\"area\\\",\\n \\\"clip\\\": true,\\n \\\"style\\\": [\\\"area\\\"],\\n \\\"sort\\\": {\\\"field\\\": \\\"datum[\\\\\\\"key_as_string\\\\\\\"]\\\"},\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_event_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"orient\\\": {\\\"value\\\": \\\"vertical\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.5},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'signal': 'logs-events', 'Date': timeFormat(datum['key_as_string'], '%b %d, %Y'), 'Doc Count': datum['doc_count']}\\\"\\n}\\n \\\"fill\\\": {\\\"value\\\": \\\"green\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"key_as_string: \\\\\\\" + (timeFormat(datum[\\\\\\\"key_as_string\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; doc_count: \\\\\\\" + (format(datum[\\\\\\\"doc_count\\\\\\\"], \\\\\\\"\\\\\\\"))\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_0_x\\\", \\\"field\\\": \\\"key_as_string\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_0_y\\\", \\\"field\\\": \\\"doc_count_end\\\"},\\n \\\"y2\\\": {\\\"scale\\\": \\\"concat_0_y\\\", \\\"field\\\": \\\"doc_count_start\\\"},\\n \\\"defined\\\": {\\n \\\"signal\\\": \\\"isValid(datum[\\\\\\\"key_as_string\\\\\\\"]) && isFinite(+datum[\\\\\\\"key_as_string\\\\\\\"]) && isValid(datum[\\\\\\\"doc_count\\\\\\\"]) && isFinite(+datum[\\\\\\\"doc_count\\\\\\\"])\\\"\\n }\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"concat_0_metric_marks\\\",\\n \\\"type\\\": \\\"area\\\",\\n \\\"clip\\\": true,\\n \\\"style\\\": [\\\"area\\\"],\\n \\\"sort\\\": {\\\"field\\\": \\\"datum[\\\\\\\"key_as_string\\\\\\\"]\\\"},\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_metric_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"orient\\\": {\\\"value\\\": \\\"vertical\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.5},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'signal': 'metrics','Date': timeFormat(datum['key_as_string'], '%b %d, %Y'), 'Doc Count': datum['doc_count']}\\\"\\n}\\n \\\"fill\\\": {\\\"value\\\": \\\"purple\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"key_as_string: \\\\\\\" + (timeFormat(datum[\\\\\\\"key_as_string\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; doc_count: \\\\\\\" + (format(datum[\\\\\\\"doc_count\\\\\\\"], \\\\\\\"\\\\\\\"))\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_0_x\\\", \\\"field\\\": \\\"key_as_string\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_0_y\\\", \\\"field\\\": \\\"doc_count_end\\\"},\\n \\\"y2\\\": {\\\"scale\\\": \\\"concat_0_y\\\", \\\"field\\\": \\\"doc_count_start\\\"},\\n \\\"defined\\\": {\\n \\\"signal\\\": \\\"isValid(datum[\\\\\\\"key_as_string\\\\\\\"]) && isFinite(+datum[\\\\\\\"key_as_string\\\\\\\"]) && isValid(datum[\\\\\\\"doc_count\\\\\\\"]) && isFinite(+datum[\\\\\\\"doc_count\\\\\\\"])\\\"\\n }\\n }\\n }\\n } ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_0_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_0_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_0_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"concat_0_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(concat_0_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_0_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_0_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(concat_0_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"brush_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"brush_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"brush_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[brush_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"brush_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"concat_1_x\\\\\\\", brush_key_as_string[0]), scale(\\\\\\\"concat_1_x\\\\\\\", brush_key_as_string[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"brush_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(brush_translate_anchor.extent_x, brush_translate_delta.x / span(brush_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"brush_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(brush_x, brush_zoom_anchor.x, brush_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"brush_key_as_string\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"brush_x\\\"},\\n \\\"update\\\": \\\"brush_x[0] === brush_x[1] ? null : invert(\\\\\\\"concat_1_x\\\\\\\", brush_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"brush_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"concat_1_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(brush_key_as_string) || (+invert(\\\\\\\"concat_1_x\\\\\\\", brush_x)[0] === +brush_key_as_string[0] && +invert(\\\\\\\"concat_1_x\\\\\\\", brush_x)[1] === +brush_key_as_string[1])) ? brush_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"brush_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"brush_key_as_string\\\"}],\\n \\\"update\\\": \\\"brush_key_as_string ? {unit: \\\\\\\"concat_1\\\\\\\", fields: brush_tuple_fields, values: [brush_key_as_string]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"brush_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"key_as_string\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"brush_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"brush_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(brush_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"brush_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"brush_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: brush_translate_anchor.x - x(unit), y: brush_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"brush_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"brush_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"brush_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"brush_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"brush_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"brush_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"brush_store\\\\\\\", brush_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"brush_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"brush_store\\\\\\\").length && data(\\\\\\\"brush_store\\\\\\\")[0].unit === \\\\\\\"concat_1\\\\\\\"\\\",\\n \\\"signal\\\": \\\"brush_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"brush_store\\\\\\\").length && data(\\\\\\\"brush_store\\\\\\\")[0].unit === \\\\\\\"concat_1\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"brush_store\\\\\\\").length && data(\\\\\\\"brush_store\\\\\\\")[0].unit === \\\\\\\"concat_1\\\\\\\"\\\",\\n \\\"signal\\\": \\\"brush_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"brush_store\\\\\\\").length && data(\\\\\\\"brush_store\\\\\\\")[0].unit === \\\\\\\"concat_1\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"area\\\",\\n \\\"style\\\": [\\\"area\\\"],\\n \\\"sort\\\": {\\\"field\\\": \\\"datum[\\\\\\\"key_as_string\\\\\\\"]\\\"},\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_span_1\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"orient\\\": {\\\"value\\\": \\\"vertical\\\"},\\n \\\"fill\\\": {\\\"value\\\": \\\"#4c78a8\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"key_as_string: \\\\\\\" + (timeFormat(datum[\\\\\\\"key_as_string\\\\\\\"], '%Y')) + \\\\\\\"; doc_count: \\\\\\\" + (format(datum[\\\\\\\"doc_count\\\\\\\"], \\\\\\\"\\\\\\\"))\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"key_as_string\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"doc_count_end\\\"},\\n \\\"y2\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"doc_count_start\\\"},\\n \\\"defined\\\": {\\n \\\"signal\\\": \\\"isValid(datum[\\\\\\\"key_as_string\\\\\\\"]) && isFinite(+datum[\\\\\\\"key_as_string\\\\\\\"]) && isValid(datum[\\\\\\\"doc_count\\\\\\\"]) && isFinite(+datum[\\\\\\\"doc_count\\\\\\\"])\\\"\\n }\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"brush_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"brush_store\\\\\\\").length && data(\\\\\\\"brush_store\\\\\\\")[0].unit === \\\\\\\"concat_1\\\\\\\"\\\",\\n \\\"signal\\\": \\\"brush_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"brush_store\\\\\\\").length && data(\\\\\\\"brush_store\\\\\\\")[0].unit === \\\\\\\"concat_1\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"brush_store\\\\\\\").length && data(\\\\\\\"brush_store\\\\\\\")[0].unit === \\\\\\\"concat_1\\\\\\\"\\\",\\n \\\"signal\\\": \\\"brush_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"brush_store\\\\\\\").length && data(\\\\\\\"brush_store\\\\\\\")[0].unit === \\\\\\\"concat_1\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"brush_x[0] !== brush_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"format\\\": \\\"%Y\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"tickCount\\\": 3,\\n \\\"labelOverlap\\\": true,\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"concat_0_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_span_0\\\", \\\"field\\\": \\\"key_as_string\\\"},\\n \\\"domainRaw\\\": {\\\"signal\\\": \\\"brush[\\\\\\\"key_as_string\\\\\\\"]\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"concat_0_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\n \\\"data\\\": \\\"data_span_0\\\",\\n \\\"fields\\\": [\\\"doc_count_start\\\", \\\"doc_count_end\\\"]\\n },\\n \\\"range\\\": [{\\\"signal\\\": \\\"concat_0_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_span_1\\\", \\\"field\\\": \\\"key_as_string\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\n \\\"data\\\": \\\"data_span_1\\\",\\n \\\"fields\\\": [\\\"doc_count_start\\\", \\\"doc_count_end\\\"]\\n },\\n \\\"range\\\": [{\\\"signal\\\": \\\"concat_1_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n }\\n ],\\n \\\"config\\\": {}\\n}\"}}"},"id":"ab8509a7-551c-4ba3-9315-e28bfb73c425","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzNTAsMl0="}
+{"attributes":{"description":"- ingested spans\n- ingested events\n- ingested metrics","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"2.14.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":48,\"h\":12,\"i\":\"1430366d-e697-4ffd-a499-104993138077\"},\"panelIndex\":\"1430366d-e697-4ffd-a499-104993138077\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":0,\"y\":12,\"w\":17,\"h\":15,\"i\":\"64dea64d-1bcb-4080-b20f-8baffea3160b\"},\"panelIndex\":\"64dea64d-1bcb-4080-b20f-8baffea3160b\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":17,\"y\":12,\"w\":15,\"h\":15,\"i\":\"f7472b0a-22ac-4f91-957c-2bb7da595185\"},\"panelIndex\":\"f7472b0a-22ac-4f91-957c-2bb7da595185\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":32,\"y\":27,\"w\":16,\"h\":15,\"i\":\"65bcdc05-b6bb-4f1a-80e7-9c50d0fb33fd\"},\"panelIndex\":\"65bcdc05-b6bb-4f1a-80e7-9c50d0fb33fd\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":0,\"y\":27,\"w\":17,\"h\":15,\"i\":\"e97e9976-7558-4372-94bd-9dfba0aaf4ff\"},\"panelIndex\":\"e97e9976-7558-4372-94bd-9dfba0aaf4ff\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":17,\"y\":27,\"w\":15,\"h\":15,\"i\":\"9a8880d1-6dec-44ba-adc4-0877a4bf1a7e\"},\"panelIndex\":\"9a8880d1-6dec-44ba-adc4-0877a4bf1a7e\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":32,\"y\":12,\"w\":16,\"h\":15,\"i\":\"9965f453-bef4-4f19-918a-b3b3c9622936\"},\"panelIndex\":\"9965f453-bef4-4f19-918a-b3b3c9622936\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":0,\"y\":42,\"w\":48,\"h\":16,\"i\":\"4071ddf6-7061-422a-925b-55d8a4dd1b48\"},\"panelIndex\":\"4071ddf6-7061-422a-925b-55d8a4dd1b48\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"signals-count-per-minute-zoomable-chart\",\"panelRefName\":\"panel_7\"}]","timeRestore":false,"title":"data-ingestion-rate-dashboard","version":1},"id":"data-ingestion-rate-dashboard-1_0_0_ID","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"375873f0-121d-11ef-b612-e9a167e5758e","name":"panel_0","type":"visualization"},{"id":"3ba73630-14f2-11ef-8c27-a723ded8020e","name":"panel_1","type":"visualization"},{"id":"03adaed0-14f2-11ef-8c27-a723ded8020e","name":"panel_2","type":"visualization"},{"id":"a7d3d1a0-14f3-11ef-8c27-a723ded8020e","name":"panel_3","type":"visualization"},{"id":"fb5a9200-14f3-11ef-8c27-a723ded8020e","name":"panel_4","type":"visualization"},{"id":"d07ebcf0-14f3-11ef-8c27-a723ded8020e","name":"panel_5","type":"visualization"},{"id":"a4a16850-14f1-11ef-8c27-a723ded8020e","name":"panel_6","type":"visualization"},{"id":"ab8509a7-551c-4ba3-9315-e28bfb73c425","name":"panel_7","type":"visualization"}],"type":"dashboard","updated_at":"2024-05-18T08:54:35.299Z","version":"WzEzNjgsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.disk.time\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.disk.time\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"system.disk.time-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"system.disk.time-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"System Disk Time Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":5000,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.direction']\\\", \\\"as\\\":\\\"direction\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"Direction\\\\\\\": isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; Direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"direction\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"direction\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 1000000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 1000000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"Direction\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"75095750-e2f7-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMTcsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.disk.io\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.disk.io\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"system.disk.io-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"system.disk.io-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"System Disk I/O Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":5000,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.direction']\\\", \\\"as\\\":\\\"direction\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"Direction\\\\\\\": isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; Direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"direction\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"direction\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 10000000000000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 10000000000000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"Direction\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"7a93f5a0-e242-11ee-80e1-bb1060c52777","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMTYsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.cpu.time\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.cpu.time\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"system.cpu.time-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"system.cpu.time-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"System CPU Time Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":1500,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.state']\\\", \\\"as\\\":\\\"state\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"state\\\\\\\": isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; state: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; State: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"state\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"state\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 5000000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 5000000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"State\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"209cae50-e2f8-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMTksMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.disk.operations\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.disk.operations\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"system.disk.ops-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"system.disk.ops-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"System Disk Ops Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":5000,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.direction']\\\", \\\"as\\\":\\\"direction\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"Direction\\\\\\\": isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; Direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"direction\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"direction\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 1000000000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 1000000000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"Direction\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"07f1a320-e2f7-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMTgsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.memory.usage\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.memory.usage\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"system.memory.usage-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"system.memory.usage-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"System CPU Utiliziation Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":1500,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.state']\\\", \\\"as\\\":\\\"state\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"state\\\\\\\": isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; state: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; State: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"state\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"state\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 10000000000000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 10000000000000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"State\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"a9a1a5c0-e30c-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMjEsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.cpu.utilization\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.cpu.utilization\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"system.cpu.utilization-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"system.cpu.utilization-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"System CPU Utiliziation Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":1500,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.state']\\\", \\\"as\\\":\\\"state\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.cpu']\\\", \\\"as\\\":\\\"cpu\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"state\\\\\\\": isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"], \\\\\\\"cpu\\\\\\\": isValid(datum[\\\\\\\"cpu\\\\\\\"]) ? datum[\\\\\\\"cpu\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"cpu\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; state: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; State: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"state\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"state\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 250], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 250, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"State\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"d1770e10-e30b-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMjAsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.swap.utilization\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.swap.utilization\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"system.swap.utilization-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"system.swap.utilization-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"System Swap Utilization Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":1500,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.state']\\\", \\\"as\\\":\\\"state\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"state\\\\\\\": isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; state: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; State: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"state\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"state\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 1000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 1000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"State\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"c0421e70-e30e-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMjMsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.swap.usage\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.swap.usage\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"system.swap.usage-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"system.swap.usage-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"System Swap Usage Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":1500,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.state']\\\", \\\"as\\\":\\\"state\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"state\\\\\\\": isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; state: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; State: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"state\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"state\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 10000000000000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 10000000000000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"State\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"81f2bbc0-e30e-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMjIsMl0="}
+{"attributes":{"description":"Disk\nCPU\nMemory\nSwap","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"name.keyword\",\"negate\":false,\"params\":[\"system.disk.operations\",\"system.disk.io\",\"system.disk.time\",\"system.cpu.utilization\",\"system.cpu.time\",\"system.swap.usage\",\"system.swap.utilization\",\"system.memory.usage\",\"system.memory.utilization\"],\"type\":\"phrases\",\"value\":\"system.disk.operations, system.disk.io, system.disk.time, system.cpu.utilization, system.cpu.time, system.swap.usage, system.swap.utilization, system.memory.usage, system.memory.utilization\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"bool\":{\"minimum_should_match\":1,\"should\":[{\"match_phrase\":{\"name.keyword\":\"system.disk.operations\"}},{\"match_phrase\":{\"name.keyword\":\"system.disk.io\"}},{\"match_phrase\":{\"name.keyword\":\"system.disk.time\"}},{\"match_phrase\":{\"name.keyword\":\"system.cpu.utilization\"}},{\"match_phrase\":{\"name.keyword\":\"system.cpu.time\"}},{\"match_phrase\":{\"name.keyword\":\"system.swap.usage\"}},{\"match_phrase\":{\"name.keyword\":\"system.swap.utilization\"}},{\"match_phrase\":{\"name.keyword\":\"system.memory.usage\"}},{\"match_phrase\":{\"name.keyword\":\"system.memory.utilization\"}}]}}}]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{},\"gridData\":{\"h\":13,\"i\":\"f3f078a7-0ba8-48d2-964f-517785ffe89c\",\"w\":48,\"x\":0,\"y\":0},\"panelIndex\":\"f3f078a7-0ba8-48d2-964f-517785ffe89c\",\"version\":\"2.14.0\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"b523c90e-37d7-4221-8a89-8fc709d29fc8\",\"w\":48,\"x\":0,\"y\":13},\"panelIndex\":\"b523c90e-37d7-4221-8a89-8fc709d29fc8\",\"version\":\"2.14.0\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":24,\"i\":\"e5a1b63c-94ea-412e-8883-665faf63cce1\",\"w\":48,\"x\":0,\"y\":28},\"panelIndex\":\"e5a1b63c-94ea-412e-8883-665faf63cce1\",\"version\":\"2.14.0\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":19,\"i\":\"6458ae1e-bde0-4b99-8eb6-01347037d6af\",\"w\":24,\"x\":24,\"y\":52},\"panelIndex\":\"6458ae1e-bde0-4b99-8eb6-01347037d6af\",\"version\":\"2.14.0\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"5fc8b689-cf46-48ef-aa14-1f07c03931f1\",\"w\":8,\"x\":0,\"y\":52},\"panelIndex\":\"5fc8b689-cf46-48ef-aa14-1f07c03931f1\",\"version\":\"2.14.0\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"ecab2abf-0675-4aa7-a289-b96a22e46270\",\"w\":8,\"x\":8,\"y\":52},\"panelIndex\":\"ecab2abf-0675-4aa7-a289-b96a22e46270\",\"version\":\"2.14.0\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"d76c5ec8-c86f-4f65-8feb-1e7f2aa8331f\",\"w\":8,\"x\":16,\"y\":52},\"panelIndex\":\"d76c5ec8-c86f-4f65-8feb-1e7f2aa8331f\",\"version\":\"2.14.0\",\"panelRefName\":\"panel_6\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":19,\"i\":\"f870ea66-8db2-4bf0-a5bc-9d9fc5335c60\",\"w\":24,\"x\":0,\"y\":63},\"panelIndex\":\"f870ea66-8db2-4bf0-a5bc-9d9fc5335c60\",\"version\":\"2.14.0\",\"panelRefName\":\"panel_7\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":20,\"i\":\"bfbf3046-2e4d-4460-8be9-a880a584dc4f\",\"w\":24,\"x\":24,\"y\":71},\"panelIndex\":\"bfbf3046-2e4d-4460-8be9-a880a584dc4f\",\"version\":\"2.14.0\",\"panelRefName\":\"panel_8\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":20,\"i\":\"8ef7873e-bdb9-4f23-9cad-dbe40ca9e93a\",\"w\":24,\"x\":0,\"y\":82},\"panelIndex\":\"8ef7873e-bdb9-4f23-9cad-dbe40ca9e93a\",\"version\":\"2.14.0\",\"panelRefName\":\"panel_9\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":19,\"i\":\"4ec60667-68a6-4437-bfd9-94a952b44c75\",\"w\":24,\"x\":24,\"y\":91},\"panelIndex\":\"4ec60667-68a6-4437-bfd9-94a952b44c75\",\"version\":\"2.14.0\",\"panelRefName\":\"panel_10\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":19,\"i\":\"7d4d0ddc-e20e-4453-8a76-e77a9fd14ff0\",\"w\":24,\"x\":0,\"y\":102},\"panelIndex\":\"7d4d0ddc-e20e-4453-8a76-e77a9fd14ff0\",\"version\":\"2.14.0\",\"panelRefName\":\"panel_11\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":19,\"i\":\"0291109c-5260-4d19-948d-4ef628a25a24\",\"w\":24,\"x\":24,\"y\":110},\"panelIndex\":\"0291109c-5260-4d19-948d-4ef628a25a24\",\"version\":\"2.14.0\",\"panelRefName\":\"panel_12\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":19,\"i\":\"c921860a-6557-4b70-b582-d7bc6d4bcbb2\",\"w\":24,\"x\":0,\"y\":121},\"panelIndex\":\"c921860a-6557-4b70-b582-d7bc6d4bcbb2\",\"version\":\"2.14.0\",\"panelRefName\":\"panel_13\"}]","timeRestore":false,"title":"APM-System-Metrics","version":1},"id":"apm-system-metrics-dashboard-1_0_0_ID","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"375873f0-121d-11ef-b612-e9a167e5758e","name":"panel_0","type":"visualization"},{"id":"1df769d0-e2f6-11ee-9823-49d05dd2659c","name":"panel_1","type":"visualization"},{"id":"8d7b0350-e406-11ee-9823-49d05dd2659c","name":"panel_2","type":"visualization"},{"id":"75095750-e2f7-11ee-9823-49d05dd2659c","name":"panel_3","type":"visualization"},{"id":"93148140-e2fa-11ee-9823-49d05dd2659c","name":"panel_4","type":"visualization"},{"id":"59e73f60-e2fb-11ee-9823-49d05dd2659c","name":"panel_5","type":"visualization"},{"id":"ed5276d0-e2fa-11ee-9823-49d05dd2659c","name":"panel_6","type":"visualization"},{"id":"7a93f5a0-e242-11ee-80e1-bb1060c52777","name":"panel_7","type":"visualization"},{"id":"209cae50-e2f8-11ee-9823-49d05dd2659c","name":"panel_8","type":"visualization"},{"id":"07f1a320-e2f7-11ee-9823-49d05dd2659c","name":"panel_9","type":"visualization"},{"id":"a9a1a5c0-e30c-11ee-9823-49d05dd2659c","name":"panel_10","type":"visualization"},{"id":"d1770e10-e30b-11ee-9823-49d05dd2659c","name":"panel_11","type":"visualization"},{"id":"c0421e70-e30e-11ee-9823-49d05dd2659c","name":"panel_12","type":"visualization"},{"id":"81f2bbc0-e30e-11ee-9823-49d05dd2659c","name":"panel_13","type":"visualization"}],"type":"dashboard","updated_at":"2024-05-18T09:39:46.240Z","version":"WzEzODMsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"single-service-metrics-tree-map","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"single-service-metrics-tree-map\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"padding\\\": 5,\\n\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"labels\\\", \\\"value\\\": true\\n },\\n {\\n \\\"name\\\": \\\"layout\\\", \\\"value\\\": \\\"tidy\\\" },\\n {\\n \\\"name\\\": \\\"links\\\", \\\"value\\\": \\\"diagonal\\\"\\n },\\n {\\n \\\"name\\\": \\\"separation\\\", \\\"value\\\": false\\n }\\n ],\\n\\n \\\"data\\\": [\\n{\\n \\\"name\\\": \\\"raw-data\\\",\\n \\\"values\\\": [\\n {\\\"id\\\": 0, \\\"name\\\": \\\"recommendationservice\\\"},\\n {\\\"id\\\": 1, \\\"name\\\": \\\"system\\\", \\\"parent\\\": 0},\\n {\\\"id\\\": 2, \\\"name\\\": \\\"disk\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 3, \\\"name\\\": \\\"io\\\", \\\"parent\\\": 2},\\n {\\\"id\\\": 4, \\\"name\\\": \\\"operations\\\", \\\"parent\\\": 2},\\n {\\\"id\\\": 5, \\\"name\\\": \\\"time\\\", \\\"parent\\\": 2},\\n {\\\"id\\\": 6, \\\"name\\\": \\\"calls\\\", \\\"parent\\\": 0},\\n {\\\"id\\\": 7, \\\"name\\\": \\\"duration\\\", \\\"parent\\\": 0},\\n {\\\"id\\\": 8, \\\"name\\\": \\\"cpu\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 9, \\\"name\\\": \\\"time\\\", \\\"parent\\\": 8},\\n {\\\"id\\\": 10, \\\"name\\\": \\\"utilization\\\", \\\"parent\\\": 8},\\n {\\\"id\\\": 11, \\\"name\\\": \\\"network\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 12, \\\"name\\\": \\\"dropped_packets\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 13, \\\"name\\\": \\\"errors\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 14, \\\"name\\\": \\\"io\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 15, \\\"name\\\": \\\"packets\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 16, \\\"name\\\": \\\"memory\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 17, \\\"name\\\": \\\"usage\\\", \\\"parent\\\": 16},\\n {\\\"id\\\": 18, \\\"name\\\": \\\"utilization\\\", \\\"parent\\\": 16},\\n {\\\"id\\\": 19, \\\"name\\\": \\\"process\\\", \\\"parent\\\": 0},\\n {\\\"id\\\": 20, \\\"name\\\": \\\"runtime\\\", \\\"parent\\\": 19},\\n {\\\"id\\\": 21, \\\"name\\\": \\\"cpython\\\", \\\"parent\\\": 20},\\n {\\\"id\\\": 22, \\\"name\\\": \\\"gc_count\\\", \\\"parent\\\": 21},\\n {\\\"id\\\": 23, \\\"name\\\": \\\"connections\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 24, \\\"name\\\": \\\"swap\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 25, \\\"name\\\": \\\"usage\\\", \\\"parent\\\": 24},\\n {\\\"id\\\": 26, \\\"name\\\": \\\"utilization\\\", \\\"parent\\\": 24},\\n {\\\"id\\\": 27, \\\"name\\\": \\\"cpu_time\\\", \\\"parent\\\": 21},\\n {\\\"id\\\": 28, \\\"name\\\": \\\"memory\\\", \\\"parent\\\": 21},\\n {\\\"id\\\": 29, \\\"name\\\": \\\"app_recommendations_counter\\\", \\\"parent\\\": 0},\\n {\\\"id\\\": 30, \\\"name\\\": \\\"thread_count\\\", \\\"parent\\\": 1}\\n ]\\n},\\n\\n {\\n \\\"name\\\": \\\"tree\\\",\\n \\\"source\\\":\\\"raw-data\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"stratify\\\",\\n \\\"key\\\": \\\"id\\\",\\n \\\"parentKey\\\": \\\"parent\\\"\\n },\\n {\\n \\\"type\\\": \\\"lookup\\\",\\n \\\"from\\\": \\\"raw-data\\\",\\n \\\"key\\\": \\\"id\\\",\\n \\\"fields\\\": [\\\"parent\\\"],\\n \\\"as\\\": [\\\"parentData\\\"]\\n },\\n {\\n \\\"type\\\": \\\"tree\\\",\\n \\\"method\\\": {\\\"signal\\\": \\\"layout\\\"},\\n \\\"size\\\": [{\\\"signal\\\": \\\"height\\\"}, {\\\"signal\\\": \\\"width - 100\\\"}],\\n \\\"separation\\\": {\\\"signal\\\": \\\"separation\\\"},\\n \\\"as\\\": [\\\"y\\\", \\\"x\\\", \\\"depth\\\", \\\"children\\\"]\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"links\\\",\\n \\\"source\\\": \\\"tree\\\",\\n \\\"transform\\\": [\\n { \\\"type\\\": \\\"treelinks\\\" },\\n {\\n \\\"type\\\": \\\"linkpath\\\",\\n \\\"orient\\\": \\\"horizontal\\\",\\n \\\"shape\\\": {\\\"signal\\\": \\\"links\\\"}\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"parentName\\\",\\n \\\"expr\\\": \\\"datum.source.name\\\"\\n }\\n ]\\n }\\n ],\\n\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"parentColor\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"tree\\\", \\\"field\\\": \\\"parent\\\"},\\n \\\"range\\\": {\\\"scheme\\\": \\\"category20\\\"}\\n }\\n ],\\n\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"path\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"links\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"path\\\": {\\\"field\\\": \\\"path\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"#ccc\\\"}\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"tree\\\"},\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"size\\\": {\\\"value\\\": 200},\\n \\\"stroke\\\": {\\\"value\\\": \\\"#fff\\\"}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"field\\\": \\\"x\\\"},\\n \\\"y\\\": {\\\"field\\\": \\\"y\\\"},\\n \\\"fill\\\": {\\\"scale\\\": \\\"parentColor\\\", \\\"field\\\": \\\"parent\\\"},\\n \\\"size\\\": {\\\"signal\\\": \\\"datum.children ? 150 : 200\\\"}, \\n \\\"shape\\\": {\\\"signal\\\": \\\"datum.children ? 'circle' : 'square'\\\"}, \\n \\\"strokeWidth\\\": {\\\"value\\\": 1.5}\\n },\\n \\\"hover\\\": {\\n \\\"size\\\":{\\\"value\\\": 400},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"datum.parentData ? {'Name': datum.name, 'Parent Group': datum.parentData.name} : {'Name': datum.name}\\\"\\n\\n }\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"text\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"tree\\\"},\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"black\\\"},\\n \\\"text\\\": {\\\"field\\\": \\\"name\\\"},\\n \\\"fontSize\\\": {\\\"value\\\": 12},\\n \\\"baseline\\\": {\\\"value\\\": \\\"middle\\\"}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"field\\\": \\\"x\\\"},\\n \\\"y\\\": {\\\"field\\\": \\\"y\\\"},\\n \\\"dx\\\": {\\\"signal\\\": \\\"datum.children ? -7 : 7\\\"},\\n \\\"align\\\": {\\\"signal\\\": \\\"datum.children ? 'right' : 'left'\\\"},\\n \\\"opacity\\\": {\\\"signal\\\": \\\"labels ? 1 : 0\\\"}\\n }\\n }\\n }\\n ]\\n}\\n\"}}"},"id":"a75f6330-d9d2-11ee-9203-cf873e97f443","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-05-18T08:16:42.784Z","version":"WzEzNTMsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"services-summary-table","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"services-summary-table\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"requests\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"serviceName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"services\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"percentiles\",\"params\":{\"field\":\"durationInNanos\",\"percents\":[95],\"customLabel\":\"duration\"},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"status.code\",\"customLabel\":\"status\"},\"schema\":\"metric\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"traceId\",\"customLabel\":\"traces\"},\"schema\":\"metric\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"traceGroup\",\"customLabel\":\"groups\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"row\":true}}"},"id":"e7c75468-4e40-4b30-adad-b1d64962c76f","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"f67e4370-d84f-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMjcsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"traces-by-duration","uiStateJSON":"{\"vis\":{\"sortColumn\":{\"colIndex\":2,\"direction\":\"desc\"},\"columnsWidth\":[{\"colIndex\":1,\"width\":182.66666666666669},{\"colIndex\":0,\"width\":398.16666666666663},{\"colIndex\":3,\"width\":253.05555555555557},{\"colIndex\":2,\"width\":222.5555555555556}]}}","version":1,"visState":"{\"title\":\"traces-by-duration\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"amount\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"traceId\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"traces\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"durationInNanos\",\"customLabel\":\"avg duration\"},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"percentiles\",\"params\":{\"field\":\"durationInNanos\",\"percents\":[75,95]},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"row\":true}}"},"id":"f7ed5710-23c5-485e-8d2e-5d91c7530a7c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"f67e4370-d84f-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMjgsMl0="}
+{"attributes":{"description":"traces gantt chart representing a trace transaction","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"traces-gantt-chart","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"traces-gantt-chart\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega-lite/v5.json\\\",\\n\\n \\\"data\\\": {\\n \\\"url\\\" :{\\n \\\"%context%\\\": \\\"true\\\",\\n \\\"%timefield%\\\": \\\"startTime\\\",\\n \\\"index\\\": \\\"otel-v1-apm-span-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\": 75\\n }\\n }\\n \\\"format\\\":{\\n \\\"type\\\": \\\"json\\\",\\n \\\"property\\\":\\\"hits.hits\\\"\\n }\\n },\\n \\\"transform\\\": [\\n{\\\"calculate\\\": \\\"datum._source.durationInNanos / 1000000\\\", \\\"as\\\": \\\"durationInMs\\\"},\\n {\\n \\\"window\\\": [\\n {\\n \\\"op\\\": \\\"max\\\",\\n \\\"field\\\": \\\"durationInMs\\\",\\n \\\"as\\\": \\\"maxDuration\\\"\\n }\\n ],\\n \\\"frame\\\": [null, null]\\n },\\n {\\n \\\"calculate\\\": \\\"datum.durationInMs / datum.maxDuration\\\",\\n \\\"as\\\": \\\"normalizedDuration\\\"\\n },\\n { \\\"calculate\\\": \\\"datum._source.traceGroup\\\", \\\"as\\\": \\\"traceGroup\\\"},\\n { \\\"calculate\\\": \\\"toDate(datum._source.startTime)\\\", \\\"as\\\": \\\"currentDate\\\"},\\n { \\\"calculate\\\": \\\"toDate(datum._source.startTime)\\\", \\\"as\\\": \\\"startTime\\\"},\\n {\\n \\\"calculate\\\": \\\"format(datum.durationInMs, '.1f') + 'ms'\\\",\\n \\\"as\\\": \\\"formattedDuration\\\"\\n }, {\\n \\\"calculate\\\": \\\"toDate(datum._source.endTime)\\\", \\\"as\\\": \\\"endTime\\\" },\\n {\\n \\\"window\\\": [{\\\"op\\\": \\\"row_number\\\", \\\"as\\\": \\\"running_number\\\"}],\\n \\\"groupby\\\": [\\\"_source.traceId\\\"],\\n \\\"sort\\\": [{\\\"field\\\": \\\"currentDate\\\"}]\\n },\\n {\\n \\\"calculate\\\": \\\"datum._source.traceId + ' | ' + datum._source.serviceName + ' | Start:' + toDate(datum._source.startTime) + ' #' + datum['running_number']\\\",\\n \\\"as\\\": \\\"project_full_descr\\\"\\n }\\n ],\\n \\n \\\"title\\\": {\\n \\\"text\\\": \\\"Order Gantt by: Trace > Span\\\",\\n \\\"fontSize\\\": 14,\\n \\\"anchor\\\": \\\"start\\\",\\n \\\"dy\\\": -15,\\n \\\"color\\\": \\\"#706D6C\\\"\\n },\\n \\\"layer\\\": [\\n {\\n \\\"mark\\\": {\\n \\\"type\\\": \\\"bar\\\",\\n \\\"tooltip\\\": true,\\n \\\"cornerRadiusTopRight\\\": 4,\\n \\\"cornerRadiusBottomRight\\\": 4\\n },\\n \\\"encoding\\\": {\\n \\\"y\\\": {\\n \\\"field\\\": \\\"project_full_descr\\\",\\n \\\"type\\\": \\\"nominal\\\",\\n \\\"sort\\\": {\\\"field\\\": \\\"startTime\\\", \\\"order\\\": \\\"ascending\\\"},\\n \\\"axis\\\": {\\n \\\"domain\\\": true,\\n \\\"grid\\\": true,\\n \\\"ticks\\\": true,\\n \\\"labels\\\": true,\\n \\\"labelLimit\\\": 800,\\n \\\"labelFontSize\\\": 12,\\n \\\"labelPadding\\\": 10,\\n \\\"labelExpr\\\": \\\"split(datum.label, '|')[1]\\\"\\n },\\n \\\"scale\\\": {\\n \\\"padding\\\": 0.5\\n },\\n \\\"title\\\": null\\n },\\n \\\"x\\\": {\\n \\\"field\\\": \\\"_source.startTime\\\",\\n \\\"type\\\": \\\"temporal\\\",\\n \\\"title\\\": \\\"time\\\"\\n },\\n \\\"x2\\\": {\\\"field\\\": \\\"_source.endTime\\\"},\\n \\\"color\\\": {\\n \\\"field\\\": \\\"_source.serviceName\\\",\\n \\\"type\\\": \\\"nominal\\\",\\n \\\"legend\\\": {\\\"title\\\": \\\"Service Name\\\"},\\n \\\"scale\\\": {\\\"scheme\\\": \\\"category10\\\"}\\n },\\n \\\"opacity\\\": {\\n \\\"field\\\": \\\"normalizedDuration\\\",\\n \\\"legend\\\":null,\\n \\\"type\\\": \\\"quantitative\\\",\\n \\\"scale\\\": {\\\"domain\\\": [0, 1], \\\"range\\\": [0.2, 1]}\\n },\\n \\\"tooltip\\\": [\\n {\\\"field\\\": \\\"_source.serviceName\\\", \\\"title\\\": \\\"Service Name\\\"},\\n {\\\"field\\\": \\\"formattedDuration\\\", \\\"title\\\": \\\"Duration\\\"},\\n {\\\"field\\\": \\\"_source.traceId\\\", \\\"title\\\": \\\"Trace ID\\\"},\\n {\\\"field\\\": \\\"_source.traceGroup\\\", \\\"title\\\": \\\"Trace Group\\\"}\\n ]\\n }\\n },\\n {\\n \\\"mark\\\": {\\\"type\\\": \\\"rule\\\", \\\"strokeDash\\\": [2, 2], \\\"strokeWidth\\\": 2},\\n \\\"encoding\\\": {\\n \\\"x\\\": {\\n \\\"field\\\": \\\"currentDate\\\",\\n \\\"type\\\": \\\"temporal\\\"\\n }\\n }\\n },\\n {\\n \\\"mark\\\": {\\n \\\"type\\\": \\\"text\\\",\\n \\\"align\\\": \\\"right\\\",\\n \\\"dx\\\": -24,\\n \\\"dy\\\": 0,\\n \\\"fontSize\\\": 9\\n },\\n \\\"encoding\\\": {\\n \\\"x\\\": {\\\"field\\\": \\\"startTime\\\"},\\n \\\"y\\\": {\\\"field\\\": \\\"project_full_descr\\\", \\\"type\\\": \\\"nominal\\\",\\n \\\"sort\\\": {\\\"field\\\": \\\"startTime\\\", \\\"order\\\": \\\"ascending\\\"}\\n},\\n \\\"text\\\": {\\\"field\\\": \\\"formattedDuration\\\"},\\n \\\"color\\\": {\\\"value\\\": \\\"white\\\"}\\n }\\n },\\n {\\n \\\"mark\\\": {\\n \\\"type\\\": \\\"text\\\",\\n \\\"align\\\": \\\"left\\\",\\n \\\"dx\\\": 5,\\n \\\"dy\\\": 0,\\n \\\"fontSize\\\": 9\\n },\\n \\\"encoding\\\": {\\n \\\"x\\\": {\\\"field\\\": \\\"endTime\\\"},\\n \\\"y\\\": {\\\"field\\\": \\\"project_full_descr\\\", \\\"type\\\": \\\"nominal\\\", \\\"sort\\\": {\\\"field\\\": \\\"startTime\\\", \\\"order\\\": \\\"ascending\\\"}},\\n \\\"text\\\": {\\\"field\\\": \\\"formattedDuration\\\"},\\n \\\"color\\\": {\\\"value\\\": \\\"black\\\"}\\n }\\n },\\n \\n ],\\n \\\"config\\\": {\\\"view\\\": {\\\"stroke\\\": null}}\\n}\"}}"},"id":"546033dc-4047-4d3c-87f9-dc8d5566a438","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMzEsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"multi-line-selectable-date-services-request-rate","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"multi-line-selectable-date-services-request-rate\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"title\\\": \\\"Services Requests Rate\\\",\\n \\\"data\\\": [\\n {\\n \\\"name\\\": \\\"rawdata\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-v1-apm-span-*\\\",\\n \\\"%context%\\\": true,\\n \\\"%timefield%\\\": \\\"startTime\\\",\\n \\\"body\\\": {\\n \\\"aggs\\\": {\\n \\\"services\\\": {\\n \\\"terms\\\": {\\n \\\"field\\\": \\\"serviceName\\\",\\n \\\"size\\\": 15\\n },\\n \\\"aggs\\\": {\\n \\\"time_buckets\\\": {\\n \\\"date_histogram\\\": {\\n \\\"field\\\": \\\"startTime\\\",\\n \\\"interval\\\": {\\\"%autointerval%\\\": true},\\n \\\"extended_bounds\\\": {\\n \\\"min\\\": {\\\"%timefilter%\\\": \\\"min\\\"},\\n \\\"max\\\": {\\\"%timefilter%\\\": \\\"max\\\"}\\n },\\n \\\"min_doc_count\\\":0\\n },\\n \\\"aggs\\\": {\\n \\\"duration\\\": {\\n \\\"avg\\\": {\\n \\\"missing\\\": 0,\\n \\\"script\\\": {\\n \\\"source\\\": \\\"!doc.containsKey('durationInNanos') || doc['durationInNanos'].empty ? 0 : doc['durationInNanos'].value / 1000000.0\\\",\\n \\\"lang\\\": \\\"painless\\\"\\n }\\n }\\n }\\n }\\n }\\n }\\n }\\n },\\n \\\"size\\\": 0\\n }\\n },\\n \\\"format\\\": {\\\"property\\\": \\\"aggregations.services.buckets\\\"}\\n },\\n {\\n \\\"name\\\": \\\"flatdata\\\",\\n \\\"source\\\": \\\"rawdata\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"flatten\\\",\\n \\\"fields\\\": [\\\"time_buckets.buckets\\\"],\\n \\\"as\\\": [\\\"val\\\"]\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"count\\\",\\n \\\"expr\\\":\\\"datum.val.doc_count\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"duration\\\",\\n \\\"expr\\\": \\\"datum.val.duration.value == null ? 0 : datum.val.duration.value\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"time\\\",\\n \\\"expr\\\": \\\"timeFormat(utcParse(datum.val.key_as_string,'%Y-%m-%dT%H:%M:%S.%LZ'), '%B %d, %Y %H:%M')\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"hasSelection\\\",\\n \\\"values\\\": [{}],\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"filter\\\", \\\"expr\\\": \\\"selected[0] != selected[1]\\\"}\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"groupScale\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"padding\\\": 0.1,\\n \\\"domain\\\": {\\\"data\\\": \\\"rawdata\\\", \\\"field\\\": \\\"key\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"height\\\"\\n },\\n {\\n \\\"name\\\": \\\"xScale\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"flatdata\\\", \\\"field\\\": \\\"val.key\\\"},\\n \\\"range\\\": \\\"width\\\",\\n \\\"padding\\\": 5\\n },\\n {\\n \\\"name\\\": \\\"durationScale\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"flatdata\\\", \\\"field\\\": \\\"duration\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"bandwidth('groupScale')\\\"}, 0]\\n },\\n {\\n \\\"name\\\": \\\"yScale\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"flatdata\\\", \\\"field\\\": \\\"val.doc_count\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"bandwidth('groupScale')\\\"}, 0]\\n },\\n {\\n \\\"name\\\": \\\"colorScale\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"rawdata\\\", \\\"field\\\": \\\"key\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"category\\\"\\n }\\n ],\\n \\\"axes\\\": [\\n {\\\"orient\\\": \\\"bottom\\\", \\\"scale\\\": \\\"xScale\\\", \\\"tickCount\\\": 5}\\n ],\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"currentX\\\",\\n \\\"value\\\": -1,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"view:mousemove\\\", \\\"update\\\": \\\"clamp(x(), 0, width)\\\"},\\n {\\\"events\\\": \\\"view:mouseout\\\", \\\"update\\\": \\\"-1\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"selected\\\",\\n \\\"value\\\": [0, 0],\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"@grapharea:mousedown\\\", \\\"update\\\": \\\"[x(), x()]\\\"},\\n {\\n \\\"events\\\": \\\"[@grapharea:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"[selected[0], clamp(x(), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"delta\\\"},\\n \\\"update\\\": \\\"clampRange([anchor[0] + delta, anchor[1] + delta], 0, width)\\\"\\n },\\n {\\n \\\"events\\\": \\\"[@leftEdge:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"[clamp(x(), 0, width), selected[1]]\\\"\\n },\\n {\\n \\\"events\\\": \\\"[@rightEdge:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"[selected[0], clamp(x(), 0, width)]\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"anchor\\\",\\n \\\"value\\\": null,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"@selectedRect:mousedown\\\", \\\"update\\\": \\\"selected\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"xDown\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"@selectedRect:mousedown\\\", \\\"update\\\": \\\"x()\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"delta\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"[@selectedRect:mousedown, window:mouseup] > window:mousemove!\\\", \\\"update\\\": \\\"x() - xDown\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"applyTimeFilter\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"@applyTimeFilterButton:click, @selectedRect:dblclick\\\",\\n \\\"update\\\": \\\"opensearchDashboardsSetTimeFilter(invert('xScale',selected[0]), invert('xScale',selected[1]))\\\"\\n },\\n {\\\"events\\\": \\\"@grapharea:dblclick\\\", \\\"update\\\": \\\"opensearchDashboardsSetTimeFilter('now-15d', 'now')\\\"}\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"grapharea\\\",\\n \\\"type\\\": \\\"group\\\",\\n \\\"from\\\": {\\n \\\"facet\\\": {\\\"name\\\": \\\"facets\\\", \\\"data\\\": \\\"rawdata\\\", \\\"field\\\": \\\"time_buckets.buckets\\\"}\\n },\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"y\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"field\\\": \\\"key\\\"},\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"x\\\": {\\\"value\\\": 0},\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0},\\n \\\"fill\\\": {\\\"value\\\": \\\"#000\\\"},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'Service': datum['key']}\\\"\\n }\\n }\\n },\\n \\\"axes\\\": [\\n {\\n \\\"orient\\\": \\\"left\\\",\\n \\\"scale\\\": \\\"yScale\\\",\\n \\\"title\\\": {\\\"signal\\\": \\\"parent.key\\\"},\\n \\\"tickCount\\\": 4,\\n \\\"encode\\\": {\\n \\\"title\\\": {\\n \\\"name\\\": \\\"extFilter\\\",\\n \\\"interactive\\\": true,\\n \\\"update\\\": {\\n \\\"cursor\\\": {\\\"value\\\": \\\"pointer\\\"},\\n \\\"fontSize\\\": {\\\"value\\\": 8},\\n \\\"fill\\\": {\\\"value\\\": \\\"steelblue\\\"}\\n },\\n \\\"hover\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"}\\n }\\n }\\n }\\n },\\n {\\n \\\"orient\\\": \\\"right\\\",\\n \\\"scale\\\": \\\"durationScale\\\",\\n \\\"tickCount\\\": 4,\\n \\\"title\\\": {\\\"signal\\\": \\\"parent.key\\\"},\\n \\\"encode\\\": {\\n \\\"title\\\": {\\n \\\"name\\\": \\\"extErrorFilter\\\",\\n \\\"interactive\\\": true,\\n \\\"update\\\": {\\n \\\"cursor\\\": {\\\"value\\\": \\\"pointer\\\"},\\n \\\"fontSize\\\": {\\\"value\\\": 8},\\n \\\"fill\\\": {\\\"value\\\": \\\"red\\\"}\\n },\\n \\\"hover\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"}\\n }\\n }\\n }\\n }\\n ],\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"updateErrFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"source\\\": \\\"scope\\\", \\\"markname\\\": \\\"extErrorFilter\\\", \\\"type\\\": \\\"click\\\"},\\n \\\"update\\\": \\\"{'match': {'status.code': {'query': 2, 'type': 'phrase'}}}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"applyErrorFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"updateErrFilterObj\\\"},\\n \\\"update\\\": \\\"length(domain('groupScale')) > 1 ? opensearchDashboardsAddFilter(updateErrFilterObj) : opensearchDashboardsRemoveFilter(updateErrFilterObj)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"updateFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"source\\\": \\\"scope\\\", \\\"markname\\\": \\\"extFilter\\\", \\\"type\\\": \\\"click\\\"},\\n \\\"update\\\": \\\"{'match': {'serviceName': {'query': parent.key, 'type': 'phrase'}}}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"applyFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"updateFilterObj\\\"},\\n \\\"update\\\": \\\"length(domain('groupScale')) > 1 ? opensearchDashboardsAddFilter(updateFilterObj) : opensearchDashboardsRemoveFilter(updateFilterObj)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"line\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"facets\\\"},\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"scale\\\": \\\"xScale\\\", \\\"field\\\": \\\"key\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"yScale\\\", \\\"field\\\": \\\"doc_count\\\"},\\n \\\"fill\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.2},\\n \\\"stroke\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}}\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"rect\\\",\\n \\\"from\\\": {\\n \\\"data\\\": \\\"facets\\\"\\n },\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\n \\\"scale\\\": \\\"xScale\\\",\\n \\\"field\\\": \\\"key\\\"\\n },\\n \\\"width\\\": { \\\"value\\\": 15},\\n\\\"cornerRadius\\\": { \\\"value\\\": 5 }\\n \\\"y\\\": {\\n \\\"scale\\\": \\\"durationScale\\\",\\n \\\"field\\\": \\\"duration.value\\\",\\n \\\"offset\\\": -3\\n },\\n \\\"y2\\\": {\\\"scale\\\": \\\"durationScale\\\", \\\"value\\\": 0}\\n\\n \\\"stroke\\\": {\\\"value\\\":\\\"black\\\"},\\n \\\"fill\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.8},\\n\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'Date': timeFormat(datum['key'], '%Y-%m-%d %H:%M'), 'Value': datum['duration']}\\\"\\n }\\n }\\n }\\n},\\n {\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"from\\\": {\\n \\\"data\\\": \\\"facets\\\"\\n },\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\n \\\"scale\\\": \\\"xScale\\\",\\n \\\"field\\\": \\\"key\\\"\\n },\\n \\\"y\\\": {\\n \\\"scale\\\": \\\"yScale\\\",\\n \\\"field\\\": \\\"doc_count\\\"\\n },\\n \\\"size\\\": {\\n \\\"value\\\": 8\\n },\\n \\\"stroke\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'Date': timeFormat(datum['key'], '%Y-%m-%d %H:%M'), 'Value': datum['doc_count']}\\\"\\n }\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"hasSelection\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"selectedRect\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.2},\\n \\\"cursor\\\": {\\\"value\\\": \\\"move\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"selected[0]\\\"},\\n \\\"x2\\\": {\\\"signal\\\": \\\"selected[1]\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"leftEdge\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"width\\\": {\\\"value\\\": 2},\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"},\\n \\\"cursor\\\": {\\\"value\\\": \\\"ew-resize\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"selected[0]\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"rightEdge\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"width\\\": {\\\"value\\\": 2},\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"},\\n \\\"cursor\\\": {\\\"value\\\": \\\"ew-resize\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"selected[1]\\\"}\\n }\\n }\\n }\\n ]\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"applyTimeFilterButton\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"hasSelection\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"cursor\\\": {\\\"value\\\": \\\"pointer\\\"},\\n \\\"cornerRadius\\\": {\\\"value\\\": 6},\\n \\\"fill\\\": {\\\"value\\\": \\\"#f5f5f5\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"#c1c1c1\\\"},\\n \\\"strokeWidth\\\": {\\\"value\\\": 2},\\n \\\"xc\\\": {\\\"signal\\\": \\\"width/2\\\"},\\n \\\"y\\\": {\\\"value\\\": 30},\\n \\\"width\\\": {\\\"value\\\": 80},\\n \\\"height\\\": {\\\"value\\\": 30},\\n \\\"opacity\\\": {\\\"value\\\": 1}\\n },\\n \\\"hover\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"text\\\",\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"xc\\\": {\\\"field\\\": {\\\"group\\\": \\\"width\\\"}, \\\"mult\\\": 0.5},\\n \\\"yc\\\": {\\\"field\\\": {\\\"group\\\": \\\"height\\\"}, \\\"mult\\\": 0.5, \\\"offset\\\": 2},\\n \\\"align\\\": {\\\"value\\\": \\\"center\\\"},\\n \\\"baseline\\\": {\\\"value\\\": \\\"middle\\\"},\\n \\\"fontWeight\\\": {\\\"value\\\": \\\"bold\\\"},\\n \\\"text\\\": {\\\"value\\\": \\\"Apply Filter\\\"}\\n }\\n }\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"rule\\\",\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"y\\\": {\\\"value\\\": 0},\\n \\\"y2\\\": {\\\"signal\\\": \\\"height\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"gray\\\"},\\n \\\"strokeDash\\\": {\\\"value\\\": [2, 1]},\\n \\\"x\\\": {\\\"signal\\\": \\\"max(currentX,0)\\\"},\\n \\\"strokeOpacity\\\": {\\\"signal\\\": \\\"currentX > 0 ? 1 : 0\\\"}\\n }\\n }\\n }\\n ]\\n}\\n\"}}"},"id":"cb36546d-6eff-460a-a82f-06dd192be2b9","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMzAsMl0="}
+{"attributes":{"description":" - deep dive into a service signals info\n - service collected metrics \n - service spans flame chart\n - service RED indicators","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"type\":\"phrase\",\"key\":\"serviceName\",\"params\":{\"query\":\"frontend\"},\"disabled\":false,\"negate\":false,\"alias\":null,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"serviceName\":\"frontend\"}},\"$state\":{\"store\":\"appState\"}}]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"2.14.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":48,\"h\":11,\"i\":\"0b6e6f73-e4b2-4ccd-adcd-52a4a376aa3f\"},\"panelIndex\":\"0b6e6f73-e4b2-4ccd-adcd-52a4a376aa3f\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":0,\"y\":11,\"w\":48,\"h\":16,\"i\":\"28124bcb-841b-49d4-840e-8ffdcd658042\"},\"panelIndex\":\"28124bcb-841b-49d4-840e-8ffdcd658042\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":0,\"y\":27,\"w\":24,\"h\":20,\"i\":\"807c5b1d-54dc-4124-bbc0-27a96e41a805\"},\"panelIndex\":\"807c5b1d-54dc-4124-bbc0-27a96e41a805\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":24,\"y\":27,\"w\":24,\"h\":13,\"i\":\"2885c3d8-cecc-464f-abc1-4221c528952e\"},\"panelIndex\":\"2885c3d8-cecc-464f-abc1-4221c528952e\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":24,\"y\":40,\"w\":24,\"h\":13,\"i\":\"91dbd986-baa1-4961-9e56-65fbda6b612d\"},\"panelIndex\":\"91dbd986-baa1-4961-9e56-65fbda6b612d\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":0,\"y\":47,\"w\":24,\"h\":37,\"i\":\"8622cb4c-e564-4df6-813a-75ac81bfe7bf\"},\"panelIndex\":\"8622cb4c-e564-4df6-813a-75ac81bfe7bf\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":24,\"y\":53,\"w\":24,\"h\":31,\"i\":\"8c81d68e-3686-409e-8e4a-00cfbd600715\"},\"panelIndex\":\"8c81d68e-3686-409e-8e4a-00cfbd600715\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"}]","timeRestore":false,"title":"single-service-correlated-dashboard","version":1},"id":"single-service-correlated-dashboard-1_0_0_ID","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"f67e4370-d84f-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"375873f0-121d-11ef-b612-e9a167e5758e","name":"panel_0","type":"visualization"},{"id":"ab8509a7-551c-4ba3-9315-e28bfb73c425","name":"panel_1","type":"visualization"},{"id":"a75f6330-d9d2-11ee-9203-cf873e97f443","name":"panel_2","type":"visualization"},{"id":"e7c75468-4e40-4b30-adad-b1d64962c76f","name":"panel_3","type":"visualization"},{"id":"f7ed5710-23c5-485e-8d2e-5d91c7530a7c","name":"panel_4","type":"visualization"},{"id":"546033dc-4047-4d3c-87f9-dc8d5566a438","name":"panel_5","type":"visualization"},{"id":"cb36546d-6eff-460a-a82f-06dd192be2b9","name":"panel_6","type":"visualization"}],"type":"dashboard","updated_at":"2024-05-18T09:11:16.316Z","version":"WzEzODEsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"service-map-graph","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"service-map-graph\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"padding\\\": {\\\"left\\\": 0, \\\"right\\\": 0, \\\"top\\\": 0, \\\"bottom\\\": 0},\\n \\\"autosize\\\": \\\"pad\\\",\\n \\\"background\\\": \\\"#f4f7ff\\\",\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"xrange\\\", \\\"update\\\": \\\"[0, width]\\\"},\\n {\\\"name\\\": \\\"yrange\\\", \\\"update\\\": \\\"[height, 0]\\\"},\\n {\\\"name\\\": \\\"xext\\\", \\\"update\\\": \\\"[0, width]\\\"},\\n {\\\"name\\\": \\\"yext\\\", \\\"update\\\": \\\"[height, 0]\\\"},\\n {\\n \\\"name\\\": \\\"down\\\",\\n \\\"value\\\": null,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"mouseup,touchend\\\", \\\"update\\\": \\\"null\\\"},\\n {\\\"events\\\": \\\"mousedown, touchstart\\\", \\\"update\\\": \\\"xy()\\\"},\\n {\\\"events\\\": \\\"symbol:mousedown, symbol:touchstart\\\", \\\"update\\\": \\\"null\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"xcur\\\",\\n \\\"value\\\": null,\\n \\\"on\\\": [{\\\"events\\\": \\\"mousedown, touchstart, touchend\\\", \\\"update\\\": \\\"xdom\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"ycur\\\",\\n \\\"value\\\": null,\\n \\\"on\\\": [{\\\"events\\\": \\\"mousedown, touchstart, touchend\\\", \\\"update\\\": \\\"ydom\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"delta\\\",\\n \\\"value\\\": [0, 0],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"mousemove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\\"type\\\": \\\"mousedown\\\"},\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"mouseup\\\"}\\n ]\\n },\\n {\\n \\\"type\\\": \\\"touchmove\\\",\\n \\\"consume\\\": true,\\n \\\"filter\\\": \\\"event.touches.length === 1\\\"\\n }\\n ],\\n \\\"update\\\": \\\"down ? [down[0]-x(), y()-down[1]] : [0,0]\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"anchor\\\",\\n \\\"value\\\": [0, 0],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"wheel\\\",\\n \\\"update\\\": \\\"[invert('xscale', x()), invert('yscale', y())]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"type\\\": \\\"touchstart\\\",\\n \\\"filter\\\": \\\"event.touches.length===2\\\"\\n },\\n \\\"update\\\": \\\"[(xdom[0] + xdom[1]) / 2, (ydom[0] + ydom[1]) / 2]\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"zoom\\\",\\n \\\"value\\\": 1,\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"wheel!\\\",\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"dist2\\\"},\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"dist1 / dist2\\\"\\n },\\n {\\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}], \\\"update\\\": \\\"1\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"dist1\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"type\\\": \\\"touchstart\\\",\\n \\\"filter\\\": \\\"event.touches.length===2\\\"\\n },\\n \\\"update\\\": \\\"pinchDistance(event)\\\"\\n },\\n {\\\"events\\\": {\\\"signal\\\": \\\"dist2\\\"}, \\\"update\\\": \\\"dist2\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"dist2\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"type\\\": \\\"touchmove\\\",\\n \\\"consume\\\": true,\\n \\\"filter\\\": \\\"event.touches.length===2\\\"\\n },\\n \\\"update\\\": \\\"pinchDistance(event)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"xdom\\\",\\n \\\"update\\\": \\\"xext\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"delta\\\"},\\n \\\"update\\\": \\\"[xcur[0] + span(xcur) * delta[0] / width, xcur[1] + span(xcur) * delta[0] / width]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"zoom\\\"},\\n \\\"update\\\": \\\"[anchor[0] + (xdom[0] - anchor[0]) * zoom, anchor[0] + (xdom[1] - anchor[0]) * zoom]\\\"\\n },\\n {\\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}], \\\"update\\\": \\\"xrange\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"ydom\\\",\\n \\\"update\\\": \\\"yext\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"delta\\\"},\\n \\\"update\\\": \\\"[ycur[0] + span(ycur) * delta[1] / height, ycur[1] + span(ycur) * delta[1] / height]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"zoom\\\"},\\n \\\"update\\\": \\\"[anchor[1] + (ydom[0] - anchor[1]) * zoom, anchor[1] + (ydom[1] - anchor[1]) * zoom]\\\"\\n },\\n {\\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}], \\\"update\\\": \\\"yrange\\\"}\\n ]\\n },\\n {\\\"name\\\": \\\"size\\\", \\\"update\\\": \\\"clamp(20 / span(xdom), 1, 1000)\\\"},\\n {\\n \\\"name\\\": \\\"cx\\\",\\n \\\"update\\\": \\\"width / 2\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"[symbol:mousedown, window:mouseup] > window:mousemove\\\",\\n \\\"update\\\": \\\" cx==width/2?cx+0.001:width/2\\\"\\n }\\n ]\\n },\\n {\\\"name\\\": \\\"cy\\\", \\\"update\\\": \\\"height / 2\\\"},\\n {\\n \\\"name\\\": \\\"nodeRadiusKey\\\",\\n \\\"description\\\": \\\"q=increase size, a=decrease size\\\",\\n \\\"value\\\": 8,\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"window:keypress\\\",\\n \\\"update\\\": \\\"event.key=='a'&&nodeRadiusKey>1?nodeRadiusKey-1:event.key=='q'?nodeRadiusKey+1:nodeRadiusKey\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"nodeRadius\\\",\\n \\\"value\\\": 8,\\n \\\"bind\\\": {\\\"input\\\": \\\"range\\\", \\\"min\\\": 1, \\\"max\\\": 50, \\\"step\\\": 1},\\n \\\"on\\\": [{\\\"events\\\": {\\\"signal\\\": \\\"nodeRadiusKey\\\"}, \\\"update\\\": \\\"nodeRadiusKey\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"nodeCharge\\\",\\n \\\"value\\\": -30,\\n \\\"bind\\\": {\\\"input\\\": \\\"range\\\", \\\"min\\\": -100, \\\"max\\\": 10, \\\"step\\\": 1}\\n },\\n {\\n \\\"name\\\": \\\"linkDistance\\\",\\n \\\"value\\\": 30,\\n \\\"bind\\\": {\\\"input\\\": \\\"range\\\", \\\"min\\\": 5, \\\"max\\\": 300, \\\"step\\\": 1}\\n },\\n {\\n \\\"description\\\": \\\"State variable for active node fix status.\\\",\\n \\\"name\\\": \\\"fix\\\",\\n \\\"value\\\": false,\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"symbol:mouseout[!event.buttons], window:mouseup\\\",\\n \\\"update\\\": \\\"false\\\"\\n },\\n {\\\"events\\\": \\\"symbol:mouseover\\\", \\\"update\\\": \\\"fix || true\\\", \\\"force\\\": true},\\n {\\n \\\"events\\\": \\\"[symbol:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"xy()\\\",\\n \\\"force\\\": true\\n }\\n ]\\n },\\n {\\n \\\"description\\\": \\\"Graph node most recently interacted with.\\\",\\n \\\"name\\\": \\\"node\\\",\\n \\\"value\\\": null,\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"symbol:mouseover\\\",\\n \\\"update\\\": \\\"fix === true ? datum.index : node\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"nodeHover\\\",\\n \\\"value\\\": {\\\"id\\\": null, \\\"connections\\\": []},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"symbol:mouseover\\\",\\n \\\"update\\\": \\\"{'id':datum.index, 'connections':split(datum.sources+','+datum.targets,',')}\\\"\\n },\\n {\\\"events\\\": \\\"symbol:mouseout\\\", \\\"update\\\": \\\"{'id':null, 'connections':[]}\\\"}\\n ]\\n },\\n {\\n \\\"description\\\": \\\"Flag to restart Force simulation upon data changes.\\\",\\n \\\"name\\\": \\\"restart\\\",\\n \\\"value\\\": false,\\n \\\"on\\\": [{\\\"events\\\": {\\\"signal\\\": \\\"fix\\\"}, \\\"update\\\": \\\"fix && fix.length\\\"}]\\n }\\n ],\\n \\\"data\\\": [\\n {\\n \\\"name\\\": \\\"node-data-raw\\\",\\n \\\"url\\\": {\\n \\\"%context%\\\": \\\"true\\\",\\n \\\"index\\\": \\\"otel-v1-apm-span-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\": 0,\\n \\\"aggs\\\": {\\n \\\"services\\\": {\\n \\\"terms\\\": {\\n \\\"field\\\": \\\"serviceName\\\",\\n \\\"size\\\": 10000\\n }\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"type\\\": \\\"json\\\",\\n \\\"property\\\": \\\"aggregations.services.buckets\\\"\\n },\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"'http://localhost:5601/app/dashboards#/view/single-service-correlated-dashboard-1_0_0_ID?_a=(description:%27%27,filters:!((%27$state%27:(store:appState),meta:(alias:!n,disabled:!f,key:serviceName,negate:!f,params:(query:' + datum.serviceName + '),type:phrase),query:(match_phrase:(serviceName:' + datum.name + ')))),fullScreenMode:!f,options:(hidePanelTitles:!f,useMargins:!t),query:(language:kuery,query:%27%27),timeRestore:!f,title:single-service-correlated-dashboard,viewMode:view)'\\\",\\n \\\"as\\\": \\\"link\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"datum.doc_count\\\",\\n \\\"as\\\": \\\"traceCounts\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"datum.key\\\",\\n \\\"as\\\": \\\"name\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"datum.key\\\",\\n \\\"as\\\": \\\"group\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"link-data-raw\\\",\\n \\\"url\\\": {\\n \\\"%context%\\\": \\\"true\\\",\\n \\\"index\\\": \\\"otel-v1-apm-service-map*\\\",\\n \\\"body\\\": {\\n \\\"size\\\": 0,\\n \\\"aggs\\\": {\\n \\\"services\\\": {\\n \\\"terms\\\": {\\n \\\"size\\\": 10000,\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n \\\"aggs\\\": {\\n \\\"target\\\": {\\n \\\"terms\\\": {\\n \\\"size\\\": 10000,\\n \\\"field\\\": \\\"destination.domain\\\"\\n }\\n }\\n }\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"aggregations.services.buckets\\\"\\n },\\n \\\"transform\\\":[\\n {\\n \\\"type\\\": \\\"flatten\\\",\\n \\\"fields\\\": [\\\"target.buckets\\\"],\\n \\\"as\\\": [\\\"targetBucket\\\"]\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"datum.doc_count\\\",\\n \\\"as\\\": \\\"value\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"datum.key\\\",\\n \\\"as\\\": \\\"source\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"datum.targetBucket.key\\\",\\n \\\"as\\\": \\\"target\\\"\\n },\\n {\\n \\\"type\\\": \\\"lookup\\\",\\n \\\"from\\\": \\\"node-data-raw\\\",\\n \\\"key\\\": \\\"name\\\",\\n \\\"fields\\\": [\\\"source\\\", \\\"target\\\"],\\n \\\"as\\\": [\\\"sourceNode\\\", \\\"targetNode\\\"]\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"datum.sourceNode !== null && datum.targetNode !== null\\\"\\n }\\n ]\\n },\\n {\\\"name\\\": \\\"link-data\\\", \\\"source\\\": \\\"link-data-raw\\\"},\\n {\\n \\\"name\\\": \\\"source-connections\\\",\\n \\\"source\\\": \\\"link-data-raw\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"aggregate\\\",\\n \\\"groupby\\\": [\\\"source\\\"],\\n \\\"ops\\\": [\\\"values\\\"],\\n \\\"fields\\\": [\\\"target\\\"],\\n \\\"as\\\": [\\\"connections\\\"]\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"targets\\\",\\n \\\"expr\\\": \\\"pluck(datum.connections, 'target')\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"target-connections\\\",\\n \\\"source\\\": \\\"link-data-raw\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"aggregate\\\",\\n \\\"groupby\\\": [\\\"target\\\"],\\n \\\"ops\\\": [\\\"values\\\"],\\n \\\"fields\\\": [\\\"source\\\"],\\n \\\"as\\\": [\\\"connections\\\"]\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"sources\\\",\\n \\\"expr\\\": \\\"pluck(datum.connections, 'source')\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"node-data\\\",\\n \\\"source\\\" :\\\"node-data-raw\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"lookup\\\",\\n \\\"from\\\": \\\"source-connections\\\",\\n \\\"key\\\": \\\"source\\\",\\n \\\"fields\\\": [\\\"name\\\"],\\n \\\"values\\\": [\\\"targets\\\"],\\n \\\"as\\\": [\\\"targets\\\"],\\n \\\"default\\\": [\\\"\\\"]\\n },\\n {\\n \\\"type\\\": \\\"lookup\\\",\\n \\\"from\\\": \\\"target-connections\\\",\\n \\\"key\\\": \\\"target\\\",\\n \\\"fields\\\": [\\\"name\\\"],\\n \\\"values\\\": [\\\"sources\\\"],\\n \\\"as\\\": [\\\"sources\\\"],\\n \\\"default\\\": [\\\"\\\"]\\n },\\n {\\n \\\"type\\\": \\\"force\\\",\\n \\\"iterations\\\": 300,\\n \\\"restart\\\": {\\\"signal\\\": \\\"restart\\\"},\\n \\\"signal\\\": \\\"force\\\",\\n \\\"forces\\\": [\\n {\\\"force\\\": \\\"center\\\", \\\"x\\\": {\\\"signal\\\": \\\"cx\\\"}, \\\"y\\\": {\\\"signal\\\": \\\"cy\\\"}},\\n {\\n \\\"force\\\": \\\"collide\\\",\\n \\\"radius\\\": {\\\"signal\\\": \\\"sqrt(4 * nodeRadius * nodeRadius)\\\"},\\n \\\"iterations\\\": 1,\\n \\\"strength\\\": 0.7\\n },\\n {\\\"force\\\": \\\"nbody\\\", \\\"strength\\\": {\\\"signal\\\": \\\"nodeCharge\\\"}},\\n {\\n \\\"force\\\": \\\"link\\\",\\n \\\"links\\\": \\\"link-data-raw\\\",\\n \\\"distance\\\": {\\\"signal\\\": \\\"linkDistance\\\"},\\n \\\"id\\\": \\\"name\\\"\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"fx\\\",\\n \\\"expr\\\": \\\"fix[0]!=null && node==datum.index ?invert('xscale',fix[0]):null\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"fy\\\",\\n \\\"expr\\\": \\\"fix[1]!=null && node==datum.index ?invert('yscale',fix[1]):null\\\"\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"node-data\\\", \\\"field\\\": \\\"group\\\"},\\n \\\"range\\\": [\\n \\\"#4682b4\\\",\\n \\\"#4666b4\\\",\\n \\\"#46b494\\\",\\n \\\"#b46746\\\",\\n \\\"#b44662\\\",\\n \\\"#a44fa3\\\"\\n ]\\n },\\n {\\n \\\"name\\\": \\\"xscale\\\",\\n \\\"zero\\\": false,\\n \\\"domain\\\": {\\\"signal\\\": \\\"xdom\\\"},\\n \\\"range\\\": {\\\"signal\\\": \\\"xrange\\\"}\\n },\\n {\\n \\\"name\\\": \\\"yscale\\\",\\n \\\"zero\\\": false,\\n \\\"domain\\\": {\\\"signal\\\": \\\"ydom\\\"},\\n \\\"range\\\": {\\\"signal\\\": \\\"yrange\\\"}\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"path\\\",\\n \\\"name\\\": \\\"links\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"link-data\\\"},\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"stroke\\\": {\\n \\\"signal\\\": \\\"datum.source.index!=nodeHover.id && datum.target.index!=nodeHover.id ? '#929399':merge(hsl(scale('color', datum.source.group)), {l:0.64})\\\"\\n },\\n \\\"strokeWidth\\\": {\\n \\\"signal\\\": \\\"datum.source.index!=nodeHover.id && datum.target.index!=nodeHover.id ? 0.5:2\\\"\\n }\\n }\\n },\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"linkpath\\\",\\n \\\"require\\\": {\\\"signal\\\": \\\"force\\\"},\\n \\\"shape\\\": \\\"line\\\",\\n \\\"sourceX\\\": {\\\"expr\\\": \\\"scale('xscale', datum.datum.source.x)\\\"},\\n \\\"sourceY\\\": {\\\"expr\\\": \\\"scale('yscale', datum.datum.source.y)\\\"},\\n \\\"targetX\\\": {\\\"expr\\\": \\\"scale('xscale', datum.datum.target.x)\\\"},\\n \\\"targetY\\\": {\\\"expr\\\": \\\"scale('yscale', datum.datum.target.y)\\\"}\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"atan2(datum.datum.target.y - datum.datum.source.y,datum.datum.source.x - datum.datum.target.x)\\\",\\n \\\"as\\\": \\\"angle1\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"(datum.angle1>=0?datum.angle1:(2*PI + datum.angle1)) * (360 / (2*PI))\\\",\\n \\\"as\\\": \\\"angle2\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"(360-datum.angle2)*(PI/180)\\\",\\n \\\"as\\\": \\\"angle3\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"(cos(datum.angle3)*(nodeRadius+5))+(scale('xscale',datum.datum.target.x))\\\",\\n \\\"as\\\": \\\"arrowX\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"(sin(datum.angle3)*(nodeRadius+5))+(scale('yscale',datum.datum.target.y))\\\",\\n \\\"as\\\": \\\"arrowY\\\"\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"name\\\": \\\"arrows\\\",\\n \\\"zindex\\\": 1,\\n \\\"from\\\": {\\\"data\\\": \\\"links\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"shape\\\": {\\\"value\\\": \\\"triangle\\\"},\\n \\\"angle\\\": {\\\"signal\\\": \\\"-datum.angle2-90\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"datum.arrowX\\\"},\\n \\\"y\\\": {\\\"signal\\\": \\\"datum.arrowY\\\"},\\n \\\"text\\\": {\\\"signal\\\": \\\"'â–²'\\\"},\\n \\\"fill\\\": {\\n \\\"signal\\\": \\\"datum.datum.source.index!=nodeHover.id && datum.datum.target.index!=nodeHover.id ? '#929399':merge(hsl(scale('color', datum.datum.source.group)), {l:0.64})\\\"\\n },\\n \\\"size\\\": {\\\"signal\\\": \\\"nodeRadius==1?0:60\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"nodes\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"zindex\\\": 1,\\n \\\"from\\\": {\\\"data\\\": \\\"node-data\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 1},\\n \\\"href\\\": {\\\"signal\\\": \\\"datum.link\\\"},\\n \\\"fill\\\": {\\n \\\"signal\\\": \\\"nodeHover.id===datum.index || indexof(nodeHover.connections, datum.name)>-1 ?scale('color', datum.group):merge(hsl(scale('color', datum.group)), {l:0.64})\\\"\\n },\\n \\\"stroke\\\": {\\n \\\"signal\\\": \\\"nodeHover.id===datum.index || indexof(nodeHover.connections, datum.name)>-1 ?scale('color', datum.group):merge(hsl(scale('color', datum.group)), {l:0.84})\\\"\\n },\\n \\\"strokeWidth\\\": {\\\"value\\\": 3},\\n \\\"strokeOpacity\\\": {\\\"value\\\": 1},\\n \\\"size\\\": {\\\"signal\\\": \\\"4 * nodeRadius * nodeRadius\\\"},\\n \\\"cursor\\\": {\\\"value\\\": \\\"pointer\\\"},\\n \\\"x\\\": {\\n \\\"signal\\\": \\\"fix[0]!=null && node===datum.index ?fix[0]:scale('xscale', datum.x)\\\"\\n },\\n \\\"y\\\": {\\n \\\"signal\\\": \\\"fix[1]!=null && node===datum.index ?fix[1]:scale('yscale', datum.y)\\\"\\n }\\n },\\n \\\"hover\\\": {\\\"tooltip\\\": {\\\"signal\\\": \\\"datum.name\\\"}}\\n }\\n },\\n {\\n \\\"type\\\": \\\"text\\\",\\n \\\"name\\\": \\\"labels\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"nodes\\\"},\\n \\\"zindex\\\": 2,\\n \\\"interactive\\\": false,\\n \\\"enter\\\": {},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"signal\\\": \\\"'white'\\\"},\\n \\\"y\\\": {\\\"field\\\": \\\"y\\\"},\\n \\\"x\\\": {\\\"field\\\": \\\"x\\\"},\\n \\\"text\\\": {\\\"field\\\": \\\"datum.name\\\"},\\n \\\"align\\\": {\\\"value\\\": \\\"center\\\"},\\n \\\"fontSize\\\": {\\\"value\\\": 10},\\n \\\"baseline\\\": {\\\"value\\\": \\\"middle\\\"},\\n \\\"limit\\\": {\\n \\\"signal\\\": \\\"clamp(sqrt(4 * nodeRadius * nodeRadius)-7,1,1000)\\\"\\n },\\n \\\"ellipsis\\\": {\\\"value\\\": \\\" \\\"}\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"1c59f345-ad69-4717-90ca-75b65efee96b","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMzMsMl0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"services-groups-pie","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"services-groups-pie\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"services\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"serviceName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"services\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"row\":true}}"},"id":"f43111e2-256c-4d15-be98-89086c5b2bca","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"f67e4370-d84f-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-05-18T08:13:58.404Z","version":"WzEzMzQsMl0="}
+{"attributes":{"description":" - view services network visualization\n - view spans flame graph\n - services RED indicators","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"2.14.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":48,\"h\":9,\"i\":\"11370789-55c9-4e12-bb20-ccc0a48eb0e3\"},\"panelIndex\":\"11370789-55c9-4e12-bb20-ccc0a48eb0e3\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":0,\"y\":9,\"w\":34,\"h\":16,\"i\":\"18938833-0275-421a-8e90-aa3b376d8580\"},\"panelIndex\":\"18938833-0275-421a-8e90-aa3b376d8580\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":34,\"y\":9,\"w\":14,\"h\":16,\"i\":\"ef8ea6a5-af3f-488a-ada9-c24ca4a8c5d4\"},\"panelIndex\":\"ef8ea6a5-af3f-488a-ada9-c24ca4a8c5d4\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":0,\"y\":25,\"w\":48,\"h\":7,\"i\":\"f074e25d-9d2e-4fc2-8b65-93517d502e58\"},\"panelIndex\":\"f074e25d-9d2e-4fc2-8b65-93517d502e58\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":1,\"y\":32,\"w\":47,\"h\":11,\"i\":\"299e9782-a654-465e-8cd3-37f1cfbe24a4\"},\"panelIndex\":\"299e9782-a654-465e-8cd3-37f1cfbe24a4\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":1,\"y\":43,\"w\":47,\"h\":56,\"i\":\"f2ac1c50-3cea-4084-be20-4a23a4e09e6a\"},\"panelIndex\":\"f2ac1c50-3cea-4084-be20-4a23a4e09e6a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":1,\"y\":99,\"w\":47,\"h\":11,\"i\":\"45b84c55-14f2-4cf8-b0dd-bea4aece5c7a\"},\"panelIndex\":\"45b84c55-14f2-4cf8-b0dd-bea4aece5c7a\",\"embeddableConfig\":{\"vis\":{\"columnsWidth\":[{\"colIndex\":1,\"width\":182.66666666666669},{\"colIndex\":0,\"width\":398.16666666666663},{\"colIndex\":3,\"width\":405.05555555555554},{\"colIndex\":2,\"width\":325.5555555555556}],\"sortColumn\":{\"colIndex\":2,\"direction\":\"desc\"}}},\"panelRefName\":\"panel_6\"},{\"version\":\"2.14.0\",\"gridData\":{\"x\":1,\"y\":110,\"w\":47,\"h\":35,\"i\":\"a546dd15-c336-47e0-a8b7-df153289658d\"},\"panelIndex\":\"a546dd15-c336-47e0-a8b7-df153289658d\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"}]","refreshInterval":{"pause":true,"value":0},"timeFrom":"2024-05-15T17:02:45.799Z","timeRestore":true,"timeTo":"2024-05-16T06:53:02.146Z","title":"observability-services-dashboard","version":1},"id":"otel-services-dashboard-1_0_0_ID","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"375873f0-121d-11ef-b612-e9a167e5758e","name":"panel_0","type":"visualization"},{"id":"1c59f345-ad69-4717-90ca-75b65efee96b","name":"panel_1","type":"visualization"},{"id":"f43111e2-256c-4d15-be98-89086c5b2bca","name":"panel_2","type":"visualization"},{"id":"3ba73630-14f2-11ef-8c27-a723ded8020e","name":"panel_3","type":"visualization"},{"id":"e7c75468-4e40-4b30-adad-b1d64962c76f","name":"panel_4","type":"visualization"},{"id":"cb36546d-6eff-460a-a82f-06dd192be2b9","name":"panel_5","type":"visualization"},{"id":"f7ed5710-23c5-485e-8d2e-5d91c7530a7c","name":"panel_6","type":"visualization"},{"id":"546033dc-4047-4d3c-87f9-dc8d5566a438","name":"panel_7","type":"visualization"}],"type":"dashboard","updated_at":"2024-05-18T09:06:50.431Z","version":"WzEzODAsMl0="}
+{"exportedCount":41,"missingRefCount":0,"missingReferences":[]}
\ No newline at end of file
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/assets/otel_amp_network_metrics_dashboard-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/otel-services/assets/otel_amp_network_metrics_dashboard-1.0.0.ndjson
deleted file mode 100644
index 9c808120aa..0000000000
--- a/server/adaptors/integrations/__data__/repository/otel-services/assets/otel_amp_network_metrics_dashboard-1.0.0.ndjson
+++ /dev/null
@@ -1,20 +0,0 @@
-{"attributes":{"fields":"[{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aggregationTemporality\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aggregationTemporality.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aggregationTemporality\"}}},{\"count\":0,\"name\":\"attributes.instrumentationScope.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.instrumentationScope.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.instrumentationScope.name\"}}},{\"count\":0,\"name\":\"attributes.instrumentationScope.version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.instrumentationScope.version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.instrumentationScope.version\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_request_type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_request_type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.app@ads@ad_request_type\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_response_type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_response_type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.app@ads@ad_response_type\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.app@payment@currency\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.app@payment@currency.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.app@payment@currency\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.client-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.client-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.client-id\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.count\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.count.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.count\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.cpu\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.currency_code\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.currency_code.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.currency_code\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.daemon\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.device\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.device.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.device\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.direction\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.direction.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.direction\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.dropped\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.family\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.generation\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.generation.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.generation\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@flavor\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@flavor.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@flavor\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@host\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@host.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@host\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@method\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@method.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@method\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@route\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@route.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@route\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@scheme\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@scheme.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@scheme\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@status_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.method\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.method.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.method\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.net@host@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.net@host@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.net@host@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.net@host@port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.net@peer@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.net@peer@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.net@peer@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.net@peer@port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.node-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.node-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.node-id\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.operation\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.operation.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.operation\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.partition\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.partition.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.partition\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.pool\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.pool.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.pool\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.processor\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.processor.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.processor\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.processorType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.processorType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.processorType\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.protocol\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.protocol.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.protocol\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.recommendation@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.recommendation@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.recommendation@type\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@grpc@status_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@method\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@method.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.rpc@method\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@service\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@service.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.rpc@service\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@system\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@system.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.rpc@system\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.service@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.service@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.span@kind\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.span@kind.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.span@kind\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.span@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.span@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.span@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.state\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.status\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.status@code\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.status@code.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.status@code\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.success\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.target\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.target.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.target\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.topic\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.topic.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.topic\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.type\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.container@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.container@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.container@id\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.host@arch\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.host@arch.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.host@arch\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.host@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.host@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.host@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@description\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@type\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@command\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_args\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_args.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@command_args\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_line\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_line.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@command_line\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@executable@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@path\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@path.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@executable@path\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@owner\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@owner.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@owner\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@runtime@description\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@runtime@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@runtime@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@instance@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@instance@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@instance@id\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@namespace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@namespace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@namespace\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@auto@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@auto@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@auto@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@language\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@language.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@sdk@language\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@sdk@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@sdk@version\"}}},{\"count\":0,\"name\":\"bucketCounts\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"bucketCountsList\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"buckets.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"buckets.max\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"buckets.min\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"description\"}}},{\"count\":0,\"name\":\"exemplars.attributes.exemplar.attributes.net@sock@peer@addr\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"exemplars.attributes.exemplar.attributes.net@sock@peer@addr.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"exemplars.attributes.exemplar.attributes.net@sock@peer@addr\"}}},{\"count\":0,\"name\":\"exemplars.spanId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"exemplars.spanId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"exemplars.spanId\"}}},{\"count\":0,\"name\":\"exemplars.time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"exemplars.traceId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"exemplars.traceId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"exemplars.traceId\"}}},{\"count\":0,\"name\":\"exemplars.value\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"explicitBounds\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"explicitBoundsCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"flags\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"isMonotonic\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kind\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kind.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kind\"}}},{\"count\":0,\"name\":\"name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"name\"}}},{\"count\":0,\"name\":\"schemaUrl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"schemaUrl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"schemaUrl\"}}},{\"count\":0,\"name\":\"serviceName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"serviceName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"serviceName\"}}},{\"count\":0,\"name\":\"startTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sum\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"unit\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"unit.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"unit\"}}},{\"count\":0,\"name\":\"value\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"time","title":"otel-metrics-*"},"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2024-03-02T04:47:59.251Z","version":"WzIsMV0="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"system-services-metrics-tree-map","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"system-services-metrics-tree-map\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"padding\\\": 5,\\n\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"labels\\\", \\\"value\\\": true,\\n \\\"bind\\\": {\\\"input\\\": \\\"checkbox\\\"}\\n },\\n {\\n \\\"name\\\": \\\"layout\\\", \\\"value\\\": \\\"tidy\\\",\\n \\\"bind\\\": {\\\"input\\\": \\\"radio\\\", \\\"options\\\": [\\\"tidy\\\", \\\"cluster\\\"]}\\n },\\n {\\n \\\"name\\\": \\\"links\\\", \\\"value\\\": \\\"diagonal\\\",\\n \\\"bind\\\": {\\n \\\"input\\\": \\\"select\\\",\\n \\\"options\\\": [\\\"line\\\", \\\"curve\\\", \\\"diagonal\\\", \\\"orthogonal\\\"]\\n }\\n },\\n {\\n \\\"name\\\": \\\"separation\\\", \\\"value\\\": false,\\n \\\"bind\\\": {\\\"input\\\": \\\"checkbox\\\"}\\n }\\n ],\\n\\n \\\"data\\\": [\\n{\\n \\\"name\\\": \\\"raw-data\\\",\\n \\\"values\\\": [\\n {\\\"id\\\": 1, \\\"name\\\": \\\"system\\\"},\\n {\\\"id\\\": 2, \\\"name\\\": \\\"disk\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 3, \\\"name\\\": \\\"io\\\", \\\"parent\\\": 2},\\n {\\\"id\\\": 4, \\\"name\\\": \\\"operations\\\", \\\"parent\\\": 2},\\n {\\\"id\\\": 5, \\\"name\\\": \\\"time\\\", \\\"parent\\\": 2},\\n {\\\"id\\\": 8, \\\"name\\\": \\\"cpu\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 9, \\\"name\\\": \\\"time\\\", \\\"parent\\\": 8},\\n {\\\"id\\\": 10, \\\"name\\\": \\\"utilization\\\", \\\"parent\\\": 8},\\n {\\\"id\\\": 11, \\\"name\\\": \\\"network\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 12, \\\"name\\\": \\\"dropped_packets\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 13, \\\"name\\\": \\\"errors\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 14, \\\"name\\\": \\\"io\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 15, \\\"name\\\": \\\"packets\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 16, \\\"name\\\": \\\"memory\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 17, \\\"name\\\": \\\"usage\\\", \\\"parent\\\": 16},\\n {\\\"id\\\": 18, \\\"name\\\": \\\"utilization\\\", \\\"parent\\\": 16},\\n {\\\"id\\\": 23, \\\"name\\\": \\\"connections\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 24, \\\"name\\\": \\\"swap\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 25, \\\"name\\\": \\\"usage\\\", \\\"parent\\\": 24},\\n {\\\"id\\\": 26, \\\"name\\\": \\\"utilization\\\", \\\"parent\\\": 24},\\n {\\\"id\\\": 30, \\\"name\\\": \\\"thread_count\\\", \\\"parent\\\": 1}\\n ]\\n},\\n\\n {\\n \\\"name\\\": \\\"tree\\\",\\n \\\"source\\\":\\\"raw-data\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"stratify\\\",\\n \\\"key\\\": \\\"id\\\",\\n \\\"parentKey\\\": \\\"parent\\\"\\n },\\n {\\n \\\"type\\\": \\\"lookup\\\",\\n \\\"from\\\": \\\"raw-data\\\",\\n \\\"key\\\": \\\"id\\\",\\n \\\"fields\\\": [\\\"parent\\\"],\\n \\\"as\\\": [\\\"parentData\\\"]\\n },\\n {\\n \\\"type\\\": \\\"tree\\\",\\n \\\"method\\\": {\\\"signal\\\": \\\"layout\\\"},\\n \\\"size\\\": [{\\\"signal\\\": \\\"height\\\"}, {\\\"signal\\\": \\\"width - 100\\\"}],\\n \\\"separation\\\": {\\\"signal\\\": \\\"separation\\\"},\\n \\\"as\\\": [\\\"y\\\", \\\"x\\\", \\\"depth\\\", \\\"children\\\"]\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"links\\\",\\n \\\"source\\\": \\\"tree\\\",\\n \\\"transform\\\": [\\n { \\\"type\\\": \\\"treelinks\\\" },\\n {\\n \\\"type\\\": \\\"linkpath\\\",\\n \\\"orient\\\": \\\"horizontal\\\",\\n \\\"shape\\\": {\\\"signal\\\": \\\"links\\\"}\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"parentName\\\",\\n \\\"expr\\\": \\\"datum.source.name\\\"\\n }\\n ]\\n }\\n ],\\n\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"parentColor\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"tree\\\", \\\"field\\\": \\\"parent\\\"},\\n \\\"range\\\": {\\\"scheme\\\": \\\"category20\\\"}\\n }\\n ],\\n\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"path\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"links\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"path\\\": {\\\"field\\\": \\\"path\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"#ccc\\\"}\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"tree\\\"},\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"size\\\": {\\\"value\\\": 200},\\n \\\"stroke\\\": {\\\"value\\\": \\\"#fff\\\"}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"field\\\": \\\"x\\\"},\\n \\\"y\\\": {\\\"field\\\": \\\"y\\\"},\\n \\\"fill\\\": {\\\"scale\\\": \\\"parentColor\\\", \\\"field\\\": \\\"parent\\\"},\\n \\\"size\\\": {\\\"signal\\\": \\\"datum.children ? 150 : 200\\\"}, \\n \\\"shape\\\": {\\\"signal\\\": \\\"datum.children ? 'circle' : 'square'\\\"}, \\n \\\"strokeWidth\\\": {\\\"value\\\": 1.5}\\n },\\n \\\"hover\\\": {\\n \\\"size\\\":{\\\"value\\\": 400},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"datum.parentData ? {'Name': datum.name, 'Parent Group': datum.parentData.name} : {'Name': datum.name}\\\"\\n\\n }\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"text\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"tree\\\"},\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"black\\\"},\\n \\\"text\\\": {\\\"field\\\": \\\"name\\\"},\\n \\\"fontSize\\\": {\\\"value\\\": 12},\\n \\\"baseline\\\": {\\\"value\\\": \\\"middle\\\"}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"field\\\": \\\"x\\\"},\\n \\\"y\\\": {\\\"field\\\": \\\"y\\\"},\\n \\\"dx\\\": {\\\"signal\\\": \\\"datum.children ? -7 : 7\\\"},\\n \\\"align\\\": {\\\"signal\\\": \\\"datum.children ? 'right' : 'left'\\\"},\\n \\\"opacity\\\": {\\\"signal\\\": \\\"labels ? 1 : 0\\\"}\\n }\\n }\\n }\\n ]\\n}\\n\"}}"},"id":"1df769d0-e2f6-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-03-15T18:01:58.765Z","version":"WzI4Nyw3XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"multi-line-selectable-date-metrics-request-rate","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"multi-line-selectable-date-metrics-request-rate\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"title\\\": \\\"Metrics Requests Rate\\\",\\n \\\"data\\\": [\\n {\\n \\\"name\\\": \\\"rawdata\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"%context%\\\": true,\\n \\\"%timefield%\\\": \\\"time\\\",\\n \\\"body\\\": {\\n \\\"size\\\": 0,\\n \\\"aggs\\\": {\\n \\\"metrics\\\": {\\n \\\"terms\\\": {\\n \\\"field\\\": \\\"name.keyword\\\",\\n \\\"size\\\": 10\\n },\\n \\\"aggs\\\": {\\n \\\"time_buckets\\\": {\\n \\\"date_histogram\\\": {\\n \\\"field\\\": \\\"time\\\",\\n \\\"interval\\\": {\\\"%autointerval%\\\": true},\\n \\\"extended_bounds\\\": {\\n \\\"min\\\": {\\\"%timefilter%\\\": \\\"min\\\"},\\n \\\"max\\\": {\\\"%timefilter%\\\": \\\"max\\\"}\\n },\\n \\\"min_doc_count\\\":0\\n }\\n }\\n }\\n }\\n\\n }\\n }\\n },\\n \\\"format\\\": {\\\"property\\\": \\\"aggregations.metrics.buckets\\\"}\\n },\\n {\\n \\\"name\\\": \\\"flatdata\\\",\\n \\\"source\\\": \\\"rawdata\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"flatten\\\",\\n \\\"fields\\\": [\\\"time_buckets.buckets\\\"],\\n \\\"as\\\": [\\\"val\\\"]\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"count\\\",\\n \\\"expr\\\":\\\"datum.val.doc_count\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"time\\\",\\n \\\"expr\\\": \\\"timeFormat(utcParse(datum.val.key_as_string,'%Y-%m-%dT%H:%M:%S.%LZ'), '%B %d, %Y %H:%M')\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"hasSelection\\\",\\n \\\"values\\\": [{}],\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"filter\\\", \\\"expr\\\": \\\"selected[0] != selected[1]\\\"}\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"groupScale\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"padding\\\": 0.1,\\n \\\"domain\\\": {\\\"data\\\": \\\"rawdata\\\", \\\"field\\\": \\\"key\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"height\\\"\\n },\\n {\\n \\\"name\\\": \\\"xScale\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"flatdata\\\", \\\"field\\\": \\\"val.key\\\"},\\n \\\"range\\\": \\\"width\\\",\\n \\\"padding\\\": 5\\n },\\n {\\n \\\"name\\\": \\\"yScale\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"flatdata\\\", \\\"field\\\": \\\"val.doc_count\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"bandwidth('groupScale')\\\"}, 0]\\n },\\n {\\n \\\"name\\\": \\\"colorScale\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"rawdata\\\", \\\"field\\\": \\\"key\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"category\\\"\\n }\\n ],\\n \\\"axes\\\": [\\n {\\\"orient\\\": \\\"bottom\\\", \\\"scale\\\": \\\"xScale\\\", \\\"tickCount\\\": 5}\\n ],\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"currentX\\\",\\n \\\"value\\\": -1,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"view:mousemove\\\", \\\"update\\\": \\\"clamp(x(), 0, width)\\\"},\\n {\\\"events\\\": \\\"view:mouseout\\\", \\\"update\\\": \\\"-1\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"selected\\\",\\n \\\"value\\\": [0, 0],\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"@grapharea:mousedown\\\", \\\"update\\\": \\\"[x(), x()]\\\"},\\n {\\n \\\"events\\\": \\\"[@grapharea:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"[selected[0], clamp(x(), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"delta\\\"},\\n \\\"update\\\": \\\"clampRange([anchor[0] + delta, anchor[1] + delta], 0, width)\\\"\\n },\\n {\\n \\\"events\\\": \\\"[@leftEdge:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"[clamp(x(), 0, width), selected[1]]\\\"\\n },\\n {\\n \\\"events\\\": \\\"[@rightEdge:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"[selected[0], clamp(x(), 0, width)]\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"anchor\\\",\\n \\\"value\\\": null,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"@selectedRect:mousedown\\\", \\\"update\\\": \\\"selected\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"xDown\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"@selectedRect:mousedown\\\", \\\"update\\\": \\\"x()\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"delta\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"[@selectedRect:mousedown, window:mouseup] > window:mousemove!\\\", \\\"update\\\": \\\"x() - xDown\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"applyTimeFilter\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"@applyTimeFilterButton:click, @selectedRect:dblclick\\\",\\n \\\"update\\\": \\\"opensearchDashboardsSetTimeFilter(invert('xScale',selected[0]), invert('xScale',selected[1]))\\\"\\n },\\n {\\\"events\\\": \\\"@grapharea:dblclick\\\", \\\"update\\\": \\\"opensearchDashboardsSetTimeFilter('now-15d', 'now')\\\"}\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"grapharea\\\",\\n \\\"type\\\": \\\"group\\\",\\n \\\"from\\\": {\\n \\\"facet\\\": {\\\"name\\\": \\\"facets\\\", \\\"data\\\": \\\"rawdata\\\", \\\"field\\\": \\\"time_buckets.buckets\\\"}\\n },\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"y\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"field\\\": \\\"key\\\"},\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"x\\\": {\\\"value\\\": 0},\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0},\\n \\\"fill\\\": {\\\"value\\\": \\\"#000\\\"},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'metrics': datum['key']}\\\"\\n }\\n }\\n },\\n \\\"axes\\\": [\\n {\\n \\\"orient\\\": \\\"left\\\",\\n \\\"scale\\\": \\\"yScale\\\",\\n \\\"title\\\": {\\\"signal\\\": \\\"parent.key\\\"},\\n \\\"tickCount\\\": 4,\\n \\\"encode\\\": {\\n \\\"title\\\": {\\n \\\"name\\\": \\\"extFilter\\\",\\n \\\"interactive\\\": true,\\n \\\"update\\\": {\\n \\\"cursor\\\": {\\\"value\\\": \\\"pointer\\\"},\\n \\\"fontSize\\\": {\\\"value\\\": 8},\\n \\\"fill\\\": {\\\"value\\\": \\\"steelblue\\\"}\\n },\\n \\\"hover\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"}\\n }\\n }\\n }\\n }\\n ],\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"updateErrFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"source\\\": \\\"scope\\\", \\\"markname\\\": \\\"extErrorFilter\\\", \\\"type\\\": \\\"click\\\"},\\n \\\"update\\\": \\\"{'match': {'status.code': {'query': 2, 'type': 'phrase'}}}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"applyErrorFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"updateErrFilterObj\\\"},\\n \\\"update\\\": \\\"length(domain('groupScale')) > 1 ? opensearchDashboardsAddFilter(updateErrFilterObj) : opensearchDashboardsRemoveFilter(updateErrFilterObj)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"updateFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"source\\\": \\\"scope\\\", \\\"markname\\\": \\\"extFilter\\\", \\\"type\\\": \\\"click\\\"},\\n \\\"update\\\": \\\"{'match': {'metrics': {'query': parent.key, 'type': 'phrase'}}}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"applyFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"updateFilterObj\\\"},\\n \\\"update\\\": \\\"length(domain('groupScale')) > 1 ? opensearchDashboardsAddFilter(updateFilterObj) : opensearchDashboardsRemoveFilter(updateFilterObj)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"line\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"facets\\\"},\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"scale\\\": \\\"xScale\\\", \\\"field\\\": \\\"key\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"yScale\\\", \\\"field\\\": \\\"doc_count\\\"},\\n \\\"fill\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.2},\\n \\\"stroke\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}}\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"from\\\": {\\n \\\"data\\\": \\\"facets\\\"\\n },\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\n \\\"scale\\\": \\\"xScale\\\",\\n \\\"field\\\": \\\"key\\\"\\n },\\n \\\"y\\\": {\\n \\\"scale\\\": \\\"yScale\\\",\\n \\\"field\\\": \\\"doc_count\\\"\\n },\\n \\\"size\\\": {\\n \\\"value\\\": 8\\n },\\n \\\"stroke\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'Date': timeFormat(datum['key'], '%Y-%m-%d %H:%M'), 'Value': datum['doc_count']}\\\"\\n }\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"hasSelection\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"selectedRect\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.2},\\n \\\"cursor\\\": {\\\"value\\\": \\\"move\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"selected[0]\\\"},\\n \\\"x2\\\": {\\\"signal\\\": \\\"selected[1]\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"leftEdge\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"width\\\": {\\\"value\\\": 2},\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"},\\n \\\"cursor\\\": {\\\"value\\\": \\\"ew-resize\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"selected[0]\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"rightEdge\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"width\\\": {\\\"value\\\": 2},\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"},\\n \\\"cursor\\\": {\\\"value\\\": \\\"ew-resize\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"selected[1]\\\"}\\n }\\n }\\n }\\n ]\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"applyTimeFilterButton\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"hasSelection\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"cursor\\\": {\\\"value\\\": \\\"pointer\\\"},\\n \\\"cornerRadius\\\": {\\\"value\\\": 6},\\n \\\"fill\\\": {\\\"value\\\": \\\"#f5f5f5\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"#c1c1c1\\\"},\\n \\\"strokeWidth\\\": {\\\"value\\\": 2},\\n \\\"xc\\\": {\\\"signal\\\": \\\"width/2\\\"},\\n \\\"y\\\": {\\\"value\\\": 30},\\n \\\"width\\\": {\\\"value\\\": 80},\\n \\\"height\\\": {\\\"value\\\": 30},\\n \\\"opacity\\\": {\\\"value\\\": 1}\\n },\\n \\\"hover\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"text\\\",\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"xc\\\": {\\\"field\\\": {\\\"group\\\": \\\"width\\\"}, \\\"mult\\\": 0.5},\\n \\\"yc\\\": {\\\"field\\\": {\\\"group\\\": \\\"height\\\"}, \\\"mult\\\": 0.5, \\\"offset\\\": 2},\\n \\\"align\\\": {\\\"value\\\": \\\"center\\\"},\\n \\\"baseline\\\": {\\\"value\\\": \\\"middle\\\"},\\n \\\"fontWeight\\\": {\\\"value\\\": \\\"bold\\\"},\\n \\\"text\\\": {\\\"value\\\": \\\"Apply Filter\\\"}\\n }\\n }\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"rule\\\",\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"y\\\": {\\\"value\\\": 0},\\n \\\"y2\\\": {\\\"signal\\\": \\\"height\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"gray\\\"},\\n \\\"strokeDash\\\": {\\\"value\\\": [2, 1]},\\n \\\"x\\\": {\\\"signal\\\": \\\"max(currentX,0)\\\"},\\n \\\"strokeOpacity\\\": {\\\"signal\\\": \\\"currentX > 0 ? 1 : 0\\\"}\\n }\\n }\\n }\\n ]\\n}\\n\"}}"},"id":"8d7b0350-e406-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-03-17T02:37:25.228Z","version":"WzM1NSw4XQ=="}
-{"attributes":{"fields":"[{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"destination.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.resource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"hashId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target.resource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","title":"otel-v1-apm-service-map"},"id":"79a3b09c-71e8-4c6d-a755-382d1338fb94","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2024-03-03T06:18:11.955Z","version":"WzMwLDFd"}
-{"attributes":{"fields":"[{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"droppedEventsCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"droppedLinksCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"durationInNanos\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"endTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"events.attributes.app@payment@transaction@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@payment@transaction@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@payment@transaction@id\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@quote@cost@total\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@cost@total\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@cost@total.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@shipping@cost@total\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@tracking@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@tracking@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@shipping@tracking@id\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@escaped\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@escaped.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@escaped\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@message.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@message\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@stacktrace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@stacktrace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@stacktrace\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@type\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.message@type\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.name\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.time\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"instrumentationScope.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.name\"}}},{\"count\":0,\"name\":\"instrumentationScope.version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.version\"}}},{\"count\":0,\"name\":\"kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"links.droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.spanId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.spanId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.spanId\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.traceId\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.traceState\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"parentSpanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.container@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.host@arch\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.host@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command_args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@executable@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@executable@path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@pid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@instance@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@auto@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@language\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@ad_request_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@ad_response_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@contextKeys\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@contextKeys@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@cart@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@currency@conversion@from\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@currency@conversion@to\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@email@recipient\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@featureflag@enabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@featureflag@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@filtered_products@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@filtered_products@list\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@card_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@card_valid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@charged\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@quantity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@products@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@products_recommended@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@quote@cost@total\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@quote@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@recommendation@cache_enabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@session@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@cost@total\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@tracking@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@zip_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@synthetic_request\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@user@currency\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@user@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.busy_ns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@filepath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@function\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@lineno\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@instance\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@redis@database_index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@redis@flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@statement\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.decode_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@client_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@flavor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@request_content_length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@request_content_length_uncompressed\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@response_content_length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@route\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@scheme\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@status_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@status_text\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@target\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.idle_ns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.idle_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.jinja2@template_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.jinja2@template_path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@client_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@destination@kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@destination@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@consumer@group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@destination@partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@message@offset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@message@payload_size_bytes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@host@addr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@peer@addr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@peer@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@transport\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.peer@service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.phoenix@action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.phoenix@plug\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.query_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.queue_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@grpc@status_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.sinatra@template_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.thread@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.thread@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.total_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"spanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"startTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status.code\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.durationInNanos\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.endTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.statusCode\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"traceState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"traceState\"}}}]","timeFieldName":"startTime","title":"otel-v1-apm-span-0*"},"id":"a7cea13f-0173-4ade-8993-f4468193da16","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2024-03-03T06:18:11.955Z","version":"WzI5LDFd"}
-{"attributes":{"description":"traces by response code","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"traces-by-response-code","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"traces-by-response-code\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1708642305489\",\"fieldName\":\"serviceName\",\"parent\":\"\",\"label\":\"services\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1708641641797\",\"fieldName\":\"span.attributes.http@status_code\",\"parent\":\"\",\"label\":\"response-status\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_1_index_pattern\"},{\"id\":\"1708642009521\",\"fieldName\":\"traceGroup\",\"parent\":\"\",\"label\":\"group\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_2_index_pattern\"}],\"updateFiltersOnChange\":true,\"useTimeFilter\":true,\"pinFilters\":false}}"},"id":"7e12d8ea-1220-4caa-b145-d6be91b46170","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"79a3b09c-71e8-4c6d-a755-382d1338fb94","name":"control_0_index_pattern","type":"index-pattern"},{"id":"a7cea13f-0173-4ade-8993-f4468193da16","name":"control_1_index_pattern","type":"index-pattern"},{"id":"a7cea13f-0173-4ade-8993-f4468193da16","name":"control_2_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-03T06:18:11.955Z","version":"WzMxLDFd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Hexagon-pods-map","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Hexagon-pods-map\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"config\\\": {\\n \\\"view\\\": {\\\"continuousWidth\\\": 300, \\\"continuousHeight\\\": 300, \\\"strokeWidth\\\": 0}\\n },\\n \\\"data\\\": {\\\"name\\\": \\\"data-830c39fec90146253fb06a06c26374ef\\\"},\\n \\n \\\"mark\\\": {\\n \\\"type\\\": \\\"point\\\",\\n \\\"shape\\\": \\\"M0,-2.3094010768L2,-1.1547005384 2,1.1547005384 0,2.3094010768 -2,1.1547005384 -2,-1.1547005384Z\\\",\\n \\\"size\\\": 925\\n },\\n \\\"encoding\\\": {\\n \\\"fill\\\": {\\n \\\"aggregate\\\": \\\"mean\\\",\\n \\\"field\\\": \\\"temp_max\\\",\\n \\\"scale\\\": {\\\"scheme\\\": \\\"darkblue\\\"},\\n \\\"type\\\": \\\"quantitative\\\"\\n \\\"title\\\":\\\"Issues Per Pod\\\"\\n },\\n \\\"stroke\\\": {\\\"value\\\": \\\"black\\\"},\\n \\\"strokeWidth\\\": {\\\"value\\\": 0.2},\\n \\\"tooltip\\\": [\\n {\\\"aggregate\\\": \\\"mean\\\", \\\"field\\\": \\\"temp_max\\\", \\\"type\\\": \\\"quantitative\\\", \\\"title\\\":\\\"Avg Daily Errors\\\"}\\n ]\\n \\\"x\\\": {\\n \\\"axis\\\": {\\n \\\"domainOpacity\\\": 0,\\n \\\"grid\\\": true,\\n \\\"tickOpacity\\\": 0,\\n },\\n \\\"title\\\": null\\n \\\"field\\\": \\\"xFeaturePos\\\",\\n \\\"type\\\": \\\"quantitative\\\"\\n },\\n \\\"y\\\": {\\n \\\"axis\\\": {\\n \\\"domainOpacity\\\": 0,\\n \\\"labelPadding\\\": 20,\\n \\\"tickOpacity\\\": 0,\\n \\\"title\\\": \\\"Pods\\\"\\n },\\n \\\"title\\\": null\\n \\\"field\\\": \\\"date\\\",\\n \\\"timeUnit\\\": \\\"day\\\",\\n \\\"type\\\": \\\"ordinal\\\"\\n }\\n },\\n \\\"transform\\\": [\\n {\\n \\\"calculate\\\": \\\"(day(datum.date) % 2) / 2 + month(datum.date)\\\",\\n \\\"as\\\": \\\"xFeaturePos\\\"\\n }\\n ]\\n\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega-lite/v5.6.0.json\\\",\\n \\\"datasets\\\": {\\n \\\"data-830c39fec90146253fb06a06c26374ef\\\": [\\n {\\n \\\"date\\\": \\\"2012-01-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-02T00:00:00\\\",\\n \\\"precipitation\\\": 10.9,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-03T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-04T00:00:00\\\",\\n \\\"precipitation\\\": 20.3,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-05T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 6.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-06T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 4.4,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-09T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-10T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": -1.1,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": -1.7,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": -2.8,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-14T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 4.4,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-15T00:00:00\\\",\\n \\\"precipitation\\\": 5.3,\\n \\\"temp_max\\\": 1.1,\\n \\\"temp_min\\\": -3.3,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-16T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 1.7,\\n \\\"temp_min\\\": -2.8,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-17T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 5.6,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-18T00:00:00\\\",\\n \\\"precipitation\\\": 19.8,\\n \\\"temp_max\\\": 0,\\n \\\"temp_min\\\": -2.8,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-19T00:00:00\\\",\\n \\\"precipitation\\\": 15.2,\\n \\\"temp_max\\\": -1.1,\\n \\\"temp_min\\\": -2.8,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-20T00:00:00\\\",\\n \\\"precipitation\\\": 13.5,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": -1.1,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-21T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 8.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-22T00:00:00\\\",\\n \\\"precipitation\\\": 6.1,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 4.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-24T00:00:00\\\",\\n \\\"precipitation\\\": 8.6,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-25T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 5.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-26T00:00:00\\\",\\n \\\"precipitation\\\": 4.8,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 4.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": -2.2,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-29T00:00:00\\\",\\n \\\"precipitation\\\": 27.7,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-30T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-31T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-01T00:00:00\\\",\\n \\\"precipitation\\\": 13.5,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-07T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-08T00:00:00\\\",\\n \\\"precipitation\\\": 2.8,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-09T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-10T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-11T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-12T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-13T00:00:00\\\",\\n \\\"precipitation\\\": 11.4,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-14T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-16T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-17T00:00:00\\\",\\n \\\"precipitation\\\": 17.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-18T00:00:00\\\",\\n \\\"precipitation\\\": 6.4,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 8.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-20T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-21T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 7.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-22T00:00:00\\\",\\n \\\"precipitation\\\": 8.6,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-24T00:00:00\\\",\\n \\\"precipitation\\\": 11.4,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-26T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": -1.1,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": -2.2,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-28T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": -0.6,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-29T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 7,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-02T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 5.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-05T00:00:00\\\",\\n \\\"precipitation\\\": 6.9,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 6.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-06T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": -1.7,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-09T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-10T00:00:00\\\",\\n \\\"precipitation\\\": 10.4,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-11T00:00:00\\\",\\n \\\"precipitation\\\": 13.7,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 5.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-12T00:00:00\\\",\\n \\\"precipitation\\\": 19.3,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 6.2,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-13T00:00:00\\\",\\n \\\"precipitation\\\": 9.4,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-14T00:00:00\\\",\\n \\\"precipitation\\\": 8.6,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-15T00:00:00\\\",\\n \\\"precipitation\\\": 23.9,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 5.8,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-16T00:00:00\\\",\\n \\\"precipitation\\\": 8.4,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-17T00:00:00\\\",\\n \\\"precipitation\\\": 9.4,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-18T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": -0.6,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-19T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": -1.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-20T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-21T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-22T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 5.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-27T00:00:00\\\",\\n \\\"precipitation\\\": 4.8,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-28T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-29T00:00:00\\\",\\n \\\"precipitation\\\": 27.4,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-30T00:00:00\\\",\\n \\\"precipitation\\\": 5.6,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-31T00:00:00\\\",\\n \\\"precipitation\\\": 13.2,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-01T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 6.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-03T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-05T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-06T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-11T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-12T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-16T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 5.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-17T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-18T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-19T00:00:00\\\",\\n \\\"precipitation\\\": 10.9,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-20T00:00:00\\\",\\n \\\"precipitation\\\": 6.6,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-24T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-25T00:00:00\\\",\\n \\\"precipitation\\\": 10.7,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-26T00:00:00\\\",\\n \\\"precipitation\\\": 3.8,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 5.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-27T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-29T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-30T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-01T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-02T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-03T00:00:00\\\",\\n \\\"precipitation\\\": 18.5,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-04T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-20T00:00:00\\\",\\n \\\"precipitation\\\": 6.4,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-21T00:00:00\\\",\\n \\\"precipitation\\\": 14,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-22T00:00:00\\\",\\n \\\"precipitation\\\": 6.1,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-23T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 6.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-30T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-31T00:00:00\\\",\\n \\\"precipitation\\\": 3.8,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-01T00:00:00\\\",\\n \\\"precipitation\\\": 6.6,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-02T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-04T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-05T00:00:00\\\",\\n \\\"precipitation\\\": 16,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-07T00:00:00\\\",\\n \\\"precipitation\\\": 16.5,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-08T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-12T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-18T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-19T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-22T00:00:00\\\",\\n \\\"precipitation\\\": 15.7,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-23T00:00:00\\\",\\n \\\"precipitation\\\": 8.6,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-25T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-29T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-30T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-02T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-03T00:00:00\\\",\\n \\\"precipitation\\\": 5.8,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-09T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-13T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-16T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-20T00:00:00\\\",\\n \\\"precipitation\\\": 15.2,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-22T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.9,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.9,\\n \\\"temp_min\\\": 17.8,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 34.4,\\n \\\"temp_min\\\": 18.3,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 32.8,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 32.2,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-09T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-10T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 5.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-22T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 7.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 6.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 5.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-12T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-13T00:00:00\\\",\\n \\\"precipitation\\\": 4.8,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-14T00:00:00\\\",\\n \\\"precipitation\\\": 16.5,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-15T00:00:00\\\",\\n \\\"precipitation\\\": 7.9,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 5.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-18T00:00:00\\\",\\n \\\"precipitation\\\": 20.8,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-19T00:00:00\\\",\\n \\\"precipitation\\\": 4.8,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-20T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 5.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-21T00:00:00\\\",\\n \\\"precipitation\\\": 6.4,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-22T00:00:00\\\",\\n \\\"precipitation\\\": 8.9,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-24T00:00:00\\\",\\n \\\"precipitation\\\": 7.1,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-26T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-27T00:00:00\\\",\\n \\\"precipitation\\\": 23.1,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-28T00:00:00\\\",\\n \\\"precipitation\\\": 6.1,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-29T00:00:00\\\",\\n \\\"precipitation\\\": 10.9,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 4.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-30T00:00:00\\\",\\n \\\"precipitation\\\": 34.5,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-31T00:00:00\\\",\\n \\\"precipitation\\\": 14.5,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-01T00:00:00\\\",\\n \\\"precipitation\\\": 9.7,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-02T00:00:00\\\",\\n \\\"precipitation\\\": 5.6,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-03T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-04T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-05T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-06T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": -0.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-11T00:00:00\\\",\\n \\\"precipitation\\\": 15.2,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-12T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-13T00:00:00\\\",\\n \\\"precipitation\\\": 5.3,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-14T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-16T00:00:00\\\",\\n \\\"precipitation\\\": 5.6,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-17T00:00:00\\\",\\n \\\"precipitation\\\": 6.1,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-18T00:00:00\\\",\\n \\\"precipitation\\\": 7.9,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-19T00:00:00\\\",\\n \\\"precipitation\\\": 54.1,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-20T00:00:00\\\",\\n \\\"precipitation\\\": 3.8,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-21T00:00:00\\\",\\n \\\"precipitation\\\": 11.2,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 5.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-23T00:00:00\\\",\\n \\\"precipitation\\\": 32,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-28T00:00:00\\\",\\n \\\"precipitation\\\": 2.8,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-29T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-30T00:00:00\\\",\\n \\\"precipitation\\\": 35.6,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-01T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 5.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-02T00:00:00\\\",\\n \\\"precipitation\\\": 19.6,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 6.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-03T00:00:00\\\",\\n \\\"precipitation\\\": 13,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-04T00:00:00\\\",\\n \\\"precipitation\\\": 14.2,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 6.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-05T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-06T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-07T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-09T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-10T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-11T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-12T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-13T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-14T00:00:00\\\",\\n \\\"precipitation\\\": 7.9,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-15T00:00:00\\\",\\n \\\"precipitation\\\": 5.3,\\n \\\"temp_max\\\": 4.4,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-16T00:00:00\\\",\\n \\\"precipitation\\\": 22.6,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 5.5,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-17T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 9.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-18T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 3.9,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-19T00:00:00\\\",\\n \\\"precipitation\\\": 13.7,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 5.8,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-20T00:00:00\\\",\\n \\\"precipitation\\\": 13.2,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-21T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": -1.7,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-22T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-23T00:00:00\\\",\\n \\\"precipitation\\\": 6.6,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-24T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-25T00:00:00\\\",\\n \\\"precipitation\\\": 13.5,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-26T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 4.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-27T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-29T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 4.4,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": -1.1,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": -2.8,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": -1.1,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-03T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": -1.7,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-04T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-05T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-06T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-07T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 7.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-08T00:00:00\\\",\\n \\\"precipitation\\\": 16.3,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 6.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-09T00:00:00\\\",\\n \\\"precipitation\\\": 38.4,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-10T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": -0.6,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 2.8,\\n \\\"temp_min\\\": -2.8,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 2.8,\\n \\\"temp_min\\\": -3.9,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 2.2,\\n \\\"temp_min\\\": -4.4,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": -2.2,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": -0.6,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": -3.9,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 3.9,\\n \\\"temp_min\\\": -2.8,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": -1.1,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 1.1,\\n \\\"temp_min\\\": -0.6,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": -0.6,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 2.2,\\n \\\"temp_min\\\": -1.7,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": -1.7,\\n \\\"wind\\\": 0.6,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-23T00:00:00\\\",\\n \\\"precipitation\\\": 5.1,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-24T00:00:00\\\",\\n \\\"precipitation\\\": 5.8,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-25T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-26T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-27T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-28T00:00:00\\\",\\n \\\"precipitation\\\": 7.9,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-29T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-30T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-31T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-01T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-03T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-05T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-06T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-07T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-09T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-11T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-12T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-13T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-14T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 5.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-20T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-21T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 6.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-22T00:00:00\\\",\\n \\\"precipitation\\\": 9.4,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 8.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-23T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 5.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-25T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 7.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-26T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-27T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-28T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-01T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 5.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-02T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-06T00:00:00\\\",\\n \\\"precipitation\\\": 11.9,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-07T00:00:00\\\",\\n \\\"precipitation\\\": 7.4,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-10T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-11T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-12T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 5.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-13T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-14T00:00:00\\\",\\n \\\"precipitation\\\": 2.8,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-16T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 6.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-19T00:00:00\\\",\\n \\\"precipitation\\\": 11.7,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-20T00:00:00\\\",\\n \\\"precipitation\\\": 9.9,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 7.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-21T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 4.9,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-27T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-28T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-04T00:00:00\\\",\\n \\\"precipitation\\\": 8.4,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-05T00:00:00\\\",\\n \\\"precipitation\\\": 18.5,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 5.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-06T00:00:00\\\",\\n \\\"precipitation\\\": 12.7,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-07T00:00:00\\\",\\n \\\"precipitation\\\": 39.1,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-08T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-10T00:00:00\\\",\\n \\\"precipitation\\\": 9.4,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-11T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-12T00:00:00\\\",\\n \\\"precipitation\\\": 9.7,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-13T00:00:00\\\",\\n \\\"precipitation\\\": 9.4,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 5.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-14T00:00:00\\\",\\n \\\"precipitation\\\": 5.8,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-16T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-18T00:00:00\\\",\\n \\\"precipitation\\\": 5.3,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-19T00:00:00\\\",\\n \\\"precipitation\\\": 20.6,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 4.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 5.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-21T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-28T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 5.2,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-29T00:00:00\\\",\\n \\\"precipitation\\\": 3.8,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 4.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 6.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-12T00:00:00\\\",\\n \\\"precipitation\\\": 6.6,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-13T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-15T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-17T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-21T00:00:00\\\",\\n \\\"precipitation\\\": 13.7,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-22T00:00:00\\\",\\n \\\"precipitation\\\": 13.7,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-23T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-24T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-26T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-27T00:00:00\\\",\\n \\\"precipitation\\\": 9.7,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-28T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-29T00:00:00\\\",\\n \\\"precipitation\\\": 5.6,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-02T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 5.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-12T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-18T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-20T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-21T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-23T00:00:00\\\",\\n \\\"precipitation\\\": 7.9,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-24T00:00:00\\\",\\n \\\"precipitation\\\": 4.8,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-25T00:00:00\\\",\\n \\\"precipitation\\\": 9.9,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-26T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-27T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 18.3,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.9,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.7,\\n \\\"temp_min\\\": 18.3,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 18.3,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-02T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-10T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-14T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-15T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-25T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-26T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-27T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-28T00:00:00\\\",\\n \\\"precipitation\\\": 5.6,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-29T00:00:00\\\",\\n \\\"precipitation\\\": 19.3,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 18.3,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-03T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-04T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-05T00:00:00\\\",\\n \\\"precipitation\\\": 27.7,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-06T00:00:00\\\",\\n \\\"precipitation\\\": 21.3,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.9,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-15T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-16T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-20T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-22T00:00:00\\\",\\n \\\"precipitation\\\": 13.5,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 5.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-23T00:00:00\\\",\\n \\\"precipitation\\\": 2.8,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-25T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-27T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-28T00:00:00\\\",\\n \\\"precipitation\\\": 43.4,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-29T00:00:00\\\",\\n \\\"precipitation\\\": 16.8,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 7.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-30T00:00:00\\\",\\n \\\"precipitation\\\": 18.5,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 6.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-01T00:00:00\\\",\\n \\\"precipitation\\\": 7.9,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-02T00:00:00\\\",\\n \\\"precipitation\\\": 5.3,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-03T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 0.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-06T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-07T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 6.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-08T00:00:00\\\",\\n \\\"precipitation\\\": 6.9,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-10T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-11T00:00:00\\\",\\n \\\"precipitation\\\": 9.1,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-12T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 0.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 0.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 0.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-27T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-30T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-31T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-01T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-02T00:00:00\\\",\\n \\\"precipitation\\\": 12.7,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 7.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-03T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-05T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-06T00:00:00\\\",\\n \\\"precipitation\\\": 3.8,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-07T00:00:00\\\",\\n \\\"precipitation\\\": 30,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 7.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-09T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-12T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-14T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-15T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-17T00:00:00\\\",\\n \\\"precipitation\\\": 5.3,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-18T00:00:00\\\",\\n \\\"precipitation\\\": 26.2,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-19T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": -0.5,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 0.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 0.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 0.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-29T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-30T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-01T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 8.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-02T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": -0.5,\\n \\\"wind\\\": 5.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 4.4,\\n \\\"temp_min\\\": -2.1,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 1.1,\\n \\\"temp_min\\\": -4.9,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 1.1,\\n \\\"temp_min\\\": -4.3,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 0,\\n \\\"temp_min\\\": -7.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 2.2,\\n \\\"temp_min\\\": -6.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 1.1,\\n \\\"temp_min\\\": -4.9,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": -1.6,\\n \\\"wind\\\": 0.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-12T00:00:00\\\",\\n \\\"precipitation\\\": 6.9,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": -0.5,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-13T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-15T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-16T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-18T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-20T00:00:00\\\",\\n \\\"precipitation\\\": 5.6,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-21T00:00:00\\\",\\n \\\"precipitation\\\": 5.6,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-22T00:00:00\\\",\\n \\\"precipitation\\\": 10.7,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-23T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 0.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 0.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-27T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-30T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-31T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 1.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-02T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-03T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": -0.5,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-06T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": -0.5,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-07T00:00:00\\\",\\n \\\"precipitation\\\": 12.2,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-08T00:00:00\\\",\\n \\\"precipitation\\\": 9.7,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-09T00:00:00\\\",\\n \\\"precipitation\\\": 5.8,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 6.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-10T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-11T00:00:00\\\",\\n \\\"precipitation\\\": 21.3,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 8.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-12T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 8.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 7.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-22T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 5.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 0.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-28T00:00:00\\\",\\n \\\"precipitation\\\": 8.9,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-29T00:00:00\\\",\\n \\\"precipitation\\\": 21.6,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-31T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-01T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 0.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 2.8,\\n \\\"temp_min\\\": -2.1,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": -0.5,\\n \\\"temp_min\\\": -5.5,\\n \\\"wind\\\": 6.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": -1.6,\\n \\\"temp_min\\\": -6,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": -4.9,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-08T00:00:00\\\",\\n \\\"precipitation\\\": 5.1,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": -0.5,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-09T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 3.9,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-10T00:00:00\\\",\\n \\\"precipitation\\\": 18.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-11T00:00:00\\\",\\n \\\"precipitation\\\": 17,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-12T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-13T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 6.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-14T00:00:00\\\",\\n \\\"precipitation\\\": 9.4,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-15T00:00:00\\\",\\n \\\"precipitation\\\": 11.7,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-16T00:00:00\\\",\\n \\\"precipitation\\\": 26.4,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 7.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-17T00:00:00\\\",\\n \\\"precipitation\\\": 14.5,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 5.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-18T00:00:00\\\",\\n \\\"precipitation\\\": 15.2,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 6.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-19T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-20T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 6.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-21T00:00:00\\\",\\n \\\"precipitation\\\": 2.8,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-22T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-23T00:00:00\\\",\\n \\\"precipitation\\\": 6.1,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-24T00:00:00\\\",\\n \\\"precipitation\\\": 13,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-25T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-01T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-02T00:00:00\\\",\\n \\\"precipitation\\\": 19.1,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 5.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-03T00:00:00\\\",\\n \\\"precipitation\\\": 10.7,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-04T00:00:00\\\",\\n \\\"precipitation\\\": 16.5,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-05T00:00:00\\\",\\n \\\"precipitation\\\": 46.7,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-06T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 6.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-08T00:00:00\\\",\\n \\\"precipitation\\\": 32.3,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-09T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-10T00:00:00\\\",\\n \\\"precipitation\\\": 18.8,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-13T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-14T00:00:00\\\",\\n \\\"precipitation\\\": 6.9,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 6.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-15T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-16T00:00:00\\\",\\n \\\"precipitation\\\": 27.7,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-17T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-19T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-25T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-26T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-27T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-28T00:00:00\\\",\\n \\\"precipitation\\\": 22.1,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-29T00:00:00\\\",\\n \\\"precipitation\\\": 14,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-03T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-05T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-08T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-15T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-16T00:00:00\\\",\\n \\\"precipitation\\\": 10.9,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-17T00:00:00\\\",\\n \\\"precipitation\\\": 18.5,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-19T00:00:00\\\",\\n \\\"precipitation\\\": 13.7,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-21T00:00:00\\\",\\n \\\"precipitation\\\": 5.1,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-22T00:00:00\\\",\\n \\\"precipitation\\\": 14.2,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-23T00:00:00\\\",\\n \\\"precipitation\\\": 8.9,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-24T00:00:00\\\",\\n \\\"precipitation\\\": 12.4,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-26T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-27T00:00:00\\\",\\n \\\"precipitation\\\": 6.9,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 5.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 29.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-03T00:00:00\\\",\\n \\\"precipitation\\\": 33.3,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-04T00:00:00\\\",\\n \\\"precipitation\\\": 16,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-05T00:00:00\\\",\\n \\\"precipitation\\\": 5.1,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-08T00:00:00\\\",\\n \\\"precipitation\\\": 13.7,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-09T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-10T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-23T00:00:00\\\",\\n \\\"precipitation\\\": 3.8,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-25T00:00:00\\\",\\n \\\"precipitation\\\": 5.6,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-12T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-13T00:00:00\\\",\\n \\\"precipitation\\\": 6.4,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-15T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-16T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-17T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-19T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-20T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-27T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-28T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 34.4,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 17.8,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 32.2,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 29.4,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 5.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-22T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-23T00:00:00\\\",\\n \\\"precipitation\\\": 19.3,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 29.4,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 17.8,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-02T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 29.4,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.7,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 32.8,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-11T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 35.6,\\n \\\"temp_min\\\": 17.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-12T00:00:00\\\",\\n \\\"precipitation\\\": 12.7,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-13T00:00:00\\\",\\n \\\"precipitation\\\": 21.6,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 0.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-15T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 29.4,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-30T00:00:00\\\",\\n \\\"precipitation\\\": 8.4,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-31T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-02T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 6.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 32.2,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 1.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-17T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-18T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-22T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-23T00:00:00\\\",\\n \\\"precipitation\\\": 18.3,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-24T00:00:00\\\",\\n \\\"precipitation\\\": 20.3,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-25T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-26T00:00:00\\\",\\n \\\"precipitation\\\": 8.9,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-29T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 1.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-10T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-11T00:00:00\\\",\\n \\\"precipitation\\\": 7.4,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-13T00:00:00\\\",\\n \\\"precipitation\\\": 7.6,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-14T00:00:00\\\",\\n \\\"precipitation\\\": 7.1,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-15T00:00:00\\\",\\n \\\"precipitation\\\": 8.6,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-17T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-18T00:00:00\\\",\\n \\\"precipitation\\\": 15,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-20T00:00:00\\\",\\n \\\"precipitation\\\": 11.7,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-21T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-22T00:00:00\\\",\\n \\\"precipitation\\\": 32,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-23T00:00:00\\\",\\n \\\"precipitation\\\": 9.4,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-24T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-25T00:00:00\\\",\\n \\\"precipitation\\\": 6.1,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 5.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-26T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-27T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-28T00:00:00\\\",\\n \\\"precipitation\\\": 12.7,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-29T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-30T00:00:00\\\",\\n \\\"precipitation\\\": 25.4,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-31T00:00:00\\\",\\n \\\"precipitation\\\": 17,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-02T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-03T00:00:00\\\",\\n \\\"precipitation\\\": 10.9,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 4.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-04T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-05T00:00:00\\\",\\n \\\"precipitation\\\": 4.8,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-06T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 6.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 0.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-09T00:00:00\\\",\\n \\\"precipitation\\\": 5.1,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 7.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 7.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": -2.1,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": -1.6,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": -2.1,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": -2.1,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": -0.5,\\n \\\"wind\\\": 0.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-20T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-21T00:00:00\\\",\\n \\\"precipitation\\\": 15.2,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-22T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-23T00:00:00\\\",\\n \\\"precipitation\\\": 11.9,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-24T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-25T00:00:00\\\",\\n \\\"precipitation\\\": 18.3,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-26T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-27T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 6.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-28T00:00:00\\\",\\n \\\"precipitation\\\": 34.3,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 5.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-29T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 4.4,\\n \\\"temp_min\\\": -4.3,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 2.8,\\n \\\"temp_min\\\": -4.9,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 4.4,\\n \\\"temp_min\\\": -3.2,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": -3.2,\\n \\\"wind\\\": 5.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-04T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-05T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-06T00:00:00\\\",\\n \\\"precipitation\\\": 7.4,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-08T00:00:00\\\",\\n \\\"precipitation\\\": 9.1,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-09T00:00:00\\\",\\n \\\"precipitation\\\": 9.9,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-10T00:00:00\\\",\\n \\\"precipitation\\\": 13,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 6.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-11T00:00:00\\\",\\n \\\"precipitation\\\": 6.9,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-17T00:00:00\\\",\\n \\\"precipitation\\\": 2.8,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-18T00:00:00\\\",\\n \\\"precipitation\\\": 13,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-19T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-20T00:00:00\\\",\\n \\\"precipitation\\\": 19.6,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 5.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 5.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-23T00:00:00\\\",\\n \\\"precipitation\\\": 20.6,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-24T00:00:00\\\",\\n \\\"precipitation\\\": 5.3,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 1.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-27T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 4.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-28T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": -2.1,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": -2.7,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": -3.2,\\n \\\"wind\\\": 1.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-02T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-04T00:00:00\\\",\\n \\\"precipitation\\\": 10.2,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-05T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-09T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 0.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-10T00:00:00\\\",\\n \\\"precipitation\\\": 5.8,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 0.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-11T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-15T00:00:00\\\",\\n \\\"precipitation\\\": 9.7,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-17T00:00:00\\\",\\n \\\"precipitation\\\": 26.2,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-18T00:00:00\\\",\\n \\\"precipitation\\\": 21.3,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 6.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-19T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": -0.5,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-22T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-23T00:00:00\\\",\\n \\\"precipitation\\\": 5.8,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-24T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-27T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 0.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-01T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-02T00:00:00\\\",\\n \\\"precipitation\\\": 7.4,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-03T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-04T00:00:00\\\",\\n \\\"precipitation\\\": 8.4,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-05T00:00:00\\\",\\n \\\"precipitation\\\": 26.2,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-06T00:00:00\\\",\\n \\\"precipitation\\\": 17.3,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-07T00:00:00\\\",\\n \\\"precipitation\\\": 23.6,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-08T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-09T00:00:00\\\",\\n \\\"precipitation\\\": 6.1,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-10T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-12T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-14T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 4.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 6.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-19T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-20T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 0.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-25T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-26T00:00:00\\\",\\n \\\"precipitation\\\": 9.4,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-27T00:00:00\\\",\\n \\\"precipitation\\\": 18.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 4.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": -0.5,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-10T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-11T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-13T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-14T00:00:00\\\",\\n \\\"precipitation\\\": 17,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-15T00:00:00\\\",\\n \\\"precipitation\\\": 55.9,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-16T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-17T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-20T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-21T00:00:00\\\",\\n \\\"precipitation\\\": 3.8,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-22T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-23T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-24T00:00:00\\\",\\n \\\"precipitation\\\": 7.6,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-25T00:00:00\\\",\\n \\\"precipitation\\\": 5.1,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-27T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 5.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-30T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-31T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-01T00:00:00\\\",\\n \\\"precipitation\\\": 5.1,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-03T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-06T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-07T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-10T00:00:00\\\",\\n \\\"precipitation\\\": 10.9,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 6.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-13T00:00:00\\\",\\n \\\"precipitation\\\": 14,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-14T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-21T00:00:00\\\",\\n \\\"precipitation\\\": 5.6,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-23T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-24T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-25T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-27T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-28T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-05T00:00:00\\\",\\n \\\"precipitation\\\": 6.1,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-12T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-13T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-14T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-01T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-02T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 29.4,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-19T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.7,\\n \\\"temp_min\\\": 17.8,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.3,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-28T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 18.3,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 32.2,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.9,\\n \\\"temp_min\\\": 17.8,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.3,\\n \\\"temp_min\\\": 17.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.3,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 32.8,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 29.4,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.3,\\n \\\"temp_min\\\": 17.8,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 35,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-24T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-26T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 32.2,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 34.4,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 34.4,\\n \\\"temp_min\\\": 17.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.3,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-12T00:00:00\\\",\\n \\\"precipitation\\\": 7.6,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-14T00:00:00\\\",\\n \\\"precipitation\\\": 30.5,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 5.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.7,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-20T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 29.4,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-28T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-29T00:00:00\\\",\\n \\\"precipitation\\\": 32.5,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 5.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-30T00:00:00\\\",\\n \\\"precipitation\\\": 10.2,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 5.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-01T00:00:00\\\",\\n \\\"precipitation\\\": 5.8,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-05T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-06T00:00:00\\\",\\n \\\"precipitation\\\": 5.3,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-07T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-13T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-16T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-17T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-20T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 6.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-25T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 4.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-07T00:00:00\\\",\\n \\\"precipitation\\\": 9.9,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-09T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-10T00:00:00\\\",\\n \\\"precipitation\\\": 28.7,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-12T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-13T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-17T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-18T00:00:00\\\",\\n \\\"precipitation\\\": 3.8,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-19T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-25T00:00:00\\\",\\n \\\"precipitation\\\": 8.9,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-26T00:00:00\\\",\\n \\\"precipitation\\\": 6.9,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-28T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-29T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-30T00:00:00\\\",\\n \\\"precipitation\\\": 19.3,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 6.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-31T00:00:00\\\",\\n \\\"precipitation\\\": 33,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 7.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-01T00:00:00\\\",\\n \\\"precipitation\\\": 26.2,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-02T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-03T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-05T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-07T00:00:00\\\",\\n \\\"precipitation\\\": 12.7,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-08T00:00:00\\\",\\n \\\"precipitation\\\": 6.6,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-09T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-10T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-11T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-12T00:00:00\\\",\\n \\\"precipitation\\\": 9.9,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-13T00:00:00\\\",\\n \\\"precipitation\\\": 33.5,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 6.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-14T00:00:00\\\",\\n \\\"precipitation\\\": 47.2,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-15T00:00:00\\\",\\n \\\"precipitation\\\": 22.4,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-16T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-17T00:00:00\\\",\\n \\\"precipitation\\\": 29.5,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-18T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-19T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-23T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-24T00:00:00\\\",\\n \\\"precipitation\\\": 7.1,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 5.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": -1,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": -1.6,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": -2.7,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 1.7,\\n \\\"temp_min\\\": -2.1,\\n \\\"wind\\\": 0.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-30T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": -3.8,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-01T00:00:00\\\",\\n \\\"precipitation\\\": 12.2,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-02T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-03T00:00:00\\\",\\n \\\"precipitation\\\": 12.7,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-04T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-05T00:00:00\\\",\\n \\\"precipitation\\\": 15.7,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-06T00:00:00\\\",\\n \\\"precipitation\\\": 11.2,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-07T00:00:00\\\",\\n \\\"precipitation\\\": 27.4,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-08T00:00:00\\\",\\n \\\"precipitation\\\": 54.1,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 6.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-09T00:00:00\\\",\\n \\\"precipitation\\\": 13.5,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 6.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-10T00:00:00\\\",\\n \\\"precipitation\\\": 9.4,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 7.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-11T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-12T00:00:00\\\",\\n \\\"precipitation\\\": 16,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 5.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-13T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 6.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-15T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-16T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-17T00:00:00\\\",\\n \\\"precipitation\\\": 21.8,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-18T00:00:00\\\",\\n \\\"precipitation\\\": 18.5,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-20T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 6.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-21T00:00:00\\\",\\n \\\"precipitation\\\": 27.4,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-22T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-23T00:00:00\\\",\\n \\\"precipitation\\\": 6.1,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 7.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-24T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-25T00:00:00\\\",\\n \\\"precipitation\\\": 5.8,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 4.4,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-27T00:00:00\\\",\\n \\\"precipitation\\\": 8.6,\\n \\\"temp_max\\\": 4.4,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-28T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": -1,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": -2.1,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n }\\n ]\\n }\\n}\"}}"},"id":"6b179e10-d9d7-11ee-9203-cf873e97f443","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-03-16T03:58:56.290Z","version":"WzMzMyw4XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"amp-devices-pie-chart","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"amp-devices-pie-chart\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"devices\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"attributes.metric.attributes.device.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":500,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"devices\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"93148140-e2fa-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-17T01:57:32.483Z","version":"WzM0NCw4XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"apm-read_write-direction-pie","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"apm-read_write-direction-pie\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"R/W - Direction\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"attributes.metric.attributes.direction.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":500,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"R/W - Direction\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"59e73f60-e2fb-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-17T01:57:45.524Z","version":"WzM0NSw4XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"state-metrics-pie-chart","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"state-metrics-pie-chart\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"states\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"attributes.metric.attributes.state.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":500,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"States\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"ed5276d0-e2fa-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-17T01:57:58.179Z","version":"WzM0Niw4XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.disk.io\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.disk.io\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"system.disk.io-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"system.disk.io-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"System Disk I/O Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":5000,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.direction']\\\", \\\"as\\\":\\\"direction\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"Direction\\\\\\\": isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; Direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"direction\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"direction\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 10000000000000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 10000000000000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"Direction\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"7a93f5a0-e242-11ee-80e1-bb1060c52777","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-15T18:29:55.062Z","version":"WzMwNSw3XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.disk.time\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.disk.time\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"system.disk.time-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"system.disk.time-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"System Disk Time Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":5000,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.direction']\\\", \\\"as\\\":\\\"direction\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"Direction\\\\\\\": isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; Direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"direction\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"direction\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 1000000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 1000000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"Direction\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"75095750-e2f7-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-15T18:11:59.663Z","version":"WzI5NCw3XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.disk.operations\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.disk.operations\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"system.disk.ops-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"system.disk.ops-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"System Disk Ops Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":5000,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.direction']\\\", \\\"as\\\":\\\"direction\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"Direction\\\\\\\": isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; Direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"direction\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"direction\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 1000000000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 1000000000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"Direction\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"07f1a320-e2f7-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-15T18:28:08.143Z","version":"WzMwMiw3XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.cpu.time\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.cpu.time\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"system.cpu.time-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"system.cpu.time-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"System CPU Time Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":1500,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.state']\\\", \\\"as\\\":\\\"state\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"state\\\\\\\": isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; state: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; State: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"state\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"state\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 5000000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 5000000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"State\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"209cae50-e2f8-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-15T20:39:12.490Z","version":"WzMyMiw3XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.cpu.utilization\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.cpu.utilization\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"system.cpu.utilization-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"system.cpu.utilization-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"System CPU Utiliziation Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":1500,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.state']\\\", \\\"as\\\":\\\"state\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.cpu']\\\", \\\"as\\\":\\\"cpu\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"state\\\\\\\": isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"], \\\\\\\"cpu\\\\\\\": isValid(datum[\\\\\\\"cpu\\\\\\\"]) ? datum[\\\\\\\"cpu\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"cpu\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; state: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; State: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"state\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"state\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 250], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 250, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"State\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"d1770e10-e30b-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-17T02:13:29.027Z","version":"WzM0OSw4XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.memory.usage\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.memory.usage\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"system.memory.usage-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"system.memory.usage-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"System CPU Utiliziation Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":1500,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.state']\\\", \\\"as\\\":\\\"state\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"state\\\\\\\": isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; state: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; State: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"state\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"state\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 10000000000000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 10000000000000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"State\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"a9a1a5c0-e30c-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-15T20:43:22.011Z","version":"WzMyNCw3XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.swap.usage\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.swap.usage\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"system.swap.usage-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"system.swap.usage-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"System Swap Usage Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":1500,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.state']\\\", \\\"as\\\":\\\"state\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"state\\\\\\\": isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; state: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; State: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"state\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"state\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 10000000000000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 10000000000000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"State\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"81f2bbc0-e30e-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-15T20:56:34.428Z","version":"WzMzMCw3XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.swap.utilization\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.swap.utilization\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"system.swap.utilization-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"system.swap.utilization-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"System Swap Utilization Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":1500,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.state']\\\", \\\"as\\\":\\\"state\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"state\\\\\\\": isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; state: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; State: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"state\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"state\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 1000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 1000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"State\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"c0421e70-e30e-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-15T20:58:18.966Z","version":"WzMzMSw3XQ=="}
-{"attributes":{"description":"Disk\nCPU\nMemory\nSwap","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"type\":\"phrases\",\"key\":\"name.keyword\",\"value\":\"system.disk.operations, system.disk.io, system.disk.time, system.cpu.utilization, system.cpu.time, system.swap.usage, system.swap.utilization, system.memory.usage, system.memory.utilization\",\"params\":[\"system.disk.operations\",\"system.disk.io\",\"system.disk.time\",\"system.cpu.utilization\",\"system.cpu.time\",\"system.swap.usage\",\"system.swap.utilization\",\"system.memory.usage\",\"system.memory.utilization\"],\"alias\":null,\"negate\":false,\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"bool\":{\"should\":[{\"match_phrase\":{\"name.keyword\":\"system.disk.operations\"}},{\"match_phrase\":{\"name.keyword\":\"system.disk.io\"}},{\"match_phrase\":{\"name.keyword\":\"system.disk.time\"}},{\"match_phrase\":{\"name.keyword\":\"system.cpu.utilization\"}},{\"match_phrase\":{\"name.keyword\":\"system.cpu.time\"}},{\"match_phrase\":{\"name.keyword\":\"system.swap.usage\"}},{\"match_phrase\":{\"name.keyword\":\"system.swap.utilization\"}},{\"match_phrase\":{\"name.keyword\":\"system.memory.usage\"}},{\"match_phrase\":{\"name.keyword\":\"system.memory.utilization\"}}],\"minimum_should_match\":1}},\"$state\":{\"store\":\"appState\"}}]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"2.12.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":48,\"h\":15,\"i\":\"b523c90e-37d7-4221-8a89-8fc709d29fc8\"},\"panelIndex\":\"b523c90e-37d7-4221-8a89-8fc709d29fc8\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":0,\"y\":15,\"w\":48,\"h\":24,\"i\":\"e5a1b63c-94ea-412e-8883-665faf63cce1\"},\"panelIndex\":\"e5a1b63c-94ea-412e-8883-665faf63cce1\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":0,\"y\":39,\"w\":24,\"h\":5,\"i\":\"fea35ef6-f4b1-4e14-bd23-350329af3925\"},\"panelIndex\":\"fea35ef6-f4b1-4e14-bd23-350329af3925\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":24,\"y\":39,\"w\":24,\"h\":16,\"i\":\"a9059e47-8521-47ca-9d78-7cecbae02152\"},\"panelIndex\":\"a9059e47-8521-47ca-9d78-7cecbae02152\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":0,\"y\":44,\"w\":8,\"h\":11,\"i\":\"5fc8b689-cf46-48ef-aa14-1f07c03931f1\"},\"panelIndex\":\"5fc8b689-cf46-48ef-aa14-1f07c03931f1\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":8,\"y\":44,\"w\":8,\"h\":11,\"i\":\"ecab2abf-0675-4aa7-a289-b96a22e46270\"},\"panelIndex\":\"ecab2abf-0675-4aa7-a289-b96a22e46270\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":16,\"y\":44,\"w\":8,\"h\":11,\"i\":\"d76c5ec8-c86f-4f65-8feb-1e7f2aa8331f\"},\"panelIndex\":\"d76c5ec8-c86f-4f65-8feb-1e7f2aa8331f\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":0,\"y\":55,\"w\":24,\"h\":19,\"i\":\"f870ea66-8db2-4bf0-a5bc-9d9fc5335c60\"},\"panelIndex\":\"f870ea66-8db2-4bf0-a5bc-9d9fc5335c60\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":24,\"y\":55,\"w\":24,\"h\":19,\"i\":\"6458ae1e-bde0-4b99-8eb6-01347037d6af\"},\"panelIndex\":\"6458ae1e-bde0-4b99-8eb6-01347037d6af\",\"embeddableConfig\":{},\"panelRefName\":\"panel_8\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":0,\"y\":74,\"w\":24,\"h\":20,\"i\":\"8ef7873e-bdb9-4f23-9cad-dbe40ca9e93a\"},\"panelIndex\":\"8ef7873e-bdb9-4f23-9cad-dbe40ca9e93a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_9\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":24,\"y\":74,\"w\":24,\"h\":20,\"i\":\"bfbf3046-2e4d-4460-8be9-a880a584dc4f\"},\"panelIndex\":\"bfbf3046-2e4d-4460-8be9-a880a584dc4f\",\"embeddableConfig\":{},\"panelRefName\":\"panel_10\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":0,\"y\":94,\"w\":24,\"h\":19,\"i\":\"7d4d0ddc-e20e-4453-8a76-e77a9fd14ff0\"},\"panelIndex\":\"7d4d0ddc-e20e-4453-8a76-e77a9fd14ff0\",\"embeddableConfig\":{},\"panelRefName\":\"panel_11\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":24,\"y\":94,\"w\":24,\"h\":19,\"i\":\"4ec60667-68a6-4437-bfd9-94a952b44c75\"},\"panelIndex\":\"4ec60667-68a6-4437-bfd9-94a952b44c75\",\"embeddableConfig\":{},\"panelRefName\":\"panel_12\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":0,\"y\":113,\"w\":24,\"h\":19,\"i\":\"c921860a-6557-4b70-b582-d7bc6d4bcbb2\"},\"panelIndex\":\"c921860a-6557-4b70-b582-d7bc6d4bcbb2\",\"embeddableConfig\":{},\"panelRefName\":\"panel_13\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":24,\"y\":113,\"w\":24,\"h\":19,\"i\":\"0291109c-5260-4d19-948d-4ef628a25a24\"},\"panelIndex\":\"0291109c-5260-4d19-948d-4ef628a25a24\",\"embeddableConfig\":{},\"panelRefName\":\"panel_14\"}]","timeRestore":false,"title":"APM-System-Metrics","version":1},"id":"apm-system-metrics-dashboard-1_0_0_ID","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"1df769d0-e2f6-11ee-9823-49d05dd2659c","name":"panel_0","type":"visualization"},{"id":"8d7b0350-e406-11ee-9823-49d05dd2659c","name":"panel_1","type":"visualization"},{"id":"7e12d8ea-1220-4caa-b145-d6be91b46170","name":"panel_2","type":"visualization"},{"id":"6b179e10-d9d7-11ee-9203-cf873e97f443","name":"panel_3","type":"visualization"},{"id":"93148140-e2fa-11ee-9823-49d05dd2659c","name":"panel_4","type":"visualization"},{"id":"59e73f60-e2fb-11ee-9823-49d05dd2659c","name":"panel_5","type":"visualization"},{"id":"ed5276d0-e2fa-11ee-9823-49d05dd2659c","name":"panel_6","type":"visualization"},{"id":"7a93f5a0-e242-11ee-80e1-bb1060c52777","name":"panel_7","type":"visualization"},{"id":"75095750-e2f7-11ee-9823-49d05dd2659c","name":"panel_8","type":"visualization"},{"id":"07f1a320-e2f7-11ee-9823-49d05dd2659c","name":"panel_9","type":"visualization"},{"id":"209cae50-e2f8-11ee-9823-49d05dd2659c","name":"panel_10","type":"visualization"},{"id":"d1770e10-e30b-11ee-9823-49d05dd2659c","name":"panel_11","type":"visualization"},{"id":"a9a1a5c0-e30c-11ee-9823-49d05dd2659c","name":"panel_12","type":"visualization"},{"id":"81f2bbc0-e30e-11ee-9823-49d05dd2659c","name":"panel_13","type":"visualization"},{"id":"c0421e70-e30e-11ee-9823-49d05dd2659c","name":"panel_14","type":"visualization"}],"type":"dashboard","updated_at":"2024-03-17T02:50:24.871Z","version":"WzM1OSw4XQ=="}
-{"exportedCount":19,"missingRefCount":0,"missingReferences":[]}
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/assets/otel_apm_network_services-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/otel-services/assets/otel_apm_network_services-1.0.0.ndjson
deleted file mode 100644
index f8a8aa1f6a..0000000000
--- a/server/adaptors/integrations/__data__/repository/otel-services/assets/otel_apm_network_services-1.0.0.ndjson
+++ /dev/null
@@ -1,17 +0,0 @@
-{"attributes":{"fields":"[{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"destination.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.resource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"hashId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target.resource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","title":"otel-v1-apm-service-map"},"id":"79a3b09c-71e8-4c6d-a755-382d1338fb94","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2024-03-03T06:18:11.955Z","version":"WzMwLDFd"}
-{"attributes":{"fields":"[{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aggregationTemporality\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aggregationTemporality.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aggregationTemporality\"}}},{\"count\":0,\"name\":\"attributes.instrumentationScope.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.instrumentationScope.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.instrumentationScope.name\"}}},{\"count\":0,\"name\":\"attributes.instrumentationScope.version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.instrumentationScope.version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.instrumentationScope.version\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_request_type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_request_type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.app@ads@ad_request_type\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_response_type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_response_type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.app@ads@ad_response_type\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.app@payment@currency\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.app@payment@currency.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.app@payment@currency\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.client-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.client-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.client-id\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.count\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.count.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.count\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.cpu\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.currency_code\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.currency_code.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.currency_code\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.daemon\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.device\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.device.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.device\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.direction\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.direction.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.direction\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.dropped\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.family\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.generation\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.generation.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.generation\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@flavor\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@flavor.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@flavor\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@host\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@host.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@host\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@method\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@method.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@method\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@route\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@route.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@route\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@scheme\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@scheme.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@scheme\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@status_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.method\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.method.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.method\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.net@host@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.net@host@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.net@host@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.net@host@port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.net@peer@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.net@peer@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.net@peer@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.net@peer@port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.node-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.node-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.node-id\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.operation\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.operation.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.operation\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.partition\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.partition.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.partition\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.pool\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.pool.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.pool\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.processor\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.processor.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.processor\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.processorType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.processorType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.processorType\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.protocol\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.protocol.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.protocol\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.recommendation@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.recommendation@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.recommendation@type\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@grpc@status_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@method\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@method.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.rpc@method\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@service\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@service.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.rpc@service\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@system\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@system.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.rpc@system\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.service@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.service@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.span@kind\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.span@kind.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.span@kind\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.span@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.span@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.span@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.state\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.status\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.status@code\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.status@code.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.status@code\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.success\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.target\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.target.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.target\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.topic\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.topic.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.topic\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.type\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.container@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.container@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.container@id\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.host@arch\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.host@arch.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.host@arch\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.host@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.host@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.host@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@description\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@type\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@command\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_args\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_args.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@command_args\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_line\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_line.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@command_line\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@executable@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@path\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@path.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@executable@path\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@owner\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@owner.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@owner\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@runtime@description\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@runtime@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@runtime@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@instance@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@instance@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@instance@id\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@namespace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@namespace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@namespace\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@auto@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@auto@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@auto@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@language\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@language.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@sdk@language\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@sdk@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@sdk@version\"}}},{\"count\":0,\"name\":\"bucketCounts\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"bucketCountsList\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"buckets.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"buckets.max\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"buckets.min\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"description\"}}},{\"count\":0,\"name\":\"exemplars.attributes.exemplar.attributes.net@sock@peer@addr\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"exemplars.attributes.exemplar.attributes.net@sock@peer@addr.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"exemplars.attributes.exemplar.attributes.net@sock@peer@addr\"}}},{\"count\":0,\"name\":\"exemplars.spanId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"exemplars.spanId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"exemplars.spanId\"}}},{\"count\":0,\"name\":\"exemplars.time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"exemplars.traceId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"exemplars.traceId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"exemplars.traceId\"}}},{\"count\":0,\"name\":\"exemplars.value\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"explicitBounds\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"explicitBoundsCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"flags\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"isMonotonic\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kind\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kind.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kind\"}}},{\"count\":0,\"name\":\"name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"name\"}}},{\"count\":0,\"name\":\"schemaUrl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"schemaUrl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"schemaUrl\"}}},{\"count\":0,\"name\":\"serviceName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"serviceName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"serviceName\"}}},{\"count\":0,\"name\":\"startTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sum\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"unit\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"unit.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"unit\"}}},{\"count\":0,\"name\":\"value\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"time","title":"otel-metrics-*"},"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2024-03-02T04:47:59.251Z","version":"WzIsMV0="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"system-services-metrics-tree-map","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"system-services-metrics-tree-map\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"padding\\\": 5,\\n\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"labels\\\", \\\"value\\\": true,\\n \\\"bind\\\": {\\\"input\\\": \\\"checkbox\\\"}\\n },\\n {\\n \\\"name\\\": \\\"layout\\\", \\\"value\\\": \\\"tidy\\\",\\n \\\"bind\\\": {\\\"input\\\": \\\"radio\\\", \\\"options\\\": [\\\"tidy\\\", \\\"cluster\\\"]}\\n },\\n {\\n \\\"name\\\": \\\"links\\\", \\\"value\\\": \\\"diagonal\\\",\\n \\\"bind\\\": {\\n \\\"input\\\": \\\"select\\\",\\n \\\"options\\\": [\\\"line\\\", \\\"curve\\\", \\\"diagonal\\\", \\\"orthogonal\\\"]\\n }\\n },\\n {\\n \\\"name\\\": \\\"separation\\\", \\\"value\\\": false,\\n \\\"bind\\\": {\\\"input\\\": \\\"checkbox\\\"}\\n }\\n ],\\n\\n \\\"data\\\": [\\n{\\n \\\"name\\\": \\\"raw-data\\\",\\n \\\"values\\\": [\\n {\\\"id\\\": 1, \\\"name\\\": \\\"system\\\"},\\n {\\\"id\\\": 2, \\\"name\\\": \\\"disk\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 3, \\\"name\\\": \\\"io\\\", \\\"parent\\\": 2},\\n {\\\"id\\\": 4, \\\"name\\\": \\\"operations\\\", \\\"parent\\\": 2},\\n {\\\"id\\\": 5, \\\"name\\\": \\\"time\\\", \\\"parent\\\": 2},\\n {\\\"id\\\": 8, \\\"name\\\": \\\"cpu\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 9, \\\"name\\\": \\\"time\\\", \\\"parent\\\": 8},\\n {\\\"id\\\": 10, \\\"name\\\": \\\"utilization\\\", \\\"parent\\\": 8},\\n {\\\"id\\\": 11, \\\"name\\\": \\\"network\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 12, \\\"name\\\": \\\"dropped_packets\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 13, \\\"name\\\": \\\"errors\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 14, \\\"name\\\": \\\"io\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 15, \\\"name\\\": \\\"packets\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 16, \\\"name\\\": \\\"memory\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 17, \\\"name\\\": \\\"usage\\\", \\\"parent\\\": 16},\\n {\\\"id\\\": 18, \\\"name\\\": \\\"utilization\\\", \\\"parent\\\": 16},\\n {\\\"id\\\": 23, \\\"name\\\": \\\"connections\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 24, \\\"name\\\": \\\"swap\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 25, \\\"name\\\": \\\"usage\\\", \\\"parent\\\": 24},\\n {\\\"id\\\": 26, \\\"name\\\": \\\"utilization\\\", \\\"parent\\\": 24},\\n {\\\"id\\\": 30, \\\"name\\\": \\\"thread_count\\\", \\\"parent\\\": 1}\\n ]\\n},\\n\\n {\\n \\\"name\\\": \\\"tree\\\",\\n \\\"source\\\":\\\"raw-data\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"stratify\\\",\\n \\\"key\\\": \\\"id\\\",\\n \\\"parentKey\\\": \\\"parent\\\"\\n },\\n {\\n \\\"type\\\": \\\"lookup\\\",\\n \\\"from\\\": \\\"raw-data\\\",\\n \\\"key\\\": \\\"id\\\",\\n \\\"fields\\\": [\\\"parent\\\"],\\n \\\"as\\\": [\\\"parentData\\\"]\\n },\\n {\\n \\\"type\\\": \\\"tree\\\",\\n \\\"method\\\": {\\\"signal\\\": \\\"layout\\\"},\\n \\\"size\\\": [{\\\"signal\\\": \\\"height\\\"}, {\\\"signal\\\": \\\"width - 100\\\"}],\\n \\\"separation\\\": {\\\"signal\\\": \\\"separation\\\"},\\n \\\"as\\\": [\\\"y\\\", \\\"x\\\", \\\"depth\\\", \\\"children\\\"]\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"links\\\",\\n \\\"source\\\": \\\"tree\\\",\\n \\\"transform\\\": [\\n { \\\"type\\\": \\\"treelinks\\\" },\\n {\\n \\\"type\\\": \\\"linkpath\\\",\\n \\\"orient\\\": \\\"horizontal\\\",\\n \\\"shape\\\": {\\\"signal\\\": \\\"links\\\"}\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"parentName\\\",\\n \\\"expr\\\": \\\"datum.source.name\\\"\\n }\\n ]\\n }\\n ],\\n\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"parentColor\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"tree\\\", \\\"field\\\": \\\"parent\\\"},\\n \\\"range\\\": {\\\"scheme\\\": \\\"category20\\\"}\\n }\\n ],\\n\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"path\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"links\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"path\\\": {\\\"field\\\": \\\"path\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"#ccc\\\"}\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"tree\\\"},\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"size\\\": {\\\"value\\\": 200},\\n \\\"stroke\\\": {\\\"value\\\": \\\"#fff\\\"}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"field\\\": \\\"x\\\"},\\n \\\"y\\\": {\\\"field\\\": \\\"y\\\"},\\n \\\"fill\\\": {\\\"scale\\\": \\\"parentColor\\\", \\\"field\\\": \\\"parent\\\"},\\n \\\"size\\\": {\\\"signal\\\": \\\"datum.children ? 150 : 200\\\"}, \\n \\\"shape\\\": {\\\"signal\\\": \\\"datum.children ? 'circle' : 'square'\\\"}, \\n \\\"strokeWidth\\\": {\\\"value\\\": 1.5}\\n },\\n \\\"hover\\\": {\\n \\\"size\\\":{\\\"value\\\": 400},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"datum.parentData ? {'Name': datum.name, 'Parent Group': datum.parentData.name} : {'Name': datum.name}\\\"\\n\\n }\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"text\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"tree\\\"},\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"black\\\"},\\n \\\"text\\\": {\\\"field\\\": \\\"name\\\"},\\n \\\"fontSize\\\": {\\\"value\\\": 12},\\n \\\"baseline\\\": {\\\"value\\\": \\\"middle\\\"}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"field\\\": \\\"x\\\"},\\n \\\"y\\\": {\\\"field\\\": \\\"y\\\"},\\n \\\"dx\\\": {\\\"signal\\\": \\\"datum.children ? -7 : 7\\\"},\\n \\\"align\\\": {\\\"signal\\\": \\\"datum.children ? 'right' : 'left'\\\"},\\n \\\"opacity\\\": {\\\"signal\\\": \\\"labels ? 1 : 0\\\"}\\n }\\n }\\n }\\n ]\\n}\\n\"}}"},"id":"1df769d0-e2f6-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-03-15T18:01:58.765Z","version":"WzI4Nyw3XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"multi-line-selectable-date-metrics-request-rate","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"multi-line-selectable-date-metrics-request-rate\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"title\\\": \\\"Metrics Requests Rate\\\",\\n \\\"data\\\": [\\n {\\n \\\"name\\\": \\\"rawdata\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"%context%\\\": true,\\n \\\"%timefield%\\\": \\\"time\\\",\\n \\\"body\\\": {\\n \\\"size\\\": 0,\\n \\\"aggs\\\": {\\n \\\"metrics\\\": {\\n \\\"terms\\\": {\\n \\\"field\\\": \\\"name.keyword\\\",\\n \\\"size\\\": 10\\n },\\n \\\"aggs\\\": {\\n \\\"time_buckets\\\": {\\n \\\"date_histogram\\\": {\\n \\\"field\\\": \\\"time\\\",\\n \\\"interval\\\": {\\\"%autointerval%\\\": true},\\n \\\"extended_bounds\\\": {\\n \\\"min\\\": {\\\"%timefilter%\\\": \\\"min\\\"},\\n \\\"max\\\": {\\\"%timefilter%\\\": \\\"max\\\"}\\n },\\n \\\"min_doc_count\\\":0\\n }\\n }\\n }\\n }\\n\\n }\\n }\\n },\\n \\\"format\\\": {\\\"property\\\": \\\"aggregations.metrics.buckets\\\"}\\n },\\n {\\n \\\"name\\\": \\\"flatdata\\\",\\n \\\"source\\\": \\\"rawdata\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"flatten\\\",\\n \\\"fields\\\": [\\\"time_buckets.buckets\\\"],\\n \\\"as\\\": [\\\"val\\\"]\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"count\\\",\\n \\\"expr\\\":\\\"datum.val.doc_count\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"time\\\",\\n \\\"expr\\\": \\\"timeFormat(utcParse(datum.val.key_as_string,'%Y-%m-%dT%H:%M:%S.%LZ'), '%B %d, %Y %H:%M')\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"hasSelection\\\",\\n \\\"values\\\": [{}],\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"filter\\\", \\\"expr\\\": \\\"selected[0] != selected[1]\\\"}\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"groupScale\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"padding\\\": 0.1,\\n \\\"domain\\\": {\\\"data\\\": \\\"rawdata\\\", \\\"field\\\": \\\"key\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"height\\\"\\n },\\n {\\n \\\"name\\\": \\\"xScale\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"flatdata\\\", \\\"field\\\": \\\"val.key\\\"},\\n \\\"range\\\": \\\"width\\\",\\n \\\"padding\\\": 5\\n },\\n {\\n \\\"name\\\": \\\"yScale\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"flatdata\\\", \\\"field\\\": \\\"val.doc_count\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"bandwidth('groupScale')\\\"}, 0]\\n },\\n {\\n \\\"name\\\": \\\"colorScale\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"rawdata\\\", \\\"field\\\": \\\"key\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"category\\\"\\n }\\n ],\\n \\\"axes\\\": [\\n {\\\"orient\\\": \\\"bottom\\\", \\\"scale\\\": \\\"xScale\\\", \\\"tickCount\\\": 5}\\n ],\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"currentX\\\",\\n \\\"value\\\": -1,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"view:mousemove\\\", \\\"update\\\": \\\"clamp(x(), 0, width)\\\"},\\n {\\\"events\\\": \\\"view:mouseout\\\", \\\"update\\\": \\\"-1\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"selected\\\",\\n \\\"value\\\": [0, 0],\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"@grapharea:mousedown\\\", \\\"update\\\": \\\"[x(), x()]\\\"},\\n {\\n \\\"events\\\": \\\"[@grapharea:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"[selected[0], clamp(x(), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"delta\\\"},\\n \\\"update\\\": \\\"clampRange([anchor[0] + delta, anchor[1] + delta], 0, width)\\\"\\n },\\n {\\n \\\"events\\\": \\\"[@leftEdge:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"[clamp(x(), 0, width), selected[1]]\\\"\\n },\\n {\\n \\\"events\\\": \\\"[@rightEdge:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"[selected[0], clamp(x(), 0, width)]\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"anchor\\\",\\n \\\"value\\\": null,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"@selectedRect:mousedown\\\", \\\"update\\\": \\\"selected\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"xDown\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"@selectedRect:mousedown\\\", \\\"update\\\": \\\"x()\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"delta\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"[@selectedRect:mousedown, window:mouseup] > window:mousemove!\\\", \\\"update\\\": \\\"x() - xDown\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"applyTimeFilter\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"@applyTimeFilterButton:click, @selectedRect:dblclick\\\",\\n \\\"update\\\": \\\"opensearchDashboardsSetTimeFilter(invert('xScale',selected[0]), invert('xScale',selected[1]))\\\"\\n },\\n {\\\"events\\\": \\\"@grapharea:dblclick\\\", \\\"update\\\": \\\"opensearchDashboardsSetTimeFilter('now-15d', 'now')\\\"}\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"grapharea\\\",\\n \\\"type\\\": \\\"group\\\",\\n \\\"from\\\": {\\n \\\"facet\\\": {\\\"name\\\": \\\"facets\\\", \\\"data\\\": \\\"rawdata\\\", \\\"field\\\": \\\"time_buckets.buckets\\\"}\\n },\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"y\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"field\\\": \\\"key\\\"},\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"x\\\": {\\\"value\\\": 0},\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0},\\n \\\"fill\\\": {\\\"value\\\": \\\"#000\\\"},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'metrics': datum['key']}\\\"\\n }\\n }\\n },\\n \\\"axes\\\": [\\n {\\n \\\"orient\\\": \\\"left\\\",\\n \\\"scale\\\": \\\"yScale\\\",\\n \\\"title\\\": {\\\"signal\\\": \\\"parent.key\\\"},\\n \\\"tickCount\\\": 4,\\n \\\"encode\\\": {\\n \\\"title\\\": {\\n \\\"name\\\": \\\"extFilter\\\",\\n \\\"interactive\\\": true,\\n \\\"update\\\": {\\n \\\"cursor\\\": {\\\"value\\\": \\\"pointer\\\"},\\n \\\"fontSize\\\": {\\\"value\\\": 8},\\n \\\"fill\\\": {\\\"value\\\": \\\"steelblue\\\"}\\n },\\n \\\"hover\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"}\\n }\\n }\\n }\\n }\\n ],\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"updateErrFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"source\\\": \\\"scope\\\", \\\"markname\\\": \\\"extErrorFilter\\\", \\\"type\\\": \\\"click\\\"},\\n \\\"update\\\": \\\"{'match': {'status.code': {'query': 2, 'type': 'phrase'}}}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"applyErrorFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"updateErrFilterObj\\\"},\\n \\\"update\\\": \\\"length(domain('groupScale')) > 1 ? opensearchDashboardsAddFilter(updateErrFilterObj) : opensearchDashboardsRemoveFilter(updateErrFilterObj)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"updateFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"source\\\": \\\"scope\\\", \\\"markname\\\": \\\"extFilter\\\", \\\"type\\\": \\\"click\\\"},\\n \\\"update\\\": \\\"{'match': {'metrics': {'query': parent.key, 'type': 'phrase'}}}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"applyFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"updateFilterObj\\\"},\\n \\\"update\\\": \\\"length(domain('groupScale')) > 1 ? opensearchDashboardsAddFilter(updateFilterObj) : opensearchDashboardsRemoveFilter(updateFilterObj)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"line\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"facets\\\"},\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"scale\\\": \\\"xScale\\\", \\\"field\\\": \\\"key\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"yScale\\\", \\\"field\\\": \\\"doc_count\\\"},\\n \\\"fill\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.2},\\n \\\"stroke\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}}\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"from\\\": {\\n \\\"data\\\": \\\"facets\\\"\\n },\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\n \\\"scale\\\": \\\"xScale\\\",\\n \\\"field\\\": \\\"key\\\"\\n },\\n \\\"y\\\": {\\n \\\"scale\\\": \\\"yScale\\\",\\n \\\"field\\\": \\\"doc_count\\\"\\n },\\n \\\"size\\\": {\\n \\\"value\\\": 8\\n },\\n \\\"stroke\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'Date': timeFormat(datum['key'], '%Y-%m-%d %H:%M'), 'Value': datum['doc_count']}\\\"\\n }\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"hasSelection\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"selectedRect\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.2},\\n \\\"cursor\\\": {\\\"value\\\": \\\"move\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"selected[0]\\\"},\\n \\\"x2\\\": {\\\"signal\\\": \\\"selected[1]\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"leftEdge\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"width\\\": {\\\"value\\\": 2},\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"},\\n \\\"cursor\\\": {\\\"value\\\": \\\"ew-resize\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"selected[0]\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"rightEdge\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"width\\\": {\\\"value\\\": 2},\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"},\\n \\\"cursor\\\": {\\\"value\\\": \\\"ew-resize\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"selected[1]\\\"}\\n }\\n }\\n }\\n ]\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"applyTimeFilterButton\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"hasSelection\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"cursor\\\": {\\\"value\\\": \\\"pointer\\\"},\\n \\\"cornerRadius\\\": {\\\"value\\\": 6},\\n \\\"fill\\\": {\\\"value\\\": \\\"#f5f5f5\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"#c1c1c1\\\"},\\n \\\"strokeWidth\\\": {\\\"value\\\": 2},\\n \\\"xc\\\": {\\\"signal\\\": \\\"width/2\\\"},\\n \\\"y\\\": {\\\"value\\\": 30},\\n \\\"width\\\": {\\\"value\\\": 80},\\n \\\"height\\\": {\\\"value\\\": 30},\\n \\\"opacity\\\": {\\\"value\\\": 1}\\n },\\n \\\"hover\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"text\\\",\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"xc\\\": {\\\"field\\\": {\\\"group\\\": \\\"width\\\"}, \\\"mult\\\": 0.5},\\n \\\"yc\\\": {\\\"field\\\": {\\\"group\\\": \\\"height\\\"}, \\\"mult\\\": 0.5, \\\"offset\\\": 2},\\n \\\"align\\\": {\\\"value\\\": \\\"center\\\"},\\n \\\"baseline\\\": {\\\"value\\\": \\\"middle\\\"},\\n \\\"fontWeight\\\": {\\\"value\\\": \\\"bold\\\"},\\n \\\"text\\\": {\\\"value\\\": \\\"Apply Filter\\\"}\\n }\\n }\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"rule\\\",\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"y\\\": {\\\"value\\\": 0},\\n \\\"y2\\\": {\\\"signal\\\": \\\"height\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"gray\\\"},\\n \\\"strokeDash\\\": {\\\"value\\\": [2, 1]},\\n \\\"x\\\": {\\\"signal\\\": \\\"max(currentX,0)\\\"},\\n \\\"strokeOpacity\\\": {\\\"signal\\\": \\\"currentX > 0 ? 1 : 0\\\"}\\n }\\n }\\n }\\n ]\\n}\\n\"}}"},"id":"8d7b0350-e406-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-03-17T02:37:25.228Z","version":"WzM1NSw4XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Hexagon-pods-map","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Hexagon-pods-map\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"config\\\": {\\n \\\"view\\\": {\\\"continuousWidth\\\": 300, \\\"continuousHeight\\\": 300, \\\"strokeWidth\\\": 0}\\n },\\n \\\"data\\\": {\\\"name\\\": \\\"data-830c39fec90146253fb06a06c26374ef\\\"},\\n \\n \\\"mark\\\": {\\n \\\"type\\\": \\\"point\\\",\\n \\\"shape\\\": \\\"M0,-2.3094010768L2,-1.1547005384 2,1.1547005384 0,2.3094010768 -2,1.1547005384 -2,-1.1547005384Z\\\",\\n \\\"size\\\": 925\\n },\\n \\\"encoding\\\": {\\n \\\"fill\\\": {\\n \\\"aggregate\\\": \\\"mean\\\",\\n \\\"field\\\": \\\"temp_max\\\",\\n \\\"scale\\\": {\\\"scheme\\\": \\\"darkblue\\\"},\\n \\\"type\\\": \\\"quantitative\\\"\\n \\\"title\\\":\\\"Issues Per Pod\\\"\\n },\\n \\\"stroke\\\": {\\\"value\\\": \\\"black\\\"},\\n \\\"strokeWidth\\\": {\\\"value\\\": 0.2},\\n \\\"tooltip\\\": [\\n {\\\"aggregate\\\": \\\"mean\\\", \\\"field\\\": \\\"temp_max\\\", \\\"type\\\": \\\"quantitative\\\", \\\"title\\\":\\\"Avg Daily Errors\\\"}\\n ]\\n \\\"x\\\": {\\n \\\"axis\\\": {\\n \\\"domainOpacity\\\": 0,\\n \\\"grid\\\": true,\\n \\\"tickOpacity\\\": 0,\\n },\\n \\\"title\\\": null\\n \\\"field\\\": \\\"xFeaturePos\\\",\\n \\\"type\\\": \\\"quantitative\\\"\\n },\\n \\\"y\\\": {\\n \\\"axis\\\": {\\n \\\"domainOpacity\\\": 0,\\n \\\"labelPadding\\\": 20,\\n \\\"tickOpacity\\\": 0,\\n \\\"title\\\": \\\"Pods\\\"\\n },\\n \\\"title\\\": null\\n \\\"field\\\": \\\"date\\\",\\n \\\"timeUnit\\\": \\\"day\\\",\\n \\\"type\\\": \\\"ordinal\\\"\\n }\\n },\\n \\\"transform\\\": [\\n {\\n \\\"calculate\\\": \\\"(day(datum.date) % 2) / 2 + month(datum.date)\\\",\\n \\\"as\\\": \\\"xFeaturePos\\\"\\n }\\n ]\\n\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega-lite/v5.6.0.json\\\",\\n \\\"datasets\\\": {\\n \\\"data-830c39fec90146253fb06a06c26374ef\\\": [\\n {\\n \\\"date\\\": \\\"2012-01-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-02T00:00:00\\\",\\n \\\"precipitation\\\": 10.9,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-03T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-04T00:00:00\\\",\\n \\\"precipitation\\\": 20.3,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-05T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 6.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-06T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 4.4,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-09T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-10T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": -1.1,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": -1.7,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": -2.8,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-14T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 4.4,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-15T00:00:00\\\",\\n \\\"precipitation\\\": 5.3,\\n \\\"temp_max\\\": 1.1,\\n \\\"temp_min\\\": -3.3,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-16T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 1.7,\\n \\\"temp_min\\\": -2.8,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-17T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 5.6,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-18T00:00:00\\\",\\n \\\"precipitation\\\": 19.8,\\n \\\"temp_max\\\": 0,\\n \\\"temp_min\\\": -2.8,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-19T00:00:00\\\",\\n \\\"precipitation\\\": 15.2,\\n \\\"temp_max\\\": -1.1,\\n \\\"temp_min\\\": -2.8,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-20T00:00:00\\\",\\n \\\"precipitation\\\": 13.5,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": -1.1,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-21T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 8.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-22T00:00:00\\\",\\n \\\"precipitation\\\": 6.1,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 4.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-24T00:00:00\\\",\\n \\\"precipitation\\\": 8.6,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-25T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 5.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-26T00:00:00\\\",\\n \\\"precipitation\\\": 4.8,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 4.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": -2.2,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-29T00:00:00\\\",\\n \\\"precipitation\\\": 27.7,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-30T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-01-31T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-01T00:00:00\\\",\\n \\\"precipitation\\\": 13.5,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-07T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-08T00:00:00\\\",\\n \\\"precipitation\\\": 2.8,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-09T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-10T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-11T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-12T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-13T00:00:00\\\",\\n \\\"precipitation\\\": 11.4,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-14T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-16T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-17T00:00:00\\\",\\n \\\"precipitation\\\": 17.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-18T00:00:00\\\",\\n \\\"precipitation\\\": 6.4,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 8.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-20T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-21T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 7.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-22T00:00:00\\\",\\n \\\"precipitation\\\": 8.6,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-24T00:00:00\\\",\\n \\\"precipitation\\\": 11.4,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-26T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": -1.1,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": -2.2,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-28T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": -0.6,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-02-29T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 7,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-02T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 5.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-05T00:00:00\\\",\\n \\\"precipitation\\\": 6.9,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 6.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-06T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": -1.7,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-09T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-10T00:00:00\\\",\\n \\\"precipitation\\\": 10.4,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-11T00:00:00\\\",\\n \\\"precipitation\\\": 13.7,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 5.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-12T00:00:00\\\",\\n \\\"precipitation\\\": 19.3,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 6.2,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-13T00:00:00\\\",\\n \\\"precipitation\\\": 9.4,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-14T00:00:00\\\",\\n \\\"precipitation\\\": 8.6,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-15T00:00:00\\\",\\n \\\"precipitation\\\": 23.9,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 5.8,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-16T00:00:00\\\",\\n \\\"precipitation\\\": 8.4,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-17T00:00:00\\\",\\n \\\"precipitation\\\": 9.4,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-18T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": -0.6,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-19T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": -1.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-20T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-21T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-22T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 5.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-27T00:00:00\\\",\\n \\\"precipitation\\\": 4.8,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-28T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-29T00:00:00\\\",\\n \\\"precipitation\\\": 27.4,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-30T00:00:00\\\",\\n \\\"precipitation\\\": 5.6,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-03-31T00:00:00\\\",\\n \\\"precipitation\\\": 13.2,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-01T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 6.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-03T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-05T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-06T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-11T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-12T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-16T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 5.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-17T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-18T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-19T00:00:00\\\",\\n \\\"precipitation\\\": 10.9,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-20T00:00:00\\\",\\n \\\"precipitation\\\": 6.6,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-24T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-25T00:00:00\\\",\\n \\\"precipitation\\\": 10.7,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-26T00:00:00\\\",\\n \\\"precipitation\\\": 3.8,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 5.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-27T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-29T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-04-30T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-01T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-02T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-03T00:00:00\\\",\\n \\\"precipitation\\\": 18.5,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-04T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-20T00:00:00\\\",\\n \\\"precipitation\\\": 6.4,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-21T00:00:00\\\",\\n \\\"precipitation\\\": 14,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-22T00:00:00\\\",\\n \\\"precipitation\\\": 6.1,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-23T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 6.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-30T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-05-31T00:00:00\\\",\\n \\\"precipitation\\\": 3.8,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-01T00:00:00\\\",\\n \\\"precipitation\\\": 6.6,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-02T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-04T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-05T00:00:00\\\",\\n \\\"precipitation\\\": 16,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-07T00:00:00\\\",\\n \\\"precipitation\\\": 16.5,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-08T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-12T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-18T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-19T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-22T00:00:00\\\",\\n \\\"precipitation\\\": 15.7,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-23T00:00:00\\\",\\n \\\"precipitation\\\": 8.6,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-25T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-29T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-06-30T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-02T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-03T00:00:00\\\",\\n \\\"precipitation\\\": 5.8,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-09T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-13T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-16T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-20T00:00:00\\\",\\n \\\"precipitation\\\": 15.2,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-22T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-07-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.9,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.9,\\n \\\"temp_min\\\": 17.8,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 34.4,\\n \\\"temp_min\\\": 18.3,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 32.8,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-08-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 32.2,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-09T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-10T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 5.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-22T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-09-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 7.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 6.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 5.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-12T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-13T00:00:00\\\",\\n \\\"precipitation\\\": 4.8,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-14T00:00:00\\\",\\n \\\"precipitation\\\": 16.5,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-15T00:00:00\\\",\\n \\\"precipitation\\\": 7.9,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 5.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-18T00:00:00\\\",\\n \\\"precipitation\\\": 20.8,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-19T00:00:00\\\",\\n \\\"precipitation\\\": 4.8,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-20T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 5.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-21T00:00:00\\\",\\n \\\"precipitation\\\": 6.4,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-22T00:00:00\\\",\\n \\\"precipitation\\\": 8.9,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-24T00:00:00\\\",\\n \\\"precipitation\\\": 7.1,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-26T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-27T00:00:00\\\",\\n \\\"precipitation\\\": 23.1,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-28T00:00:00\\\",\\n \\\"precipitation\\\": 6.1,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-29T00:00:00\\\",\\n \\\"precipitation\\\": 10.9,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 4.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-30T00:00:00\\\",\\n \\\"precipitation\\\": 34.5,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-10-31T00:00:00\\\",\\n \\\"precipitation\\\": 14.5,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-01T00:00:00\\\",\\n \\\"precipitation\\\": 9.7,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-02T00:00:00\\\",\\n \\\"precipitation\\\": 5.6,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-03T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-04T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-05T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-06T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": -0.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-11T00:00:00\\\",\\n \\\"precipitation\\\": 15.2,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-12T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-13T00:00:00\\\",\\n \\\"precipitation\\\": 5.3,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-14T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-16T00:00:00\\\",\\n \\\"precipitation\\\": 5.6,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-17T00:00:00\\\",\\n \\\"precipitation\\\": 6.1,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-18T00:00:00\\\",\\n \\\"precipitation\\\": 7.9,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-19T00:00:00\\\",\\n \\\"precipitation\\\": 54.1,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-20T00:00:00\\\",\\n \\\"precipitation\\\": 3.8,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-21T00:00:00\\\",\\n \\\"precipitation\\\": 11.2,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 5.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-23T00:00:00\\\",\\n \\\"precipitation\\\": 32,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-28T00:00:00\\\",\\n \\\"precipitation\\\": 2.8,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-29T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-11-30T00:00:00\\\",\\n \\\"precipitation\\\": 35.6,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-01T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 5.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-02T00:00:00\\\",\\n \\\"precipitation\\\": 19.6,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 6.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-03T00:00:00\\\",\\n \\\"precipitation\\\": 13,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-04T00:00:00\\\",\\n \\\"precipitation\\\": 14.2,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 6.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-05T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-06T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-07T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-09T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-10T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-11T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-12T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-13T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-14T00:00:00\\\",\\n \\\"precipitation\\\": 7.9,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-15T00:00:00\\\",\\n \\\"precipitation\\\": 5.3,\\n \\\"temp_max\\\": 4.4,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-16T00:00:00\\\",\\n \\\"precipitation\\\": 22.6,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 5.5,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-17T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 9.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-18T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 3.9,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-19T00:00:00\\\",\\n \\\"precipitation\\\": 13.7,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 5.8,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-20T00:00:00\\\",\\n \\\"precipitation\\\": 13.2,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-21T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": -1.7,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-22T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-23T00:00:00\\\",\\n \\\"precipitation\\\": 6.6,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-24T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-25T00:00:00\\\",\\n \\\"precipitation\\\": 13.5,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-26T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 4.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-27T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-29T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 4.4,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2012-12-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": -1.1,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": -2.8,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": -1.1,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-03T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": -1.7,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-04T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-05T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-06T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-07T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 7.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-08T00:00:00\\\",\\n \\\"precipitation\\\": 16.3,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 6.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-09T00:00:00\\\",\\n \\\"precipitation\\\": 38.4,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-10T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": -0.6,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 2.8,\\n \\\"temp_min\\\": -2.8,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 2.8,\\n \\\"temp_min\\\": -3.9,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 2.2,\\n \\\"temp_min\\\": -4.4,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": -2.2,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": -0.6,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": -3.9,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 3.9,\\n \\\"temp_min\\\": -2.8,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": -1.1,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 1.1,\\n \\\"temp_min\\\": -0.6,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": -0.6,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 2.2,\\n \\\"temp_min\\\": -1.7,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": -1.7,\\n \\\"wind\\\": 0.6,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-23T00:00:00\\\",\\n \\\"precipitation\\\": 5.1,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-24T00:00:00\\\",\\n \\\"precipitation\\\": 5.8,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-25T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-26T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-27T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-28T00:00:00\\\",\\n \\\"precipitation\\\": 7.9,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-29T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-30T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-01-31T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-01T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-03T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-05T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-06T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-07T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-09T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-11T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-12T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-13T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-14T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 5.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-20T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-21T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 6.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-22T00:00:00\\\",\\n \\\"precipitation\\\": 9.4,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 8.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-23T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 5.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-25T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 7.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-26T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-27T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-02-28T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-01T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 5.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-02T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-06T00:00:00\\\",\\n \\\"precipitation\\\": 11.9,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-07T00:00:00\\\",\\n \\\"precipitation\\\": 7.4,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-10T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-11T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-12T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 5.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-13T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-14T00:00:00\\\",\\n \\\"precipitation\\\": 2.8,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-16T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 6.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-19T00:00:00\\\",\\n \\\"precipitation\\\": 11.7,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-20T00:00:00\\\",\\n \\\"precipitation\\\": 9.9,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 7.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-21T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 4.9,\\n \\\"weather\\\": \\\"snow\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-27T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-28T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-03-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-04T00:00:00\\\",\\n \\\"precipitation\\\": 8.4,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-05T00:00:00\\\",\\n \\\"precipitation\\\": 18.5,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 5.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-06T00:00:00\\\",\\n \\\"precipitation\\\": 12.7,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-07T00:00:00\\\",\\n \\\"precipitation\\\": 39.1,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-08T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-10T00:00:00\\\",\\n \\\"precipitation\\\": 9.4,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-11T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-12T00:00:00\\\",\\n \\\"precipitation\\\": 9.7,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-13T00:00:00\\\",\\n \\\"precipitation\\\": 9.4,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 5.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-14T00:00:00\\\",\\n \\\"precipitation\\\": 5.8,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-16T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-18T00:00:00\\\",\\n \\\"precipitation\\\": 5.3,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-19T00:00:00\\\",\\n \\\"precipitation\\\": 20.6,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 4.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 5.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-21T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-28T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 5.2,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-29T00:00:00\\\",\\n \\\"precipitation\\\": 3.8,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-04-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 4.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 6.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-12T00:00:00\\\",\\n \\\"precipitation\\\": 6.6,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-13T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-15T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-17T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-21T00:00:00\\\",\\n \\\"precipitation\\\": 13.7,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-22T00:00:00\\\",\\n \\\"precipitation\\\": 13.7,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-23T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-24T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-26T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-27T00:00:00\\\",\\n \\\"precipitation\\\": 9.7,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-28T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-29T00:00:00\\\",\\n \\\"precipitation\\\": 5.6,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-05-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-02T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 5.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-12T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-18T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-20T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-21T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-23T00:00:00\\\",\\n \\\"precipitation\\\": 7.9,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-24T00:00:00\\\",\\n \\\"precipitation\\\": 4.8,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-25T00:00:00\\\",\\n \\\"precipitation\\\": 9.9,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-26T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-27T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 18.3,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-06-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.9,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.7,\\n \\\"temp_min\\\": 18.3,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 18.3,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-07-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-02T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-10T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-14T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-15T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-25T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-26T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-27T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-28T00:00:00\\\",\\n \\\"precipitation\\\": 5.6,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-29T00:00:00\\\",\\n \\\"precipitation\\\": 19.3,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 18.3,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-08-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-03T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-04T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-05T00:00:00\\\",\\n \\\"precipitation\\\": 27.7,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-06T00:00:00\\\",\\n \\\"precipitation\\\": 21.3,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.9,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-15T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-16T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-20T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-22T00:00:00\\\",\\n \\\"precipitation\\\": 13.5,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 5.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-23T00:00:00\\\",\\n \\\"precipitation\\\": 2.8,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-25T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-27T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-28T00:00:00\\\",\\n \\\"precipitation\\\": 43.4,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-29T00:00:00\\\",\\n \\\"precipitation\\\": 16.8,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 7.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-09-30T00:00:00\\\",\\n \\\"precipitation\\\": 18.5,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 6.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-01T00:00:00\\\",\\n \\\"precipitation\\\": 7.9,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-02T00:00:00\\\",\\n \\\"precipitation\\\": 5.3,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-03T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 0.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-06T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-07T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 6.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-08T00:00:00\\\",\\n \\\"precipitation\\\": 6.9,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-10T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-11T00:00:00\\\",\\n \\\"precipitation\\\": 9.1,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-12T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 0.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 0.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 0.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-27T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-30T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-10-31T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-01T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-02T00:00:00\\\",\\n \\\"precipitation\\\": 12.7,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 7.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-03T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-05T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-06T00:00:00\\\",\\n \\\"precipitation\\\": 3.8,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-07T00:00:00\\\",\\n \\\"precipitation\\\": 30,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 7.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-09T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-12T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-14T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-15T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-17T00:00:00\\\",\\n \\\"precipitation\\\": 5.3,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-18T00:00:00\\\",\\n \\\"precipitation\\\": 26.2,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-19T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": -0.5,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 0.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 0.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 0.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-29T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-11-30T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-01T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 8.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-02T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": -0.5,\\n \\\"wind\\\": 5.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 4.4,\\n \\\"temp_min\\\": -2.1,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 1.1,\\n \\\"temp_min\\\": -4.9,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 1.1,\\n \\\"temp_min\\\": -4.3,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 0,\\n \\\"temp_min\\\": -7.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 2.2,\\n \\\"temp_min\\\": -6.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 1.1,\\n \\\"temp_min\\\": -4.9,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": -1.6,\\n \\\"wind\\\": 0.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-12T00:00:00\\\",\\n \\\"precipitation\\\": 6.9,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": -0.5,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-13T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-15T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-16T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-18T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-20T00:00:00\\\",\\n \\\"precipitation\\\": 5.6,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-21T00:00:00\\\",\\n \\\"precipitation\\\": 5.6,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-22T00:00:00\\\",\\n \\\"precipitation\\\": 10.7,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-23T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 0.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 0.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-27T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-30T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2013-12-31T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 1.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-02T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-03T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": -0.5,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-06T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": -0.5,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-07T00:00:00\\\",\\n \\\"precipitation\\\": 12.2,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-08T00:00:00\\\",\\n \\\"precipitation\\\": 9.7,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-09T00:00:00\\\",\\n \\\"precipitation\\\": 5.8,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 6.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-10T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-11T00:00:00\\\",\\n \\\"precipitation\\\": 21.3,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 8.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-12T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 8.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 7.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-22T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 5.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 0.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-28T00:00:00\\\",\\n \\\"precipitation\\\": 8.9,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-29T00:00:00\\\",\\n \\\"precipitation\\\": 21.6,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-01-31T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-01T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 0.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 2.8,\\n \\\"temp_min\\\": -2.1,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": -0.5,\\n \\\"temp_min\\\": -5.5,\\n \\\"wind\\\": 6.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": -1.6,\\n \\\"temp_min\\\": -6,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": -4.9,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-08T00:00:00\\\",\\n \\\"precipitation\\\": 5.1,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": -0.5,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-09T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 3.9,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-10T00:00:00\\\",\\n \\\"precipitation\\\": 18.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-11T00:00:00\\\",\\n \\\"precipitation\\\": 17,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-12T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-13T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 6.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-14T00:00:00\\\",\\n \\\"precipitation\\\": 9.4,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-15T00:00:00\\\",\\n \\\"precipitation\\\": 11.7,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-16T00:00:00\\\",\\n \\\"precipitation\\\": 26.4,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 7.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-17T00:00:00\\\",\\n \\\"precipitation\\\": 14.5,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 5.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-18T00:00:00\\\",\\n \\\"precipitation\\\": 15.2,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 6.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-19T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-20T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 6.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-21T00:00:00\\\",\\n \\\"precipitation\\\": 2.8,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-22T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-23T00:00:00\\\",\\n \\\"precipitation\\\": 6.1,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-24T00:00:00\\\",\\n \\\"precipitation\\\": 13,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-25T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-02-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-01T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-02T00:00:00\\\",\\n \\\"precipitation\\\": 19.1,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 5.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-03T00:00:00\\\",\\n \\\"precipitation\\\": 10.7,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-04T00:00:00\\\",\\n \\\"precipitation\\\": 16.5,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-05T00:00:00\\\",\\n \\\"precipitation\\\": 46.7,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-06T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 6.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-08T00:00:00\\\",\\n \\\"precipitation\\\": 32.3,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-09T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-10T00:00:00\\\",\\n \\\"precipitation\\\": 18.8,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-13T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-14T00:00:00\\\",\\n \\\"precipitation\\\": 6.9,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 6.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-15T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-16T00:00:00\\\",\\n \\\"precipitation\\\": 27.7,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-17T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-19T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-25T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-26T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-27T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-28T00:00:00\\\",\\n \\\"precipitation\\\": 22.1,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-29T00:00:00\\\",\\n \\\"precipitation\\\": 14,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-03-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-03T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-05T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-08T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-15T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-16T00:00:00\\\",\\n \\\"precipitation\\\": 10.9,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-17T00:00:00\\\",\\n \\\"precipitation\\\": 18.5,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-19T00:00:00\\\",\\n \\\"precipitation\\\": 13.7,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-21T00:00:00\\\",\\n \\\"precipitation\\\": 5.1,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-22T00:00:00\\\",\\n \\\"precipitation\\\": 14.2,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-23T00:00:00\\\",\\n \\\"precipitation\\\": 8.9,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-24T00:00:00\\\",\\n \\\"precipitation\\\": 12.4,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-26T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-27T00:00:00\\\",\\n \\\"precipitation\\\": 6.9,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 5.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-04-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 29.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-03T00:00:00\\\",\\n \\\"precipitation\\\": 33.3,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-04T00:00:00\\\",\\n \\\"precipitation\\\": 16,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-05T00:00:00\\\",\\n \\\"precipitation\\\": 5.1,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-08T00:00:00\\\",\\n \\\"precipitation\\\": 13.7,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-09T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-10T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-23T00:00:00\\\",\\n \\\"precipitation\\\": 3.8,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-25T00:00:00\\\",\\n \\\"precipitation\\\": 5.6,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-05-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-12T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-13T00:00:00\\\",\\n \\\"precipitation\\\": 6.4,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-15T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-16T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-17T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-19T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-20T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-27T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-28T00:00:00\\\",\\n \\\"precipitation\\\": 2.3,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-06-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 34.4,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 17.8,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 32.2,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 29.4,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 5.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-22T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-23T00:00:00\\\",\\n \\\"precipitation\\\": 19.3,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 29.4,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-07-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 17.8,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-02T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 29.4,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.7,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 32.8,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-11T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 35.6,\\n \\\"temp_min\\\": 17.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-12T00:00:00\\\",\\n \\\"precipitation\\\": 12.7,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-13T00:00:00\\\",\\n \\\"precipitation\\\": 21.6,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 0.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-15T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 29.4,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-30T00:00:00\\\",\\n \\\"precipitation\\\": 8.4,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-08-31T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-02T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 6.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 32.2,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 1.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-17T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-18T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-22T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-23T00:00:00\\\",\\n \\\"precipitation\\\": 18.3,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-24T00:00:00\\\",\\n \\\"precipitation\\\": 20.3,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-25T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-26T00:00:00\\\",\\n \\\"precipitation\\\": 8.9,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-29T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-09-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 1.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-10T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-11T00:00:00\\\",\\n \\\"precipitation\\\": 7.4,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-13T00:00:00\\\",\\n \\\"precipitation\\\": 7.6,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-14T00:00:00\\\",\\n \\\"precipitation\\\": 7.1,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-15T00:00:00\\\",\\n \\\"precipitation\\\": 8.6,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-17T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-18T00:00:00\\\",\\n \\\"precipitation\\\": 15,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-20T00:00:00\\\",\\n \\\"precipitation\\\": 11.7,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-21T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-22T00:00:00\\\",\\n \\\"precipitation\\\": 32,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-23T00:00:00\\\",\\n \\\"precipitation\\\": 9.4,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-24T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-25T00:00:00\\\",\\n \\\"precipitation\\\": 6.1,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 5.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-26T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-27T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-28T00:00:00\\\",\\n \\\"precipitation\\\": 12.7,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-29T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-30T00:00:00\\\",\\n \\\"precipitation\\\": 25.4,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-10-31T00:00:00\\\",\\n \\\"precipitation\\\": 17,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-02T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-03T00:00:00\\\",\\n \\\"precipitation\\\": 10.9,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 4.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-04T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-05T00:00:00\\\",\\n \\\"precipitation\\\": 4.8,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-06T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 6.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 0.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-09T00:00:00\\\",\\n \\\"precipitation\\\": 5.1,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 7.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 7.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": -2.1,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": -1.6,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": -2.1,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": -2.1,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": -0.5,\\n \\\"wind\\\": 0.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-20T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-21T00:00:00\\\",\\n \\\"precipitation\\\": 15.2,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-22T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-23T00:00:00\\\",\\n \\\"precipitation\\\": 11.9,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-24T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-25T00:00:00\\\",\\n \\\"precipitation\\\": 18.3,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-26T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-27T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 6.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-28T00:00:00\\\",\\n \\\"precipitation\\\": 34.3,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 5.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-29T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 4.4,\\n \\\"temp_min\\\": -4.3,\\n \\\"wind\\\": 5.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-11-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 2.8,\\n \\\"temp_min\\\": -4.9,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 4.4,\\n \\\"temp_min\\\": -3.2,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": -3.2,\\n \\\"wind\\\": 5.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-04T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-05T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-06T00:00:00\\\",\\n \\\"precipitation\\\": 7.4,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-08T00:00:00\\\",\\n \\\"precipitation\\\": 9.1,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-09T00:00:00\\\",\\n \\\"precipitation\\\": 9.9,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-10T00:00:00\\\",\\n \\\"precipitation\\\": 13,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 6.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-11T00:00:00\\\",\\n \\\"precipitation\\\": 6.9,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-17T00:00:00\\\",\\n \\\"precipitation\\\": 2.8,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-18T00:00:00\\\",\\n \\\"precipitation\\\": 13,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-19T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-20T00:00:00\\\",\\n \\\"precipitation\\\": 19.6,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 5.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 5.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-23T00:00:00\\\",\\n \\\"precipitation\\\": 20.6,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-24T00:00:00\\\",\\n \\\"precipitation\\\": 5.3,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 1.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-27T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 4.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-28T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": -2.1,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2014-12-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 3.3,\\n \\\"temp_min\\\": -2.7,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": -3.2,\\n \\\"wind\\\": 1.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-02T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-04T00:00:00\\\",\\n \\\"precipitation\\\": 10.2,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-05T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 6.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-09T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 0.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-10T00:00:00\\\",\\n \\\"precipitation\\\": 5.8,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 0.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-11T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-15T00:00:00\\\",\\n \\\"precipitation\\\": 9.7,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-17T00:00:00\\\",\\n \\\"precipitation\\\": 26.2,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-18T00:00:00\\\",\\n \\\"precipitation\\\": 21.3,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 6.6,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-19T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": -0.5,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-22T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-23T00:00:00\\\",\\n \\\"precipitation\\\": 5.8,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-24T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-27T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 0.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-01-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-01T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-02T00:00:00\\\",\\n \\\"precipitation\\\": 7.4,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-03T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-04T00:00:00\\\",\\n \\\"precipitation\\\": 8.4,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-05T00:00:00\\\",\\n \\\"precipitation\\\": 26.2,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-06T00:00:00\\\",\\n \\\"precipitation\\\": 17.3,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-07T00:00:00\\\",\\n \\\"precipitation\\\": 23.6,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-08T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-09T00:00:00\\\",\\n \\\"precipitation\\\": 6.1,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-10T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-12T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-14T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 4.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 6.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-19T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-20T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 0.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-25T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-26T00:00:00\\\",\\n \\\"precipitation\\\": 9.4,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-27T00:00:00\\\",\\n \\\"precipitation\\\": 18.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-02-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 4.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": -0.5,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-10T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-11T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-13T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-14T00:00:00\\\",\\n \\\"precipitation\\\": 17,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-15T00:00:00\\\",\\n \\\"precipitation\\\": 55.9,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-16T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-17T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-20T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-21T00:00:00\\\",\\n \\\"precipitation\\\": 3.8,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-22T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-23T00:00:00\\\",\\n \\\"precipitation\\\": 8.1,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-24T00:00:00\\\",\\n \\\"precipitation\\\": 7.6,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-25T00:00:00\\\",\\n \\\"precipitation\\\": 5.1,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-27T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 5.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-30T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-03-31T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-01T00:00:00\\\",\\n \\\"precipitation\\\": 5.1,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-03T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-06T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-07T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-10T00:00:00\\\",\\n \\\"precipitation\\\": 10.9,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 6.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-13T00:00:00\\\",\\n \\\"precipitation\\\": 14,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-14T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-21T00:00:00\\\",\\n \\\"precipitation\\\": 5.6,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-23T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-24T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-25T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-27T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-28T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-04-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-05T00:00:00\\\",\\n \\\"precipitation\\\": 6.1,\\n \\\"temp_max\\\": 14.4,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-12T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-13T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-14T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-05-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-01T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-02T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 29.4,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.1,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-19T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.7,\\n \\\"temp_min\\\": 17.8,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.3,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-28T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 18.3,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-06-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 32.2,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.9,\\n \\\"temp_min\\\": 17.8,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.3,\\n \\\"temp_min\\\": 17.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.3,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 32.8,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 29.4,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.3,\\n \\\"temp_min\\\": 17.8,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 35,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-24T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-26T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 32.2,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 34.4,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-07-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 34.4,\\n \\\"temp_min\\\": 17.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 33.3,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30.6,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 17.2,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-07T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.9,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 4.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-12T00:00:00\\\",\\n \\\"precipitation\\\": 7.6,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 16.7,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-13T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-14T00:00:00\\\",\\n \\\"precipitation\\\": 30.5,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 5.2,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-17T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 30,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 31.7,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-20T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.8,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.9,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25.6,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 28.3,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 29.4,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-28T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 15.6,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-29T00:00:00\\\",\\n \\\"precipitation\\\": 32.5,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 5.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-30T00:00:00\\\",\\n \\\"precipitation\\\": 10.2,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-08-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 16.1,\\n \\\"wind\\\": 5.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-01T00:00:00\\\",\\n \\\"precipitation\\\": 5.8,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-05T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-06T00:00:00\\\",\\n \\\"precipitation\\\": 5.3,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-07T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 2.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-09T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 24.4,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 3.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-10T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 25,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 3.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 27.2,\\n \\\"temp_min\\\": 15,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-12T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 26.7,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 2.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-13T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-16T00:00:00\\\",\\n \\\"precipitation\\\": 1,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-17T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-18T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 14.4,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-20T00:00:00\\\",\\n \\\"precipitation\\\": 4.1,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 6.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20.6,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.2,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-25T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.7,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 1.9,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-09-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-01T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-02T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-03T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 4.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 22.8,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 3.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-05T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 23.3,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 1.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"drizzle\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-07T00:00:00\\\",\\n \\\"precipitation\\\": 9.9,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 13.9,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-08T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 18.9,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 1.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-09T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-10T00:00:00\\\",\\n \\\"precipitation\\\": 28.7,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 13.3,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-11T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-12T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 18.3,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-13T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 16.7,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-15T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 21.1,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-16T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 20,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-17T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-18T00:00:00\\\",\\n \\\"precipitation\\\": 3.8,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 12.8,\\n \\\"wind\\\": 2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-19T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 17.8,\\n \\\"temp_min\\\": 10.6,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-23T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-24T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-25T00:00:00\\\",\\n \\\"precipitation\\\": 8.9,\\n \\\"temp_max\\\": 19.4,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"rain\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-26T00:00:00\\\",\\n \\\"precipitation\\\": 6.9,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 16.1,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-28T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 13.9,\\n \\\"temp_min\\\": 11.1,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-29T00:00:00\\\",\\n \\\"precipitation\\\": 1.8,\\n \\\"temp_max\\\": 15,\\n \\\"temp_min\\\": 12.2,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-30T00:00:00\\\",\\n \\\"precipitation\\\": 19.3,\\n \\\"temp_max\\\": 17.2,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 6.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-10-31T00:00:00\\\",\\n \\\"precipitation\\\": 33,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 11.7,\\n \\\"wind\\\": 7.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-01T00:00:00\\\",\\n \\\"precipitation\\\": 26.2,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 8.9,\\n \\\"wind\\\": 6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-02T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-03T00:00:00\\\",\\n \\\"precipitation\\\": 0.8,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 1.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-04T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 2.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-05T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-06T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 2.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-07T00:00:00\\\",\\n \\\"precipitation\\\": 12.7,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-08T00:00:00\\\",\\n \\\"precipitation\\\": 6.6,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 1.8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-09T00:00:00\\\",\\n \\\"precipitation\\\": 3.3,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-10T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 3.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-11T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.6,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-12T00:00:00\\\",\\n \\\"precipitation\\\": 9.9,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 5,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-13T00:00:00\\\",\\n \\\"precipitation\\\": 33.5,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 9.4,\\n \\\"wind\\\": 6.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-14T00:00:00\\\",\\n \\\"precipitation\\\": 47.2,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-15T00:00:00\\\",\\n \\\"precipitation\\\": 22.4,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-16T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-17T00:00:00\\\",\\n \\\"precipitation\\\": 29.5,\\n \\\"temp_max\\\": 13.3,\\n \\\"temp_min\\\": 6.7,\\n \\\"wind\\\": 8,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-18T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 3.3,\\n \\\"wind\\\": 3.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-19T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 4.2,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-20T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-21T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-22T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 3.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-23T00:00:00\\\",\\n \\\"precipitation\\\": 3,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-24T00:00:00\\\",\\n \\\"precipitation\\\": 7.1,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 4.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-25T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 5.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": -1,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-27T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": -1.6,\\n \\\"wind\\\": 3,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-28T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": -2.7,\\n \\\"wind\\\": 1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 1.7,\\n \\\"temp_min\\\": -2.1,\\n \\\"wind\\\": 0.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-11-30T00:00:00\\\",\\n \\\"precipitation\\\": 0.5,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": -3.8,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-01T00:00:00\\\",\\n \\\"precipitation\\\": 12.2,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-02T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-03T00:00:00\\\",\\n \\\"precipitation\\\": 12.7,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-04T00:00:00\\\",\\n \\\"precipitation\\\": 2,\\n \\\"temp_max\\\": 10.6,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-05T00:00:00\\\",\\n \\\"precipitation\\\": 15.7,\\n \\\"temp_max\\\": 10,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-06T00:00:00\\\",\\n \\\"precipitation\\\": 11.2,\\n \\\"temp_max\\\": 12.8,\\n \\\"temp_min\\\": 7.2,\\n \\\"wind\\\": 5.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-07T00:00:00\\\",\\n \\\"precipitation\\\": 27.4,\\n \\\"temp_max\\\": 11.1,\\n \\\"temp_min\\\": 8.3,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-08T00:00:00\\\",\\n \\\"precipitation\\\": 54.1,\\n \\\"temp_max\\\": 15.6,\\n \\\"temp_min\\\": 10,\\n \\\"wind\\\": 6.2,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-09T00:00:00\\\",\\n \\\"precipitation\\\": 13.5,\\n \\\"temp_max\\\": 12.2,\\n \\\"temp_min\\\": 7.8,\\n \\\"wind\\\": 6.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-10T00:00:00\\\",\\n \\\"precipitation\\\": 9.4,\\n \\\"temp_max\\\": 11.7,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 7.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-11T00:00:00\\\",\\n \\\"precipitation\\\": 0.3,\\n \\\"temp_max\\\": 9.4,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 2.8,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-12T00:00:00\\\",\\n \\\"precipitation\\\": 16,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 5.6,\\n \\\"wind\\\": 5.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-13T00:00:00\\\",\\n \\\"precipitation\\\": 1.3,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 6.1,\\n \\\"wind\\\": 6.1,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-14T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 1.7,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-15T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 1.1,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-16T00:00:00\\\",\\n \\\"precipitation\\\": 3.6,\\n \\\"temp_max\\\": 6.1,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 2.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-17T00:00:00\\\",\\n \\\"precipitation\\\": 21.8,\\n \\\"temp_max\\\": 6.7,\\n \\\"temp_min\\\": 3.9,\\n \\\"wind\\\": 6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-18T00:00:00\\\",\\n \\\"precipitation\\\": 18.5,\\n \\\"temp_max\\\": 8.9,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 5.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-19T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 8.3,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 4.1,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-20T00:00:00\\\",\\n \\\"precipitation\\\": 4.3,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 4.4,\\n \\\"wind\\\": 6.7,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-21T00:00:00\\\",\\n \\\"precipitation\\\": 27.4,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-22T00:00:00\\\",\\n \\\"precipitation\\\": 4.6,\\n \\\"temp_max\\\": 7.8,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-23T00:00:00\\\",\\n \\\"precipitation\\\": 6.1,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": 2.8,\\n \\\"wind\\\": 7.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-24T00:00:00\\\",\\n \\\"precipitation\\\": 2.5,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 4.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-25T00:00:00\\\",\\n \\\"precipitation\\\": 5.8,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": 2.2,\\n \\\"wind\\\": 1.5,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-26T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 4.4,\\n \\\"temp_min\\\": 0,\\n \\\"wind\\\": 2.5,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-27T00:00:00\\\",\\n \\\"precipitation\\\": 8.6,\\n \\\"temp_max\\\": 4.4,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 2.9,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-28T00:00:00\\\",\\n \\\"precipitation\\\": 1.5,\\n \\\"temp_max\\\": 5,\\n \\\"temp_min\\\": 1.7,\\n \\\"wind\\\": 1.3,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-29T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 7.2,\\n \\\"temp_min\\\": 0.6,\\n \\\"wind\\\": 2.6,\\n \\\"weather\\\": \\\"fog\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-30T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": -1,\\n \\\"wind\\\": 3.4,\\n \\\"weather\\\": \\\"sun\\\"\\n },\\n {\\n \\\"date\\\": \\\"2015-12-31T00:00:00\\\",\\n \\\"precipitation\\\": 0,\\n \\\"temp_max\\\": 5.6,\\n \\\"temp_min\\\": -2.1,\\n \\\"wind\\\": 3.5,\\n \\\"weather\\\": \\\"sun\\\"\\n }\\n ]\\n }\\n}\"}}"},"id":"6b179e10-d9d7-11ee-9203-cf873e97f443","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-03-16T03:58:56.290Z","version":"WzMzMyw4XQ=="}
-{"attributes":{"fields":"[{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"droppedEventsCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"droppedLinksCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"durationInNanos\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"endTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"events.attributes.app@payment@transaction@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@payment@transaction@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@payment@transaction@id\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@quote@cost@total\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@cost@total\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@cost@total.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@shipping@cost@total\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@tracking@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@tracking@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@shipping@tracking@id\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@escaped\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@escaped.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@escaped\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@message.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@message\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@stacktrace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@stacktrace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@stacktrace\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@type\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.message@type\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.name\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.time\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"instrumentationScope.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.name\"}}},{\"count\":0,\"name\":\"instrumentationScope.version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.version\"}}},{\"count\":0,\"name\":\"kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"links.droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.spanId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.spanId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.spanId\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.traceId\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.traceState\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"parentSpanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.container@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.host@arch\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.host@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command_args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@executable@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@executable@path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@pid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@instance@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@auto@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@language\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@ad_request_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@ad_response_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@contextKeys\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@contextKeys@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@cart@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@currency@conversion@from\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@currency@conversion@to\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@email@recipient\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@featureflag@enabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@featureflag@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@filtered_products@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@filtered_products@list\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@card_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@card_valid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@charged\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@quantity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@products@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@products_recommended@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@quote@cost@total\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@quote@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@recommendation@cache_enabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@session@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@cost@total\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@tracking@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@zip_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@synthetic_request\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@user@currency\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@user@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.busy_ns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@filepath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@function\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@lineno\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@instance\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@redis@database_index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@redis@flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@statement\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.decode_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@client_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@flavor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@request_content_length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@request_content_length_uncompressed\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@response_content_length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@route\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@scheme\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@status_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@status_text\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@target\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.idle_ns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.idle_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.jinja2@template_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.jinja2@template_path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@client_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@destination@kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@destination@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@consumer@group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@destination@partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@message@offset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@message@payload_size_bytes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@host@addr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@peer@addr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@peer@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@transport\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.peer@service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.phoenix@action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.phoenix@plug\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.query_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.queue_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@grpc@status_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.sinatra@template_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.thread@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.thread@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.total_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"spanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"startTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status.code\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.durationInNanos\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.endTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.statusCode\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"traceState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"traceState\"}}}]","timeFieldName":"startTime","title":"otel-v1-apm-span-0*"},"id":"a7cea13f-0173-4ade-8993-f4468193da16","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2024-03-03T06:18:11.955Z","version":"WzI5LDFd"}
-{"attributes":{"description":"traces by response code","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"traces-by-response-code","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"traces-by-response-code\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1708642305489\",\"fieldName\":\"serviceName\",\"parent\":\"\",\"label\":\"services\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1708641641797\",\"fieldName\":\"span.attributes.http@status_code\",\"parent\":\"\",\"label\":\"response-status\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_1_index_pattern\"},{\"id\":\"1708642009521\",\"fieldName\":\"traceGroup\",\"parent\":\"\",\"label\":\"group\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_2_index_pattern\"}],\"updateFiltersOnChange\":true,\"useTimeFilter\":true,\"pinFilters\":false}}"},"id":"7e12d8ea-1220-4caa-b145-d6be91b46170","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"79a3b09c-71e8-4c6d-a755-382d1338fb94","name":"control_0_index_pattern","type":"index-pattern"},{"id":"a7cea13f-0173-4ade-8993-f4468193da16","name":"control_1_index_pattern","type":"index-pattern"},{"id":"a7cea13f-0173-4ade-8993-f4468193da16","name":"control_2_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-03T06:18:11.955Z","version":"WzMxLDFd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.network.dropped_packets\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.network.dropped_packets\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"network-dropped-packets-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"network-dropped-packets-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"Network Dropped Packets Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":5000,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.direction']\\\", \\\"as\\\":\\\"direction\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"Direction\\\\\\\": isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; Direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"direction\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"direction\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 1000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 1000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"Direction\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"1290f940-e34a-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-16T04:02:57.364Z","version":"WzMzNyw4XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"apm-read_write-direction-pie","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"apm-read_write-direction-pie\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"R/W - Direction\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"attributes.metric.attributes.direction.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":500,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"R/W - Direction\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"59e73f60-e2fb-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-17T01:57:45.524Z","version":"WzM0NSw4XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"state-metrics-pie-chart","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"state-metrics-pie-chart\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"states\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"attributes.metric.attributes.state.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":500,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"States\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"ed5276d0-e2fa-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-17T01:57:58.179Z","version":"WzM0Niw4XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.network.errors\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.network.errors\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"network-errors-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"network-errors-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"Network Errors Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":5000,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.direction']\\\", \\\"as\\\":\\\"direction\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"Direction\\\\\\\": isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; Direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"direction\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"direction\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 1000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 1000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"Direction\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"e2088130-e349-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-16T04:01:35.938Z","version":"WzMzNiw4XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.network.packets\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.network.packets\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"network.packets-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"network.packets-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"Network Packets Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":1500,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.state']\\\", \\\"as\\\":\\\"state\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"state\\\\\\\": isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; state: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; State: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"state\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"state\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 500000000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 500000000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"State\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"134ba140-e34b-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-16T16:43:13.741Z","version":"WzM0Myw4XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.network.io\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.network.io\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"network.io-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"network.io-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"Network I/O Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":5000,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.direction']\\\", \\\"as\\\":\\\"direction\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"Direction\\\\\\\": isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; Direction: \\\\\\\" + (isValid(datum[\\\\\\\"direction\\\\\\\"]) ? datum[\\\\\\\"direction\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"direction\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"direction\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"direction\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 1000000000000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 1000000000000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"Direction\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"dc616700-e34a-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-16T16:42:48.644Z","version":"WzM0Miw4XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"amp-devices-pie-chart","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"amp-devices-pie-chart\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"devices\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"attributes.metric.attributes.device.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":500,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"devices\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"93148140-e2fa-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-17T01:57:32.483Z","version":"WzM0NCw4XQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"name.keyword\",\"params\":{\"query\":\"system.network.connections\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"name.keyword\":\"system.network.connections\"}},\"$state\":{\"store\":\"appState\"}}]}"},"title":"network.connections-type-metrics","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"network.connections-type-metrics\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"Network Connections Metrics\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"param_37_store\\\"},\\n {\\n \\\"name\\\": \\\"source_0\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\":1500,\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"%dashboard_context-must_clause%\\\",\\n {\\n \\\"range\\\": {\\n \\\"time\\\": {\\n \\\"%timefilter%\\\": true\\n }\\n }\\n }\\n ],\\n \\\"must_not\\\": [\\n \\\"%dashboard_context-must_not_clause%\\\"\\n ],\\n \\\"filter\\\": [\\n \\\"%dashboard_context-filter_clause%\\\"\\n ]\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"hits\\\",\\n \\\"type\\\": \\\"json\\\"\\n },\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"flatten\\\", \\\"fields\\\": [\\\"hits\\\"], \\\"as\\\": [\\\"record\\\"]},\\n {\\n \\\"type\\\": \\\"project\\\",\\n \\\"fields\\\": [\\\"record._source.time\\\",\\\"record._source.serviceName\\\",\\\"record._source.value\\\",\\\"record._source.attributes\\\"],\\n \\\"as\\\": [\\\"time\\\",\\\"serviceName\\\",\\\"value\\\",\\\"attrib\\\"]\\n },\\n\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_0\\\",\\n \\\"source\\\": \\\"source_0\\\",\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\": \\\"toDate(datum[\\\\\\\"time\\\\\\\"])\\\", \\\"as\\\": \\\"time\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.state']\\\", \\\"as\\\":\\\"state\\\"}\\n {\\\"type\\\": \\\"formula\\\", \\\"expr\\\":\\\"datum.attrib['metric.attributes.device']\\\", \\\"as\\\":\\\"device\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_2\\\",\\n \\\"source\\\": \\\"data_0\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\"\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"serviceName\\\"],\\n \\\"field\\\": \\\"value\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"value_start\\\", \\\"value_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"isValid(datum[\\\\\\\"value\\\\\\\"]) && isFinite(+datum[\\\\\\\"value\\\\\\\"])\\\"\\n }\\n ]\\n }\\n ],\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"view_50_height\\\", \\\"value\\\": 300},\\n {\\\"name\\\": \\\"concat_1_y_step\\\", \\\"value\\\": 20},\\n {\\n \\\"name\\\": \\\"concat_1_height\\\",\\n \\\"update\\\": \\\"bandspace(domain('concat_1_y').length, 0.1, 0.05) * concat_1_y_step\\\"\\n },\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"param_37_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"view_50_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"view_50_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"param_37_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"param_37_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[param_37_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[0]), scale(\\\\\\\"view_50_x\\\\\\\", param_37_time[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(param_37_translate_anchor.extent_x, param_37_translate_delta.x / span(param_37_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(param_37_x, param_37_zoom_anchor.x, param_37_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_time\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_x\\\"},\\n \\\"update\\\": \\\"param_37_x[0] === param_37_x[1] ? null : invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"view_50_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(param_37_time) || (+invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[0] === +param_37_time[0] && +invert(\\\\\\\"view_50_x\\\\\\\", param_37_x)[1] === +param_37_time[1])) ? param_37_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"param_37_time\\\"}],\\n \\\"update\\\": \\\"param_37_time ? {unit: \\\\\\\"view_50\\\\\\\", fields: param_37_tuple_fields, values: [param_37_time]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"time\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(param_37_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: param_37_translate_anchor.x - x(unit), y: param_37_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"param_37_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"param_37_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"param_37_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"param_37_store\\\\\\\", param_37_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"param_37_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"view_50_marks\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7},\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{\\\\\\\"Service Name\\\\\\\": isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"], \\\\\\\"Time\\\\\\\": timeFormat(datum[\\\\\\\"time\\\\\\\"], '%Y-%m-%d %H:%M:%S'), \\\\\\\"Value\\\\\\\": format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\"), \\\\\\\"state\\\\\\\": isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"], \\\\\\\"device\\\\\\\": isValid(datum[\\\\\\\"device\\\\\\\"]) ? datum[\\\\\\\"device\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"device\\\\\\\"]}\\\"\\n },\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"point\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"Time: \\\\\\\" + (timeFormat(datum[\\\\\\\"time\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; Metric Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; state: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"]) + \\\\\\\"; Service Name: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"]) + \\\\\\\"; Value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; State: \\\\\\\" + (isValid(datum[\\\\\\\"state\\\\\\\"]) ? datum[\\\\\\\"state\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"state\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"view_50_x\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"view_50_y\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"shape\\\": {\\\"scale\\\": \\\"shape\\\", \\\"field\\\": \\\"state\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"param_37_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"signal\\\": \\\"param_37_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"param_37_store\\\\\\\").length && data(\\\\\\\"param_37_store\\\\\\\")[0].unit === \\\\\\\"view_50\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"param_37_x[0] !== param_37_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"view_50_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"view_50_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Time\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"view_50_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"Metric Value\\\",\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(view_50_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"style\\\": [\\\"bar\\\"],\\n \\\"interactive\\\": false,\\n \\\"from\\\": {\\\"data\\\": \\\"data_2\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": [\\n {\\n \\\"test\\\": \\\"!length(data(\\\\\\\"param_37_store\\\\\\\")) || vlSelectionTest(\\\\\\\"param_37_store\\\\\\\", datum)\\\",\\n \\\"scale\\\": \\\"color\\\",\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n {\\\"value\\\": \\\"lightgray\\\"}\\n ],\\n \\\"ariaRoleDescription\\\": {\\\"value\\\": \\\"bar\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"value: \\\\\\\" + (format(datum[\\\\\\\"value\\\\\\\"], \\\\\\\"\\\\\\\")) + \\\\\\\"; serviceName: \\\\\\\" + (isValid(datum[\\\\\\\"serviceName\\\\\\\"]) ? datum[\\\\\\\"serviceName\\\\\\\"] : \\\\\\\"\\\\\\\"+datum[\\\\\\\"serviceName\\\\\\\"])\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_end\\\"},\\n \\\"x2\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"value_start\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"serviceName\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"max(0.25, bandwidth('concat_1_y'))\\\"}\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"value\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\n \\\"fields\\\": [\\n {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"serviceName\\\"},\\n {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\"}\\n ],\\n \\\"sort\\\": true\\n },\\n \\\"range\\\": \\\"category\\\"\\n },\\n {\\n \\\"name\\\": \\\"shape\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"state\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"symbol\\\"\\n },\\n {\\n \\\"name\\\": \\\"view_50_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"time\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"view_50_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_0\\\", \\\"field\\\": \\\"value\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"view_50_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": [0, 10000], \\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}],\\n \\\"domainMin\\\": 0,\\n \\\"domainMax\\\": 10000, \\n\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_2\\\", \\\"field\\\": \\\"serviceName\\\", \\\"sort\\\": true},\\n \\\"range\\\": {\\\"step\\\": {\\\"signal\\\": \\\"concat_1_y_step\\\"}},\\n \\\"paddingInner\\\": 0.1,\\n \\\"paddingOuter\\\": 0.05\\n }\\n ],\\n \\\"legends\\\": [\\n {\\n \\\"stroke\\\": \\\"color\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"title\\\": \\\"serviceName\\\",\\n \\\"encode\\\": {\\\"symbols\\\": {\\\"update\\\": {\\\"opacity\\\": {\\\"value\\\": 0.7}}}},\\n \\\"fill\\\": \\\"color\\\"\\n },\\n {\\n \\\"title\\\": \\\"State\\\",\\n \\\"shape\\\": \\\"shape\\\",\\n \\\"symbolType\\\": \\\"circle\\\",\\n \\\"encode\\\": {\\n \\\"symbols\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"lightgray\\\"},\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"62e6cf90-e34b-11ee-9823-49d05dd2659c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-16T04:12:21.641Z","version":"WzM0MCw4XQ=="}
-{"attributes":{"description":"connections\npackets\nerrors\ndevices","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"controlledBy\":\"1708642305489\",\"disabled\":false,\"key\":\"serviceName\",\"negate\":false,\"params\":{\"query\":\"loadgenerator\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"serviceName\":\"loadgenerator\"}}},{\"meta\":{\"type\":\"phrases\",\"key\":\"name.keyword\",\"value\":\"system.network.errors, system.network.dropped_packets, system.network.packets, system.network.io, system.network.connections\",\"params\":[\"system.network.errors\",\"system.network.dropped_packets\",\"system.network.packets\",\"system.network.io\",\"system.network.connections\"],\"alias\":null,\"negate\":false,\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"bool\":{\"should\":[{\"match_phrase\":{\"name.keyword\":\"system.network.errors\"}},{\"match_phrase\":{\"name.keyword\":\"system.network.dropped_packets\"}},{\"match_phrase\":{\"name.keyword\":\"system.network.packets\"}},{\"match_phrase\":{\"name.keyword\":\"system.network.io\"}},{\"match_phrase\":{\"name.keyword\":\"system.network.connections\"}}],\"minimum_should_match\":1}},\"$state\":{\"store\":\"appState\"}}]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"2.12.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":48,\"h\":15,\"i\":\"b523c90e-37d7-4221-8a89-8fc709d29fc8\"},\"panelIndex\":\"b523c90e-37d7-4221-8a89-8fc709d29fc8\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":0,\"y\":15,\"w\":48,\"h\":18,\"i\":\"579912ae-2182-4248-9f46-640315dc369d\"},\"panelIndex\":\"579912ae-2182-4248-9f46-640315dc369d\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":24,\"y\":33,\"w\":24,\"h\":16,\"i\":\"a9059e47-8521-47ca-9d78-7cecbae02152\"},\"panelIndex\":\"a9059e47-8521-47ca-9d78-7cecbae02152\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":0,\"y\":33,\"w\":24,\"h\":5,\"i\":\"fea35ef6-f4b1-4e14-bd23-350329af3925\"},\"panelIndex\":\"fea35ef6-f4b1-4e14-bd23-350329af3925\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":24,\"y\":49,\"w\":24,\"h\":19,\"i\":\"055dbb32-0a99-4605-8980-ef01fdb29961\"},\"panelIndex\":\"055dbb32-0a99-4605-8980-ef01fdb29961\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":0,\"y\":38,\"w\":12,\"h\":11,\"i\":\"ecab2abf-0675-4aa7-a289-b96a22e46270\"},\"panelIndex\":\"ecab2abf-0675-4aa7-a289-b96a22e46270\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":12,\"y\":38,\"w\":12,\"h\":11,\"i\":\"d76c5ec8-c86f-4f65-8feb-1e7f2aa8331f\"},\"panelIndex\":\"d76c5ec8-c86f-4f65-8feb-1e7f2aa8331f\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":0,\"y\":49,\"w\":24,\"h\":19,\"i\":\"a610a74c-ed1c-4e5a-a639-e79075f8cbed\"},\"panelIndex\":\"a610a74c-ed1c-4e5a-a639-e79075f8cbed\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":24,\"y\":68,\"w\":24,\"h\":20,\"i\":\"eb67768e-8278-4169-ae7d-e4c549c6737b\"},\"panelIndex\":\"eb67768e-8278-4169-ae7d-e4c549c6737b\",\"embeddableConfig\":{},\"panelRefName\":\"panel_8\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":0,\"y\":68,\"w\":24,\"h\":20,\"i\":\"ad0e2bce-65d6-4eff-bb96-0543337500d9\"},\"panelIndex\":\"ad0e2bce-65d6-4eff-bb96-0543337500d9\",\"embeddableConfig\":{},\"panelRefName\":\"panel_9\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":24,\"y\":88,\"w\":24,\"h\":19,\"i\":\"5fc8b689-cf46-48ef-aa14-1f07c03931f1\"},\"panelIndex\":\"5fc8b689-cf46-48ef-aa14-1f07c03931f1\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Devices\",\"panelRefName\":\"panel_10\"},{\"version\":\"2.12.0\",\"gridData\":{\"x\":0,\"y\":88,\"w\":24,\"h\":19,\"i\":\"3b04d06d-7f0d-4c96-aabc-4170b23cd033\"},\"panelIndex\":\"3b04d06d-7f0d-4c96-aabc-4170b23cd033\",\"embeddableConfig\":{},\"panelRefName\":\"panel_11\"}]","timeRestore":false,"title":"APM-Network-Metrics","version":1},"id":"apm-network-metrics-dashboard-1_0_0_ID","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"79a3b09c-71e8-4c6d-a755-382d1338fb94","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"},{"id":"1df769d0-e2f6-11ee-9823-49d05dd2659c","name":"panel_0","type":"visualization"},{"id":"8d7b0350-e406-11ee-9823-49d05dd2659c","name":"panel_1","type":"visualization"},{"id":"6b179e10-d9d7-11ee-9203-cf873e97f443","name":"panel_2","type":"visualization"},{"id":"7e12d8ea-1220-4caa-b145-d6be91b46170","name":"panel_3","type":"visualization"},{"id":"1290f940-e34a-11ee-9823-49d05dd2659c","name":"panel_4","type":"visualization"},{"id":"59e73f60-e2fb-11ee-9823-49d05dd2659c","name":"panel_5","type":"visualization"},{"id":"ed5276d0-e2fa-11ee-9823-49d05dd2659c","name":"panel_6","type":"visualization"},{"id":"e2088130-e349-11ee-9823-49d05dd2659c","name":"panel_7","type":"visualization"},{"id":"134ba140-e34b-11ee-9823-49d05dd2659c","name":"panel_8","type":"visualization"},{"id":"dc616700-e34a-11ee-9823-49d05dd2659c","name":"panel_9","type":"visualization"},{"id":"93148140-e2fa-11ee-9823-49d05dd2659c","name":"panel_10","type":"visualization"},{"id":"62e6cf90-e34b-11ee-9823-49d05dd2659c","name":"panel_11","type":"visualization"}],"type":"dashboard","updated_at":"2024-03-17T02:46:09.542Z","version":"WzM1Nyw4XQ=="}
-{"exportedCount":16,"missingRefCount":0,"missingReferences":[]}
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/assets/otel_ingestion_rate_dashboard-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/otel-services/assets/otel_ingestion_rate_dashboard-1.0.0.ndjson
deleted file mode 100644
index 309cb384e8..0000000000
--- a/server/adaptors/integrations/__data__/repository/otel-services/assets/otel_ingestion_rate_dashboard-1.0.0.ndjson
+++ /dev/null
@@ -1,11 +0,0 @@
-{"attributes":{"fields":"[{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"droppedEventsCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"droppedLinksCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"durationInNanos\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"endTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"events.attributes.app@payment@transaction@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@payment@transaction@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@payment@transaction@id\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@quote@cost@total\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@cost@total\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@cost@total.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@shipping@cost@total\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@tracking@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@tracking@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@shipping@tracking@id\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@message.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@message\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@stacktrace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@stacktrace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@stacktrace\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@type\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.message@type\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.name\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.time\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"instrumentationScope.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.name\"}}},{\"count\":0,\"name\":\"instrumentationScope.version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.version\"}}},{\"count\":0,\"name\":\"kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"links.droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.spanId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.spanId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.spanId\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.traceId\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.traceState\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"parentSpanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.container@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.host@arch\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.host@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command_args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@executable@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@executable@path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@pid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@instance@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@auto@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@language\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@ad_request_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@ad_response_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@contextKeys\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@contextKeys@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@cart@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@currency@conversion@from\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@currency@conversion@to\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@email@recipient\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@featureflag@enabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@featureflag@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@filtered_products@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@filtered_products@list\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@card_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@card_valid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@charged\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@quantity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@products@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@products_recommended@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@quote@cost@total\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@quote@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@recommendation@cache_enabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@cost@total\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@tracking@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@zip_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@synthetic_request\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@user@currency\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@user@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.busy_ns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@filepath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@function\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@lineno\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@instance\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@redis@database_index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@redis@flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@statement\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.decode_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.grpc@error_message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.grpc@error_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@client_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@flavor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@request_content_length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@request_content_length_uncompressed\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@response_content_length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@route\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@scheme\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@status_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@status_text\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@target\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.idle_ns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.idle_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@client_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@destination@kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@destination@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@consumer@group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@destination@partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@message@offset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@message@payload_size_bytes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@host@addr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@peer@addr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@peer@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@transport\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.peer@service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.phoenix@action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.phoenix@plug\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.query_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.queue_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@grpc@status_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.sinatra@template_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.thread@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.thread@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.total_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"spanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"startTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status.code\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.durationInNanos\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.endTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.statusCode\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"traceState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"traceState\"}}}]","timeFieldName":"startTime","title":"otel-v1-apm-span*"},"id":"f67e4370-d84f-11ee-8f84-1b81ddb8574c","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2024-03-02T04:47:24.451Z","version":"WzEsMV0="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"spans-per-minute","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"spans-per-minute\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"spans\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"startTime\",\"timeRange\":{\"from\":\"now-15m\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"m\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Spans Per Min\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":true,\"valueAxis\":\"ValueAxis-1\"},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"spans\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"spans\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"3d54d700-d869-11ee-8f84-1b81ddb8574c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"f67e4370-d84f-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-02T07:52:02.707Z","version":"WzEwLDFd"}
-{"attributes":{"fields":"[{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aggregationTemporality\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aggregationTemporality.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aggregationTemporality\"}}},{\"count\":0,\"name\":\"attributes.instrumentationScope.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.instrumentationScope.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.instrumentationScope.name\"}}},{\"count\":0,\"name\":\"attributes.instrumentationScope.version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.instrumentationScope.version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.instrumentationScope.version\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_request_type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_request_type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.app@ads@ad_request_type\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_response_type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_response_type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.app@ads@ad_response_type\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.app@payment@currency\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.app@payment@currency.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.app@payment@currency\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.client-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.client-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.client-id\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.count\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.count.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.count\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.cpu\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.currency_code\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.currency_code.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.currency_code\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.daemon\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.device\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.device.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.device\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.direction\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.direction.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.direction\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.dropped\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.family\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.generation\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.generation.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.generation\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@flavor\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@flavor.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@flavor\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@host\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@host.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@host\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@method\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@method.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@method\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@route\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@route.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@route\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@scheme\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@scheme.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@scheme\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@status_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.method\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.method.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.method\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.net@host@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.net@host@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.net@host@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.net@host@port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.net@peer@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.net@peer@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.net@peer@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.net@peer@port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.node-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.node-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.node-id\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.operation\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.operation.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.operation\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.partition\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.partition.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.partition\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.pool\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.pool.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.pool\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.processor\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.processor.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.processor\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.processorType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.processorType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.processorType\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.protocol\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.protocol.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.protocol\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.recommendation@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.recommendation@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.recommendation@type\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@grpc@status_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@method\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@method.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.rpc@method\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@service\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@service.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.rpc@service\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@system\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@system.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.rpc@system\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.service@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.service@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.span@kind\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.span@kind.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.span@kind\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.span@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.span@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.span@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.state\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.status\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.status@code\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.status@code.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.status@code\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.success\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.target\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.target.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.target\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.topic\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.topic.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.topic\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.type\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.container@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.container@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.container@id\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.host@arch\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.host@arch.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.host@arch\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.host@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.host@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.host@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@description\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@type\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@command\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_args\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_args.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@command_args\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_line\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_line.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@command_line\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@executable@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@path\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@path.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@executable@path\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@owner\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@owner.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@owner\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@runtime@description\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@runtime@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@runtime@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@instance@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@instance@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@instance@id\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@namespace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@namespace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@namespace\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@auto@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@auto@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@auto@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@language\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@language.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@sdk@language\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@sdk@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@sdk@version\"}}},{\"count\":0,\"name\":\"bucketCounts\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"bucketCountsList\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"buckets.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"buckets.max\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"buckets.min\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"description\"}}},{\"count\":0,\"name\":\"exemplars.attributes.exemplar.attributes.net@sock@peer@addr\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"exemplars.attributes.exemplar.attributes.net@sock@peer@addr.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"exemplars.attributes.exemplar.attributes.net@sock@peer@addr\"}}},{\"count\":0,\"name\":\"exemplars.spanId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"exemplars.spanId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"exemplars.spanId\"}}},{\"count\":0,\"name\":\"exemplars.time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"exemplars.traceId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"exemplars.traceId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"exemplars.traceId\"}}},{\"count\":0,\"name\":\"exemplars.value\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"explicitBounds\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"explicitBoundsCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"flags\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"isMonotonic\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kind\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kind.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kind\"}}},{\"count\":0,\"name\":\"name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"name\"}}},{\"count\":0,\"name\":\"schemaUrl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"schemaUrl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"schemaUrl\"}}},{\"count\":0,\"name\":\"serviceName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"serviceName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"serviceName\"}}},{\"count\":0,\"name\":\"startTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sum\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"unit\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"unit.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"unit\"}}},{\"count\":0,\"name\":\"value\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"time","title":"otel-metrics-*"},"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2024-03-02T04:47:59.251Z","version":"WzIsMV0="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"metrics-per-minute","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"metrics-per-minute\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"signals\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"time\",\"timeRange\":{\"from\":\"now-15h\",\"to\":\"2024-03-03T05:53:39.109Z\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"m\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Metric Per Minute\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":true,\"valueAxis\":\"ValueAxis-1\"},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"signals\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"area\",\"mode\":\"normal\",\"data\":{\"label\":\"signals\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"157164f0-d86a-11ee-8f84-1b81ddb8574c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b3bb630-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-03T06:12:58.579Z","version":"WzI3LDFd"}
-{"attributes":{"fields":"[{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"body\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"body.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"body\"}}},{\"count\":0,\"name\":\"droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"flags\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"instrumentationScope.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.name\"}}},{\"count\":0,\"name\":\"log.attributes.context\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.context.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.context\"}}},{\"count\":0,\"name\":\"log.attributes.otelServiceName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.otelServiceName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.otelServiceName\"}}},{\"count\":0,\"name\":\"log.attributes.otelSpanID\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.otelSpanID.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.otelSpanID\"}}},{\"count\":0,\"name\":\"log.attributes.otelTraceID\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.otelTraceID.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.otelTraceID\"}}},{\"count\":0,\"name\":\"log.attributes.otelTraceSampled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.attributes.productId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.productId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.productId\"}}},{\"count\":0,\"name\":\"log.attributes.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.attributes.userId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.userId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.userId\"}}},{\"count\":0,\"name\":\"observedTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.container@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.container@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.container@id\"}}},{\"count\":0,\"name\":\"resource.attributes.host@arch\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.host@arch.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.host@arch\"}}},{\"count\":0,\"name\":\"resource.attributes.host@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.host@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.host@name\"}}},{\"count\":0,\"name\":\"resource.attributes.os@description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.os@description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.os@description\"}}},{\"count\":0,\"name\":\"resource.attributes.os@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.os@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.os@name\"}}},{\"count\":0,\"name\":\"resource.attributes.os@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.os@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.os@type\"}}},{\"count\":0,\"name\":\"resource.attributes.os@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.os@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.os@version\"}}},{\"count\":0,\"name\":\"resource.attributes.process@command\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@command.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@command\"}}},{\"count\":0,\"name\":\"resource.attributes.process@command_args\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@command_args.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@command_args\"}}},{\"count\":0,\"name\":\"resource.attributes.process@command_line\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@command_line.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@command_line\"}}},{\"count\":0,\"name\":\"resource.attributes.process@executable@path\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@executable@path.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@executable@path\"}}},{\"count\":0,\"name\":\"resource.attributes.process@owner\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@owner.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@owner\"}}},{\"count\":0,\"name\":\"resource.attributes.process@pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@runtime@description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@runtime@description\"}}},{\"count\":0,\"name\":\"resource.attributes.process@runtime@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@runtime@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@runtime@name\"}}},{\"count\":0,\"name\":\"resource.attributes.process@runtime@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@runtime@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@runtime@version\"}}},{\"count\":0,\"name\":\"resource.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.service@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.service@name\"}}},{\"count\":0,\"name\":\"resource.attributes.service@namespace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.service@namespace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.service@namespace\"}}},{\"count\":0,\"name\":\"resource.attributes.service@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.service@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.service@version\"}}},{\"count\":0,\"name\":\"resource.attributes.telemetry@auto@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.telemetry@auto@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.telemetry@auto@version\"}}},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@language\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@language.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.telemetry@sdk@language\"}}},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.telemetry@sdk@name\"}}},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.telemetry@sdk@version\"}}},{\"count\":0,\"name\":\"schemaUrl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"schemaUrl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"schemaUrl\"}}},{\"count\":0,\"name\":\"serviceName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"serviceName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"serviceName\"}}},{\"count\":0,\"name\":\"severityNumber\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severityText\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"severityText.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"severityText\"}}},{\"count\":0,\"name\":\"spanId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"spanId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"spanId\"}}},{\"count\":0,\"name\":\"time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"traceId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"traceId\"}}}]","timeFieldName":"time","title":"otel-events-*"},"id":"2079caa0-d850-11ee-8f84-1b81ddb8574c","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2024-03-02T04:48:34.890Z","version":"WzMsMV0="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"events-per-minute","uiStateJSON":"{\"vis\":{\"colors\":{\"event\":\"#9170b8\"}}}","version":1,"visState":"{\"title\":\"events-per-minute\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"event\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"time\",\"timeRange\":{\"from\":\"now-300s\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"m\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Event Per Minute\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":true,\"valueAxis\":\"ValueAxis-1\"},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"event\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"event\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":true,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"751992c0-d869-11ee-8f84-1b81ddb8574c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"2079caa0-d850-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-02T08:36:47.949Z","version":"WzEzLDFd"}
-{"attributes":{"fields":"[{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aggregationTemporality\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aggregationTemporality.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aggregationTemporality\"}}},{\"count\":0,\"name\":\"attributes.instrumentationScope.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.instrumentationScope.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.instrumentationScope.name\"}}},{\"count\":0,\"name\":\"attributes.instrumentationScope.version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.instrumentationScope.version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.instrumentationScope.version\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_request_type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_request_type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.app@ads@ad_request_type\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_response_type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.app@ads@ad_response_type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.app@ads@ad_response_type\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.app@payment@currency\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.app@payment@currency.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.app@payment@currency\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.client-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.client-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.client-id\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.count\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.count.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.count\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.cpu\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.currency_code\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.currency_code.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.currency_code\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.daemon\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.device\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.device.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.device\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.direction\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.direction.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.direction\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.dropped\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.family\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.generation\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.generation.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.generation\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@flavor\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@flavor.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@flavor\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@host\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@host.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@host\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@method\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@method.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@method\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@route\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@route.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@route\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@scheme\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.http@scheme.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.http@scheme\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.http@status_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.method\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.method.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.method\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.net@host@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.net@host@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.net@host@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.net@host@port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.net@peer@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.net@peer@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.net@peer@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.net@peer@port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.node-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.node-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.node-id\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.operation\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.operation.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.operation\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.partition\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.partition.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.partition\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.pool\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.pool.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.pool\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.processor\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.processor.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.processor\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.processorType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.processorType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.processorType\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.protocol\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.protocol.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.protocol\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.recommendation@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.recommendation@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.recommendation@type\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@grpc@status_code\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@method\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@method.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.rpc@method\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@service\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@service.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.rpc@service\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@system\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.rpc@system.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.rpc@system\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.service@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.service@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.span@kind\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.span@kind.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.span@kind\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.span@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.span@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.span@name\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.state\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.status\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.status@code\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.status@code.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.status@code\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.success\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.metric.attributes.target\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.target.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.target\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.topic\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.topic.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.topic\"}}},{\"count\":0,\"name\":\"attributes.metric.attributes.type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.metric.attributes.type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.metric.attributes.type\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.container@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.container@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.container@id\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.host@arch\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.host@arch.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.host@arch\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.host@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.host@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.host@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@description\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@type\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.os@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.os@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.os@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@command\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_args\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_args.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@command_args\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_line\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@command_line.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@command_line\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@executable@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@path\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@executable@path.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@executable@path\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@owner\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@owner.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@owner\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@pid\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@runtime@description\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@runtime@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.process@runtime@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.process@runtime@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@instance@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@instance@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@instance@id\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@namespace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@namespace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@namespace\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.service@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.service@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.service@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@auto@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@auto@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@auto@version\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@language\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@language.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@sdk@language\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@sdk@name\"}}},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.resource.attributes.telemetry@sdk@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.resource.attributes.telemetry@sdk@version\"}}},{\"count\":0,\"name\":\"body\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"body.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"body\"}}},{\"count\":0,\"name\":\"bucketCounts\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"bucketCountsList\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"buckets.count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"buckets.max\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"buckets.min\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"count\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"description\"}}},{\"count\":0,\"name\":\"destination.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.resource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"droppedEventsCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"droppedLinksCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"durationInNanos\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"endTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"events.attributes.app@payment@transaction@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@payment@transaction@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@payment@transaction@id\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@quote@cost@total\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@cost@total\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@cost@total.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@shipping@cost@total\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@tracking@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@tracking@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@shipping@tracking@id\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@message.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@message\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@stacktrace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@stacktrace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@stacktrace\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@type\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.message@type\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.name\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.time\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"exemplars.attributes.exemplar.attributes.net@sock@peer@addr\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"exemplars.attributes.exemplar.attributes.net@sock@peer@addr.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"exemplars.attributes.exemplar.attributes.net@sock@peer@addr\"}}},{\"count\":0,\"name\":\"exemplars.spanId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"exemplars.spanId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"exemplars.spanId\"}}},{\"count\":0,\"name\":\"exemplars.time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"exemplars.traceId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"exemplars.traceId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"exemplars.traceId\"}}},{\"count\":0,\"name\":\"exemplars.value\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"explicitBounds\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"explicitBoundsCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"flags\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"hashId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"instrumentationScope.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.name\"}}},{\"count\":0,\"name\":\"instrumentationScope.version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.version\"}}},{\"count\":0,\"name\":\"isMonotonic\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kind\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kind.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kind\"}}},{\"count\":0,\"name\":\"links.droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.spanId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.spanId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.spanId\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.traceId\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.traceState\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"log.attributes.context\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.context.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.context\"}}},{\"count\":0,\"name\":\"log.attributes.heartbeatDuration\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.heartbeatDuration.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.heartbeatDuration\"}}},{\"count\":0,\"name\":\"log.attributes.interval\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.interval.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.interval\"}}},{\"count\":0,\"name\":\"log.attributes.now\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.now.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.now\"}}},{\"count\":0,\"name\":\"log.attributes.otelServiceName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.otelServiceName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.otelServiceName\"}}},{\"count\":0,\"name\":\"log.attributes.otelSpanID\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.otelSpanID.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.otelSpanID\"}}},{\"count\":0,\"name\":\"log.attributes.otelTraceID\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.otelTraceID.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.otelTraceID\"}}},{\"count\":0,\"name\":\"log.attributes.otelTraceSampled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.attributes.productId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.productId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.productId\"}}},{\"count\":0,\"name\":\"log.attributes.quantity\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"log.attributes.userId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"log.attributes.userId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"log.attributes.userId\"}}},{\"count\":0,\"name\":\"name\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"name\"}}},{\"count\":0,\"name\":\"observedTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"parentSpanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.container@id\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.container@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.container@id\"}}},{\"count\":0,\"name\":\"resource.attributes.host@arch\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.host@arch.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.host@arch\"}}},{\"count\":0,\"name\":\"resource.attributes.host@name\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.host@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.host@name\"}}},{\"count\":0,\"name\":\"resource.attributes.os@description\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.os@description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.os@description\"}}},{\"count\":0,\"name\":\"resource.attributes.os@name\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.os@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.os@name\"}}},{\"count\":0,\"name\":\"resource.attributes.os@type\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.os@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.os@type\"}}},{\"count\":0,\"name\":\"resource.attributes.os@version\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.os@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.os@version\"}}},{\"count\":0,\"name\":\"resource.attributes.process@command\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@command.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@command\"}}},{\"count\":0,\"name\":\"resource.attributes.process@command_args\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@command_args.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@command_args\"}}},{\"count\":0,\"name\":\"resource.attributes.process@command_line\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@command_line.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@command_line\"}}},{\"count\":0,\"name\":\"resource.attributes.process@executable@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@executable@path\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@executable@path.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@executable@path\"}}},{\"count\":0,\"name\":\"resource.attributes.process@owner\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@owner.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@owner\"}}},{\"count\":0,\"conflictDescriptions\":{\"keyword\":[\"otel-v1-apm-span-000001\"],\"long\":[\"otel-events-2024.03.02\"]},\"name\":\"resource.attributes.process@pid\",\"type\":\"conflict\",\"esTypes\":[\"keyword\",\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@runtime@description\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@runtime@description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@runtime@description\"}}},{\"count\":0,\"name\":\"resource.attributes.process@runtime@name\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@runtime@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@runtime@name\"}}},{\"count\":0,\"name\":\"resource.attributes.process@runtime@version\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.process@runtime@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.process@runtime@version\"}}},{\"count\":0,\"name\":\"resource.attributes.service@instance@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.service@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.service@name\"}}},{\"count\":0,\"name\":\"resource.attributes.service@namespace\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.service@namespace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.service@namespace\"}}},{\"count\":0,\"name\":\"resource.attributes.service@version\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.service@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.service@version\"}}},{\"count\":0,\"name\":\"resource.attributes.telemetry@auto@version\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.telemetry@auto@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.telemetry@auto@version\"}}},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@language\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@language.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.telemetry@sdk@language\"}}},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@name\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.telemetry@sdk@name\"}}},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@version\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resource.attributes.telemetry@sdk@version\"}}},{\"count\":0,\"name\":\"schemaUrl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"schemaUrl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"schemaUrl\"}}},{\"count\":0,\"name\":\"serviceName\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"serviceName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"serviceName\"}}},{\"count\":0,\"name\":\"severityNumber\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severityText\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"severityText.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"severityText\"}}},{\"count\":0,\"name\":\"span.attributes.app@ads@ad_request_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@ad_response_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@contextKeys\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@contextKeys@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@cart@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@currency@conversion@from\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@currency@conversion@to\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@email@recipient\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@featureflag@enabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@featureflag@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@filtered_products@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@filtered_products@list\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@card_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@card_valid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@charged\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@quantity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@products@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@products_recommended@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@quote@cost@total\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@quote@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@recommendation@cache_enabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@cost@total\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@tracking@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@zip_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@synthetic_request\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@user@currency\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@user@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.busy_ns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@filepath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@function\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@lineno\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@instance\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@redis@database_index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@redis@flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@statement\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.decode_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.grpc@error_message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.grpc@error_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@client_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@flavor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@request_content_length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@request_content_length_uncompressed\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@response_content_length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@route\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@scheme\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@status_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@status_text\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@target\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.idle_ns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.idle_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.jinja2@template_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.jinja2@template_path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@client_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@destination@kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@destination@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@consumer@group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@destination@partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@message@offset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@message@payload_size_bytes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@host@addr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@peer@addr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@peer@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@transport\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.peer@service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.phoenix@action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.phoenix@plug\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.query_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.queue_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@grpc@status_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.sinatra@template_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.thread@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.thread@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.total_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"spanId\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"spanId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"spanId\"}}},{\"count\":0,\"name\":\"startTime\",\"type\":\"date\",\"esTypes\":[\"date\",\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status.code\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"sum\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target.resource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.durationInNanos\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.endTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.statusCode\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceId\",\"type\":\"string\",\"esTypes\":[\"text\",\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"traceId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"traceId\"}}},{\"count\":0,\"name\":\"traceState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"traceState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"traceState\"}}},{\"count\":0,\"name\":\"unit\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"unit.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"unit\"}}},{\"count\":0,\"name\":\"value\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"startTime","title":"otel-*"},"id":"408ac980-d8bd-11ee-8f84-1b81ddb8574c","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2024-03-02T17:49:43.829Z","version":"WzE3LDFd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"services-ingestion-amount-table","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"services-ingestion-amount-table\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"amount\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"serviceName.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"services\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"ae5ccd00-d8bd-11ee-8f84-1b81ddb8574c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"408ac980-d8bd-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-03-02T17:52:48.080Z","version":"WzE4LDFd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"spans-count-per-minute-zoomable-chart","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"spans-count-per-minute-zoomable-chart\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"background\\\": \\\"white\\\",\\n \\\"padding\\\": 5,\\n \\\"title\\\": {\\\"text\\\": \\\"Signals\\\", \\\"anchor\\\": \\\"start\\\"},\\n \\\"data\\\": [\\n {\\\"name\\\": \\\"brush_store\\\"},\\n {\\n \\\"name\\\": \\\"raw-event\\\",\\n \\\"url\\\": {\\n \\\"%context%\\\": true,\\n \\\"%timefield%\\\": \\\"time\\\",\\n \\\"index\\\": \\\"otel-events-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\": 0,\\n \\\"aggs\\\": {\\n \\\"time_buckets\\\": {\\n \\\"date_histogram\\\": {\\n \\\"field\\\": \\\"time\\\",\\n \\\"interval\\\": {\\\"%autointerval%\\\": true},\\n \\\"extended_bounds\\\": {\\n \\\"min\\\": {\\\"%timefilter%\\\": \\\"min\\\"},\\n \\\"max\\\": {\\\"%timefilter%\\\": \\\"max\\\"}\\n },\\n \\\"min_doc_count\\\": 1\\n }\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"aggregations.time_buckets.buckets\\\",\\n \\\"type\\\": \\\"json\\\",\\n \\\"parse\\\": {\\\"key_as_string\\\": \\\"date\\\"}\\n }\\n }, \\n {\\n \\\"name\\\": \\\"raw-span\\\",\\n \\\"url\\\": {\\n \\\"%context%\\\": true,\\n \\\"%timefield%\\\": \\\"startTime\\\",\\n \\\"index\\\": \\\"otel-v1-apm-span-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\": 0,\\n \\\"aggs\\\": {\\n \\\"time_buckets\\\": {\\n \\\"date_histogram\\\": {\\n \\\"field\\\": \\\"startTime\\\",\\n \\\"interval\\\": {\\\"%autointerval%\\\": true},\\n \\\"extended_bounds\\\": {\\n \\\"min\\\": {\\\"%timefilter%\\\": \\\"min\\\"},\\n \\\"max\\\": {\\\"%timefilter%\\\": \\\"max\\\"}\\n },\\n \\\"min_doc_count\\\": 1\\n }\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"aggregations.time_buckets.buckets\\\",\\n \\\"type\\\": \\\"json\\\",\\n \\\"parse\\\": {\\\"key_as_string\\\": \\\"date\\\"}\\n }\\n },\\n {\\n \\\"name\\\": \\\"raw-metric\\\",\\n \\\"url\\\": {\\n \\\"%context%\\\": true,\\n \\\"%timefield%\\\": \\\"time\\\",\\n \\\"index\\\": \\\"otel-metrics-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\": 0,\\n \\\"aggs\\\": {\\n \\\"time_buckets\\\": {\\n \\\"date_histogram\\\": {\\n \\\"field\\\": \\\"time\\\",\\n \\\"interval\\\": {\\\"%autointerval%\\\": true},\\n \\\"extended_bounds\\\": {\\n \\\"min\\\": {\\\"%timefilter%\\\": \\\"min\\\"},\\n \\\"max\\\": {\\\"%timefilter%\\\": \\\"max\\\"}\\n },\\n \\\"min_doc_count\\\": 1\\n }\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"aggregations.time_buckets.buckets\\\",\\n \\\"type\\\": \\\"json\\\",\\n \\\"parse\\\": {\\\"key_as_string\\\": \\\"date\\\"}\\n }\\n },\\n {\\n \\\"name\\\": \\\"data_metric_0\\\",\\n \\\"source\\\": \\\"raw-metric\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"impute\\\",\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"groupby\\\": [],\\n \\\"key\\\": \\\"key_as_string\\\",\\n \\\"method\\\": \\\"value\\\",\\n \\\"value\\\": 0\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"key_as_string\\\"],\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"doc_count_start\\\", \\\"doc_count_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_metric_1\\\",\\n \\\"source\\\": \\\"raw-metric\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"impute\\\",\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"groupby\\\": [],\\n \\\"key\\\": \\\"key_as_string\\\",\\n \\\"method\\\": \\\"value\\\",\\n \\\"value\\\": 0\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"key_as_string\\\"],\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"doc_count_start\\\", \\\"doc_count_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_span_0\\\",\\n \\\"source\\\": \\\"raw-span\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"impute\\\",\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"groupby\\\": [],\\n \\\"key\\\": \\\"key_as_string\\\",\\n \\\"method\\\": \\\"value\\\",\\n \\\"value\\\": 0\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"key_as_string\\\"],\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"doc_count_start\\\", \\\"doc_count_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_span_1\\\",\\n \\\"source\\\": \\\"raw-span\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"impute\\\",\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"groupby\\\": [],\\n \\\"key\\\": \\\"key_as_string\\\",\\n \\\"method\\\": \\\"value\\\",\\n \\\"value\\\": 0\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"key_as_string\\\"],\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"doc_count_start\\\", \\\"doc_count_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"data_event_0\\\",\\n \\\"source\\\": \\\"raw-event\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"impute\\\",\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"groupby\\\": [],\\n \\\"key\\\": \\\"key_as_string\\\",\\n \\\"method\\\": \\\"value\\\",\\n \\\"value\\\": 0\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"key_as_string\\\"],\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"doc_count_start\\\", \\\"doc_count_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n }\\n ]\\n }\\n,\\n {\\n \\\"name\\\": \\\"data_event_1\\\",\\n \\\"source\\\": \\\"raw-event\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"impute\\\",\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"groupby\\\": [],\\n \\\"key\\\": \\\"key_as_string\\\",\\n \\\"method\\\": \\\"value\\\",\\n \\\"value\\\": 0\\n },\\n {\\n \\\"type\\\": \\\"stack\\\",\\n \\\"groupby\\\": [\\\"key_as_string\\\"],\\n \\\"field\\\": \\\"doc_count\\\",\\n \\\"sort\\\": {\\\"field\\\": [], \\\"order\\\": []},\\n \\\"as\\\": [\\\"doc_count_start\\\", \\\"doc_count_end\\\"],\\n \\\"offset\\\": \\\"zero\\\"\\n }\\n ]\\n } \\n ], \\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"concat_0_height\\\", \\\"value\\\": 250},\\n {\\\"name\\\": \\\"concat_1_height\\\", \\\"value\\\": 80},\\n {\\n \\\"name\\\": \\\"unit\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"pointermove\\\", \\\"update\\\": \\\"isTuple(group()) ? group() : unit\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"brush\\\",\\n \\\"update\\\": \\\"vlSelectionResolve(\\\\\\\"brush_store\\\\\\\", \\\\\\\"union\\\\\\\")\\\"\\n }\\n ],\\n \\\"layout\\\": {\\\"padding\\\": 20, \\\"columns\\\": 1, \\\"bounds\\\": \\\"full\\\", \\\"align\\\": \\\"each\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_0_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_0_height\\\"}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"concat_0_span_marks\\\",\\n \\\"type\\\": \\\"area\\\",\\n \\\"clip\\\": true,\\n \\\"style\\\": [\\\"area\\\"],\\n \\\"sort\\\": {\\\"field\\\": \\\"datum[\\\\\\\"key_as_string\\\\\\\"]\\\"},\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_span_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"orient\\\": {\\\"value\\\": \\\"vertical\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.5},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'signal': 'spans','Date': timeFormat(datum['key_as_string'], '%b %d, %Y'), 'Doc Count': datum['doc_count']}\\\"\\n}\\n \\\"fill\\\": {\\\"value\\\": \\\"#4c78a8\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"key_as_string: \\\\\\\" + (timeFormat(datum[\\\\\\\"key_as_string\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; doc_count: \\\\\\\" + (format(datum[\\\\\\\"doc_count\\\\\\\"], \\\\\\\"\\\\\\\"))\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_0_x\\\", \\\"field\\\": \\\"key_as_string\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_0_y\\\", \\\"field\\\": \\\"doc_count_end\\\"},\\n \\\"y2\\\": {\\\"scale\\\": \\\"concat_0_y\\\", \\\"field\\\": \\\"doc_count_start\\\"},\\n \\\"defined\\\": {\\n \\\"signal\\\": \\\"isValid(datum[\\\\\\\"key_as_string\\\\\\\"]) && isFinite(+datum[\\\\\\\"key_as_string\\\\\\\"]) && isValid(datum[\\\\\\\"doc_count\\\\\\\"]) && isFinite(+datum[\\\\\\\"doc_count\\\\\\\"])\\\"\\n }\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"concat_0_event_marks\\\",\\n \\\"type\\\": \\\"area\\\",\\n \\\"clip\\\": true,\\n \\\"style\\\": [\\\"area\\\"],\\n \\\"sort\\\": {\\\"field\\\": \\\"datum[\\\\\\\"key_as_string\\\\\\\"]\\\"},\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_event_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"orient\\\": {\\\"value\\\": \\\"vertical\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.5},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'signal': 'logs-events', 'Date': timeFormat(datum['key_as_string'], '%b %d, %Y'), 'Doc Count': datum['doc_count']}\\\"\\n}\\n \\\"fill\\\": {\\\"value\\\": \\\"green\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"key_as_string: \\\\\\\" + (timeFormat(datum[\\\\\\\"key_as_string\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; doc_count: \\\\\\\" + (format(datum[\\\\\\\"doc_count\\\\\\\"], \\\\\\\"\\\\\\\"))\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_0_x\\\", \\\"field\\\": \\\"key_as_string\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_0_y\\\", \\\"field\\\": \\\"doc_count_end\\\"},\\n \\\"y2\\\": {\\\"scale\\\": \\\"concat_0_y\\\", \\\"field\\\": \\\"doc_count_start\\\"},\\n \\\"defined\\\": {\\n \\\"signal\\\": \\\"isValid(datum[\\\\\\\"key_as_string\\\\\\\"]) && isFinite(+datum[\\\\\\\"key_as_string\\\\\\\"]) && isValid(datum[\\\\\\\"doc_count\\\\\\\"]) && isFinite(+datum[\\\\\\\"doc_count\\\\\\\"])\\\"\\n }\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"concat_0_metric_marks\\\",\\n \\\"type\\\": \\\"area\\\",\\n \\\"clip\\\": true,\\n \\\"style\\\": [\\\"area\\\"],\\n \\\"sort\\\": {\\\"field\\\": \\\"datum[\\\\\\\"key_as_string\\\\\\\"]\\\"},\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_metric_0\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"orient\\\": {\\\"value\\\": \\\"vertical\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.5},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'signal': 'metrics','Date': timeFormat(datum['key_as_string'], '%b %d, %Y'), 'Doc Count': datum['doc_count']}\\\"\\n}\\n \\\"fill\\\": {\\\"value\\\": \\\"purple\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"key_as_string: \\\\\\\" + (timeFormat(datum[\\\\\\\"key_as_string\\\\\\\"], '%b %d, %Y')) + \\\\\\\"; doc_count: \\\\\\\" + (format(datum[\\\\\\\"doc_count\\\\\\\"], \\\\\\\"\\\\\\\"))\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_0_x\\\", \\\"field\\\": \\\"key_as_string\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_0_y\\\", \\\"field\\\": \\\"doc_count_end\\\"},\\n \\\"y2\\\": {\\\"scale\\\": \\\"concat_0_y\\\", \\\"field\\\": \\\"doc_count_start\\\"},\\n \\\"defined\\\": {\\n \\\"signal\\\": \\\"isValid(datum[\\\\\\\"key_as_string\\\\\\\"]) && isFinite(+datum[\\\\\\\"key_as_string\\\\\\\"]) && isValid(datum[\\\\\\\"doc_count\\\\\\\"]) && isFinite(+datum[\\\\\\\"doc_count\\\\\\\"])\\\"\\n }\\n }\\n }\\n } ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_0_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_0_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_0_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"gridScale\\\": \\\"concat_0_x\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(concat_0_height/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_0_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_0_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(concat_0_height/40)\\\"},\\n \\\"zindex\\\": 0\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"concat_1_group\\\",\\n \\\"style\\\": \\\"cell\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"height\\\": {\\\"signal\\\": \\\"concat_1_height\\\"}\\n }\\n },\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"brush_x\\\",\\n \\\"value\\\": [],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"brush_brush\\\\\\\"\\\"\\n ]\\n },\\n \\\"update\\\": \\\"[x(unit), x(unit)]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"filter\\\": [\\n \\\"!event.item || event.item.mark.name !== \\\\\\\"brush_brush\\\\\\\"\\\"\\n ]\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n },\\n \\\"update\\\": \\\"[brush_x[0], clamp(x(unit), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"brush_scale_trigger\\\"},\\n \\\"update\\\": \\\"[scale(\\\\\\\"concat_1_x\\\\\\\", brush_key_as_string[0]), scale(\\\\\\\"concat_1_x\\\\\\\", brush_key_as_string[1])]\\\"\\n },\\n {\\n \\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}],\\n \\\"update\\\": \\\"[0, 0]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"brush_translate_delta\\\"},\\n \\\"update\\\": \\\"clampRange(panLinear(brush_translate_anchor.extent_x, brush_translate_delta.x / span(brush_translate_anchor.extent_x)), 0, width)\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"brush_zoom_delta\\\"},\\n \\\"update\\\": \\\"clampRange(zoomLinear(brush_x, brush_zoom_anchor.x, brush_zoom_delta), 0, width)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"brush_key_as_string\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"brush_x\\\"},\\n \\\"update\\\": \\\"brush_x[0] === brush_x[1] ? null : invert(\\\\\\\"concat_1_x\\\\\\\", brush_x)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"brush_scale_trigger\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"scale\\\": \\\"concat_1_x\\\"}],\\n \\\"update\\\": \\\"(!isArray(brush_key_as_string) || (+invert(\\\\\\\"concat_1_x\\\\\\\", brush_x)[0] === +brush_key_as_string[0] && +invert(\\\\\\\"concat_1_x\\\\\\\", brush_x)[1] === +brush_key_as_string[1])) ? brush_scale_trigger : {}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"brush_tuple\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [{\\\"signal\\\": \\\"brush_key_as_string\\\"}],\\n \\\"update\\\": \\\"brush_key_as_string ? {unit: \\\\\\\"concat_1\\\\\\\", fields: brush_tuple_fields, values: [brush_key_as_string]} : null\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"brush_tuple_fields\\\",\\n \\\"value\\\": [{\\\"field\\\": \\\"key_as_string\\\", \\\"channel\\\": \\\"x\\\", \\\"type\\\": \\\"R\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"brush_translate_anchor\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"brush_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit), extent_x: slice(brush_x)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"brush_translate_delta\\\",\\n \\\"value\\\": {},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"pointermove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"pointerdown\\\",\\n \\\"markname\\\": \\\"brush_brush\\\"\\n },\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"pointerup\\\"}\\n ]\\n }\\n ],\\n \\\"update\\\": \\\"{x: brush_translate_anchor.x - x(unit), y: brush_translate_anchor.y - y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"brush_zoom_anchor\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"brush_brush\\\"\\n }\\n ],\\n \\\"update\\\": \\\"{x: x(unit), y: y(unit)}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"brush_zoom_delta\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"scope\\\",\\n \\\"type\\\": \\\"wheel\\\",\\n \\\"consume\\\": true,\\n \\\"markname\\\": \\\"brush_brush\\\"\\n }\\n ],\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"brush_modify\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"brush_tuple\\\"},\\n \\\"update\\\": \\\"modify(\\\\\\\"brush_store\\\\\\\", brush_tuple, true)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"brush_brush_bg\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.125}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"brush_store\\\\\\\").length && data(\\\\\\\"brush_store\\\\\\\")[0].unit === \\\\\\\"concat_1\\\\\\\"\\\",\\n \\\"signal\\\": \\\"brush_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"brush_store\\\\\\\").length && data(\\\\\\\"brush_store\\\\\\\")[0].unit === \\\\\\\"concat_1\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"brush_store\\\\\\\").length && data(\\\\\\\"brush_store\\\\\\\")[0].unit === \\\\\\\"concat_1\\\\\\\"\\\",\\n \\\"signal\\\": \\\"brush_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"brush_store\\\\\\\").length && data(\\\\\\\"brush_store\\\\\\\")[0].unit === \\\\\\\"concat_1\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ]\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"concat_1_marks\\\",\\n \\\"type\\\": \\\"area\\\",\\n \\\"style\\\": [\\\"area\\\"],\\n \\\"sort\\\": {\\\"field\\\": \\\"datum[\\\\\\\"key_as_string\\\\\\\"]\\\"},\\n \\\"interactive\\\": true,\\n \\\"from\\\": {\\\"data\\\": \\\"data_span_1\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"orient\\\": {\\\"value\\\": \\\"vertical\\\"},\\n \\\"fill\\\": {\\\"value\\\": \\\"#4c78a8\\\"},\\n \\\"description\\\": {\\n \\\"signal\\\": \\\"\\\\\\\"key_as_string: \\\\\\\" + (timeFormat(datum[\\\\\\\"key_as_string\\\\\\\"], '%Y')) + \\\\\\\"; doc_count: \\\\\\\" + (format(datum[\\\\\\\"doc_count\\\\\\\"], \\\\\\\"\\\\\\\"))\\\"\\n },\\n \\\"x\\\": {\\\"scale\\\": \\\"concat_1_x\\\", \\\"field\\\": \\\"key_as_string\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"doc_count_end\\\"},\\n \\\"y2\\\": {\\\"scale\\\": \\\"concat_1_y\\\", \\\"field\\\": \\\"doc_count_start\\\"},\\n \\\"defined\\\": {\\n \\\"signal\\\": \\\"isValid(datum[\\\\\\\"key_as_string\\\\\\\"]) && isFinite(+datum[\\\\\\\"key_as_string\\\\\\\"]) && isValid(datum[\\\\\\\"doc_count\\\\\\\"]) && isFinite(+datum[\\\\\\\"doc_count\\\\\\\"])\\\"\\n }\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"brush_brush\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"clip\\\": true,\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\\"fill\\\": {\\\"value\\\": \\\"transparent\\\"}},\\n \\\"update\\\": {\\n \\\"x\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"brush_store\\\\\\\").length && data(\\\\\\\"brush_store\\\\\\\")[0].unit === \\\\\\\"concat_1\\\\\\\"\\\",\\n \\\"signal\\\": \\\"brush_x[0]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"brush_store\\\\\\\").length && data(\\\\\\\"brush_store\\\\\\\")[0].unit === \\\\\\\"concat_1\\\\\\\"\\\",\\n \\\"value\\\": 0\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"x2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"brush_store\\\\\\\").length && data(\\\\\\\"brush_store\\\\\\\")[0].unit === \\\\\\\"concat_1\\\\\\\"\\\",\\n \\\"signal\\\": \\\"brush_x[1]\\\"\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"y2\\\": [\\n {\\n \\\"test\\\": \\\"data(\\\\\\\"brush_store\\\\\\\").length && data(\\\\\\\"brush_store\\\\\\\")[0].unit === \\\\\\\"concat_1\\\\\\\"\\\",\\n \\\"field\\\": {\\\"group\\\": \\\"height\\\"}\\n },\\n {\\\"value\\\": 0}\\n ],\\n \\\"stroke\\\": [\\n {\\\"test\\\": \\\"brush_x[0] !== brush_x[1]\\\", \\\"value\\\": \\\"white\\\"},\\n {\\\"value\\\": null}\\n ]\\n }\\n }\\n }\\n ],\\n \\\"axes\\\": [\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"gridScale\\\": \\\"concat_1_y\\\",\\n \\\"grid\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"domain\\\": false,\\n \\\"labels\\\": false,\\n \\\"aria\\\": false,\\n \\\"maxExtent\\\": 0,\\n \\\"minExtent\\\": 0,\\n \\\"ticks\\\": false,\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_x\\\",\\n \\\"orient\\\": \\\"bottom\\\",\\n \\\"grid\\\": false,\\n \\\"format\\\": \\\"%Y\\\",\\n \\\"labelFlush\\\": true,\\n \\\"labelOverlap\\\": true,\\n \\\"tickCount\\\": {\\\"signal\\\": \\\"ceil(width/40)\\\"},\\n \\\"zindex\\\": 0\\n },\\n {\\n \\\"scale\\\": \\\"concat_1_y\\\",\\n \\\"orient\\\": \\\"left\\\",\\n \\\"grid\\\": false,\\n \\\"tickCount\\\": 3,\\n \\\"labelOverlap\\\": true,\\n \\\"zindex\\\": 0\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"concat_0_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_span_0\\\", \\\"field\\\": \\\"key_as_string\\\"},\\n \\\"domainRaw\\\": {\\\"signal\\\": \\\"brush[\\\\\\\"key_as_string\\\\\\\"]\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"concat_0_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\n \\\"data\\\": \\\"data_span_0\\\",\\n \\\"fields\\\": [\\\"doc_count_start\\\", \\\"doc_count_end\\\"]\\n },\\n \\\"range\\\": [{\\\"signal\\\": \\\"concat_0_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n },\\n {\\n \\\"name\\\": \\\"concat_1_x\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"data_span_1\\\", \\\"field\\\": \\\"key_as_string\\\"},\\n \\\"range\\\": [0, {\\\"signal\\\": \\\"width\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"concat_1_y\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\n \\\"data\\\": \\\"data_span_1\\\",\\n \\\"fields\\\": [\\\"doc_count_start\\\", \\\"doc_count_end\\\"]\\n },\\n \\\"range\\\": [{\\\"signal\\\": \\\"concat_1_height\\\"}, 0],\\n \\\"nice\\\": true,\\n \\\"zero\\\": true\\n }\\n ],\\n \\\"config\\\": {}\\n}\"}}"},"id":"b57e78e0-d872-11ee-8f84-1b81ddb8574c","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-03-17T02:17:52.196Z","version":"WzM1MSw4XQ=="}
-{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{\"vis\":{\"colors\":{\"spans\":\"#7ba4cb\"}}},\"gridData\":{\"h\":15,\"i\":\"69f10ecd-f20f-4168-aeda-a3f821d8417d\",\"w\":17,\"x\":0,\"y\":0},\"panelIndex\":\"69f10ecd-f20f-4168-aeda-a3f821d8417d\",\"version\":\"2.12.0\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{\"vis\":{\"colors\":{\"Count\":\"#7ba4cb\",\"signals\":\"#a388c4\"}}},\"gridData\":{\"h\":15,\"i\":\"43d94cdf-6541-48a8-90ce-e4412d852e3a\",\"w\":15,\"x\":17,\"y\":0},\"panelIndex\":\"43d94cdf-6541-48a8-90ce-e4412d852e3a\",\"version\":\"2.12.0\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{\"vis\":{\"colors\":{\"event\":\"#54b399\"}}},\"gridData\":{\"h\":15,\"i\":\"69942845-c443-4ea7-81b9-fe9985db9fc8\",\"w\":16,\"x\":32,\"y\":0},\"panelIndex\":\"69942845-c443-4ea7-81b9-fe9985db9fc8\",\"version\":\"2.12.0\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"748315f8-ed77-4ae6-ba9c-51cc7560d8bc\",\"w\":48,\"x\":0,\"y\":15},\"panelIndex\":\"748315f8-ed77-4ae6-ba9c-51cc7560d8bc\",\"version\":\"2.12.0\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":16,\"i\":\"4071ddf6-7061-422a-925b-55d8a4dd1b48\",\"w\":48,\"x\":0,\"y\":26},\"panelIndex\":\"4071ddf6-7061-422a-925b-55d8a4dd1b48\",\"title\":\"signals-count-per-minute-zoomable-chart\",\"version\":\"2.12.0\",\"panelRefName\":\"panel_4\"}]","timeRestore":false,"title":"data-ingestion-rate-dashboard","version":1},"id":"data-ingestion-rate-dashboard-1_0_0_ID","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"3d54d700-d869-11ee-8f84-1b81ddb8574c","name":"panel_0","type":"visualization"},{"id":"157164f0-d86a-11ee-8f84-1b81ddb8574c","name":"panel_1","type":"visualization"},{"id":"751992c0-d869-11ee-8f84-1b81ddb8574c","name":"panel_2","type":"visualization"},{"id":"ae5ccd00-d8bd-11ee-8f84-1b81ddb8574c","name":"panel_3","type":"visualization"},{"id":"b57e78e0-d872-11ee-8f84-1b81ddb8574c","name":"panel_4","type":"visualization"}],"type":"dashboard","updated_at":"2024-03-17T02:18:01.015Z","version":"WzM1Miw4XQ=="}
-{"exportedCount":10,"missingRefCount":0,"missingReferences":[]}
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/assets/otel_services_dashboard-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/otel-services/assets/otel_services_dashboard-1.0.0.ndjson
deleted file mode 100644
index b11dd4ab54..0000000000
--- a/server/adaptors/integrations/__data__/repository/otel-services/assets/otel_services_dashboard-1.0.0.ndjson
+++ /dev/null
@@ -1,11 +0,0 @@
-{"attributes":{"fields":"[{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"destination.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"destination.resource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"hashId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"target.resource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","title":"otel-v1-apm-service-map"},"id":"79a3b09c-71e8-4c6d-a755-382d1338fb94","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2024-04-19T20:23:00.002Z","version":"Wzc2NCwyXQ=="}
-{"attributes":{"fields":"[{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"droppedEventsCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"droppedLinksCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"durationInNanos\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"endTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"events.attributes.app@payment@transaction@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@payment@transaction@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@payment@transaction@id\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@quote@cost@total\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@cost@total\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@cost@total.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@shipping@cost@total\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@tracking@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@tracking@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@shipping@tracking@id\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@escaped\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@escaped.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@escaped\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@message.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@message\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@stacktrace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@stacktrace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@stacktrace\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@type\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.message@type\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.name\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.time\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"instrumentationScope.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.name\"}}},{\"count\":0,\"name\":\"instrumentationScope.version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.version\"}}},{\"count\":0,\"name\":\"kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"links.droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.spanId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.spanId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.spanId\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.traceId\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.traceState\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"parentSpanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.container@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.host@arch\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.host@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command_args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@executable@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@executable@path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@pid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@instance@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@auto@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@language\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@ad_request_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@ad_response_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@contextKeys\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@contextKeys@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@cart@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@currency@conversion@from\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@currency@conversion@to\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@email@recipient\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@featureflag@enabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@featureflag@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@filtered_products@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@filtered_products@list\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@card_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@card_valid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@charged\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@quantity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@products@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@products_recommended@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@quote@cost@total\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@quote@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@recommendation@cache_enabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@session@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@cost@total\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@tracking@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@zip_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@synthetic_request\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@user@currency\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@user@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.busy_ns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@filepath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@function\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@lineno\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@instance\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@redis@database_index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@redis@flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@statement\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.decode_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@client_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@flavor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@request_content_length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@request_content_length_uncompressed\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@response_content_length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@route\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@scheme\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@status_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@status_text\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@target\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.idle_ns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.idle_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.jinja2@template_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.jinja2@template_path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@client_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@destination@kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@destination@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@consumer@group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@destination@partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@message@offset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@message@payload_size_bytes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@host@addr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@peer@addr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@peer@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@transport\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.peer@service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.phoenix@action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.phoenix@plug\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.query_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.queue_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@grpc@status_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.sinatra@template_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.thread@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.thread@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.total_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"spanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"startTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status.code\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.durationInNanos\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.endTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.statusCode\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"traceState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"traceState\"}}}]","timeFieldName":"startTime","title":"otel-v1-apm-span-0*"},"id":"a7cea13f-0173-4ade-8993-f4468193da16","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2024-04-19T20:23:11.470Z","version":"Wzc3NiwyXQ=="}
-{"attributes":{"description":"traces by response code","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"traces-by-response-code","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"traces-by-response-code\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1708642305489\",\"fieldName\":\"serviceName\",\"parent\":\"\",\"label\":\"services\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1708641641797\",\"fieldName\":\"span.attributes.http@status_code\",\"parent\":\"\",\"label\":\"response-status\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_1_index_pattern\"},{\"id\":\"1708642009521\",\"fieldName\":\"traceGroup\",\"parent\":\"\",\"label\":\"group\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_2_index_pattern\"}],\"updateFiltersOnChange\":true,\"useTimeFilter\":true,\"pinFilters\":false}}"},"id":"7e12d8ea-1220-4caa-b145-d6be91b46170","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"79a3b09c-71e8-4c6d-a755-382d1338fb94","name":"control_0_index_pattern","type":"index-pattern"},{"id":"a7cea13f-0173-4ade-8993-f4468193da16","name":"control_1_index_pattern","type":"index-pattern"},{"id":"a7cea13f-0173-4ade-8993-f4468193da16","name":"control_2_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2024-04-19T20:23:00.002Z","version":"Wzc2NiwyXQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"service-map-graph","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"service-map-graph\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"padding\\\": {\\\"left\\\": 0, \\\"right\\\": 0, \\\"top\\\": 0, \\\"bottom\\\": 0},\\n \\\"autosize\\\": \\\"pad\\\",\\n \\\"background\\\": \\\"#f4f7ff\\\",\\n \\\"signals\\\": [\\n {\\\"name\\\": \\\"xrange\\\", \\\"update\\\": \\\"[0, width]\\\"},\\n {\\\"name\\\": \\\"yrange\\\", \\\"update\\\": \\\"[height, 0]\\\"},\\n {\\\"name\\\": \\\"xext\\\", \\\"update\\\": \\\"[0, width]\\\"},\\n {\\\"name\\\": \\\"yext\\\", \\\"update\\\": \\\"[height, 0]\\\"},\\n {\\n \\\"name\\\": \\\"down\\\",\\n \\\"value\\\": null,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"mouseup,touchend\\\", \\\"update\\\": \\\"null\\\"},\\n {\\\"events\\\": \\\"mousedown, touchstart\\\", \\\"update\\\": \\\"xy()\\\"},\\n {\\\"events\\\": \\\"symbol:mousedown, symbol:touchstart\\\", \\\"update\\\": \\\"null\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"xcur\\\",\\n \\\"value\\\": null,\\n \\\"on\\\": [{\\\"events\\\": \\\"mousedown, touchstart, touchend\\\", \\\"update\\\": \\\"xdom\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"ycur\\\",\\n \\\"value\\\": null,\\n \\\"on\\\": [{\\\"events\\\": \\\"mousedown, touchstart, touchend\\\", \\\"update\\\": \\\"ydom\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"delta\\\",\\n \\\"value\\\": [0, 0],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": [\\n {\\n \\\"source\\\": \\\"window\\\",\\n \\\"type\\\": \\\"mousemove\\\",\\n \\\"consume\\\": true,\\n \\\"between\\\": [\\n {\\\"type\\\": \\\"mousedown\\\"},\\n {\\\"source\\\": \\\"window\\\", \\\"type\\\": \\\"mouseup\\\"}\\n ]\\n },\\n {\\n \\\"type\\\": \\\"touchmove\\\",\\n \\\"consume\\\": true,\\n \\\"filter\\\": \\\"event.touches.length === 1\\\"\\n }\\n ],\\n \\\"update\\\": \\\"down ? [down[0]-x(), y()-down[1]] : [0,0]\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"anchor\\\",\\n \\\"value\\\": [0, 0],\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"wheel\\\",\\n \\\"update\\\": \\\"[invert('xscale', x()), invert('yscale', y())]\\\"\\n },\\n {\\n \\\"events\\\": {\\n \\\"type\\\": \\\"touchstart\\\",\\n \\\"filter\\\": \\\"event.touches.length===2\\\"\\n },\\n \\\"update\\\": \\\"[(xdom[0] + xdom[1]) / 2, (ydom[0] + ydom[1]) / 2]\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"zoom\\\",\\n \\\"value\\\": 1,\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"wheel!\\\",\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"pow(1.001, event.deltaY * pow(16, event.deltaMode))\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"dist2\\\"},\\n \\\"force\\\": true,\\n \\\"update\\\": \\\"dist1 / dist2\\\"\\n },\\n {\\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}], \\\"update\\\": \\\"1\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"dist1\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"type\\\": \\\"touchstart\\\",\\n \\\"filter\\\": \\\"event.touches.length===2\\\"\\n },\\n \\\"update\\\": \\\"pinchDistance(event)\\\"\\n },\\n {\\\"events\\\": {\\\"signal\\\": \\\"dist2\\\"}, \\\"update\\\": \\\"dist2\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"dist2\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\n \\\"type\\\": \\\"touchmove\\\",\\n \\\"consume\\\": true,\\n \\\"filter\\\": \\\"event.touches.length===2\\\"\\n },\\n \\\"update\\\": \\\"pinchDistance(event)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"xdom\\\",\\n \\\"update\\\": \\\"xext\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"delta\\\"},\\n \\\"update\\\": \\\"[xcur[0] + span(xcur) * delta[0] / width, xcur[1] + span(xcur) * delta[0] / width]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"zoom\\\"},\\n \\\"update\\\": \\\"[anchor[0] + (xdom[0] - anchor[0]) * zoom, anchor[0] + (xdom[1] - anchor[0]) * zoom]\\\"\\n },\\n {\\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}], \\\"update\\\": \\\"xrange\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"ydom\\\",\\n \\\"update\\\": \\\"yext\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"delta\\\"},\\n \\\"update\\\": \\\"[ycur[0] + span(ycur) * delta[1] / height, ycur[1] + span(ycur) * delta[1] / height]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"zoom\\\"},\\n \\\"update\\\": \\\"[anchor[1] + (ydom[0] - anchor[1]) * zoom, anchor[1] + (ydom[1] - anchor[1]) * zoom]\\\"\\n },\\n {\\\"events\\\": [{\\\"source\\\": \\\"view\\\", \\\"type\\\": \\\"dblclick\\\"}], \\\"update\\\": \\\"yrange\\\"}\\n ]\\n },\\n {\\\"name\\\": \\\"size\\\", \\\"update\\\": \\\"clamp(20 / span(xdom), 1, 1000)\\\"},\\n {\\n \\\"name\\\": \\\"cx\\\",\\n \\\"update\\\": \\\"width / 2\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"[symbol:mousedown, window:mouseup] > window:mousemove\\\",\\n \\\"update\\\": \\\" cx==width/2?cx+0.001:width/2\\\"\\n }\\n ]\\n },\\n {\\\"name\\\": \\\"cy\\\", \\\"update\\\": \\\"height / 2\\\"},\\n {\\n \\\"name\\\": \\\"nodeRadiusKey\\\",\\n \\\"description\\\": \\\"q=increase size, a=decrease size\\\",\\n \\\"value\\\": 8,\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"window:keypress\\\",\\n \\\"update\\\": \\\"event.key=='a'&&nodeRadiusKey>1?nodeRadiusKey-1:event.key=='q'?nodeRadiusKey+1:nodeRadiusKey\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"nodeRadius\\\",\\n \\\"value\\\": 8,\\n \\\"bind\\\": {\\\"input\\\": \\\"range\\\", \\\"min\\\": 1, \\\"max\\\": 50, \\\"step\\\": 1},\\n \\\"on\\\": [{\\\"events\\\": {\\\"signal\\\": \\\"nodeRadiusKey\\\"}, \\\"update\\\": \\\"nodeRadiusKey\\\"}]\\n },\\n {\\n \\\"name\\\": \\\"nodeCharge\\\",\\n \\\"value\\\": -30,\\n \\\"bind\\\": {\\\"input\\\": \\\"range\\\", \\\"min\\\": -100, \\\"max\\\": 10, \\\"step\\\": 1}\\n },\\n {\\n \\\"name\\\": \\\"linkDistance\\\",\\n \\\"value\\\": 30,\\n \\\"bind\\\": {\\\"input\\\": \\\"range\\\", \\\"min\\\": 5, \\\"max\\\": 300, \\\"step\\\": 1}\\n },\\n {\\n \\\"description\\\": \\\"State variable for active node fix status.\\\",\\n \\\"name\\\": \\\"fix\\\",\\n \\\"value\\\": false,\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"symbol:mouseout[!event.buttons], window:mouseup\\\",\\n \\\"update\\\": \\\"false\\\"\\n },\\n {\\\"events\\\": \\\"symbol:mouseover\\\", \\\"update\\\": \\\"fix || true\\\", \\\"force\\\": true},\\n {\\n \\\"events\\\": \\\"[symbol:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"xy()\\\",\\n \\\"force\\\": true\\n }\\n ]\\n },\\n {\\n \\\"description\\\": \\\"Graph node most recently interacted with.\\\",\\n \\\"name\\\": \\\"node\\\",\\n \\\"value\\\": null,\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"symbol:mouseover\\\",\\n \\\"update\\\": \\\"fix === true ? datum.index : node\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"nodeHover\\\",\\n \\\"value\\\": {\\\"id\\\": null, \\\"connections\\\": []},\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"symbol:mouseover\\\",\\n \\\"update\\\": \\\"{'id':datum.index, 'connections':split(datum.sources+','+datum.targets,',')}\\\"\\n },\\n {\\\"events\\\": \\\"symbol:mouseout\\\", \\\"update\\\": \\\"{'id':null, 'connections':[]}\\\"}\\n ]\\n },\\n {\\n \\\"description\\\": \\\"Flag to restart Force simulation upon data changes.\\\",\\n \\\"name\\\": \\\"restart\\\",\\n \\\"value\\\": false,\\n \\\"on\\\": [{\\\"events\\\": {\\\"signal\\\": \\\"fix\\\"}, \\\"update\\\": \\\"fix && fix.length\\\"}]\\n }\\n ],\\n \\\"data\\\": [\\n {\\n \\\"name\\\": \\\"node-data-raw\\\",\\n \\\"url\\\": {\\n \\\"%context%\\\": \\\"true\\\",\\n \\\"index\\\": \\\"otel-v1-apm-span-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\": 0,\\n \\\"aggs\\\": {\\n \\\"services\\\": {\\n \\\"terms\\\": {\\n \\\"field\\\": \\\"serviceName\\\",\\n \\\"size\\\": 10000\\n }\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"type\\\": \\\"json\\\",\\n \\\"property\\\": \\\"aggregations.services.buckets\\\"\\n },\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"'http://localhost:5601/app/dashboards#/view/single-service-correlated-dashboard-1_0_0_ID?_a=(description:%27%27,filters:!((%27$state%27:(store:appState),meta:(alias:!n,disabled:!f,key:serviceName,negate:!f,params:(query:' + datum.serviceName + '),type:phrase),query:(match_phrase:(serviceName:' + datum.name + ')))),fullScreenMode:!f,options:(hidePanelTitles:!f,useMargins:!t),query:(language:kuery,query:%27%27),timeRestore:!f,title:single-service-correlated-dashboard,viewMode:view)'\\\",\\n \\\"as\\\": \\\"link\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"datum.doc_count\\\",\\n \\\"as\\\": \\\"traceCounts\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"datum.key\\\",\\n \\\"as\\\": \\\"name\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"datum.key\\\",\\n \\\"as\\\": \\\"group\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"link-data-raw\\\",\\n \\\"url\\\": {\\n \\\"%context%\\\": \\\"true\\\",\\n \\\"index\\\": \\\"otel-v1-apm-service-map*\\\",\\n \\\"body\\\": {\\n \\\"size\\\": 0,\\n \\\"aggs\\\": {\\n \\\"services\\\": {\\n \\\"terms\\\": {\\n \\\"size\\\": 10000,\\n \\\"field\\\": \\\"serviceName\\\"\\n },\\n \\\"aggs\\\": {\\n \\\"target\\\": {\\n \\\"terms\\\": {\\n \\\"size\\\": 10000,\\n \\\"field\\\": \\\"destination.domain\\\"\\n }\\n }\\n }\\n }\\n }\\n }\\n },\\n \\\"format\\\": {\\n \\\"property\\\": \\\"aggregations.services.buckets\\\"\\n },\\n \\\"transform\\\":[\\n {\\n \\\"type\\\": \\\"flatten\\\",\\n \\\"fields\\\": [\\\"target.buckets\\\"],\\n \\\"as\\\": [\\\"targetBucket\\\"]\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"datum.doc_count\\\",\\n \\\"as\\\": \\\"value\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"datum.key\\\",\\n \\\"as\\\": \\\"source\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"datum.targetBucket.key\\\",\\n \\\"as\\\": \\\"target\\\"\\n },\\n {\\n \\\"type\\\": \\\"lookup\\\",\\n \\\"from\\\": \\\"node-data-raw\\\",\\n \\\"key\\\": \\\"name\\\",\\n \\\"fields\\\": [\\\"source\\\", \\\"target\\\"],\\n \\\"as\\\": [\\\"sourceNode\\\", \\\"targetNode\\\"]\\n },\\n {\\n \\\"type\\\": \\\"filter\\\",\\n \\\"expr\\\": \\\"datum.sourceNode !== null && datum.targetNode !== null\\\"\\n }\\n ]\\n },\\n {\\\"name\\\": \\\"link-data\\\", \\\"source\\\": \\\"link-data-raw\\\"},\\n {\\n \\\"name\\\": \\\"source-connections\\\",\\n \\\"source\\\": \\\"link-data-raw\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"aggregate\\\",\\n \\\"groupby\\\": [\\\"source\\\"],\\n \\\"ops\\\": [\\\"values\\\"],\\n \\\"fields\\\": [\\\"target\\\"],\\n \\\"as\\\": [\\\"connections\\\"]\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"targets\\\",\\n \\\"expr\\\": \\\"pluck(datum.connections, 'target')\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"target-connections\\\",\\n \\\"source\\\": \\\"link-data-raw\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"aggregate\\\",\\n \\\"groupby\\\": [\\\"target\\\"],\\n \\\"ops\\\": [\\\"values\\\"],\\n \\\"fields\\\": [\\\"source\\\"],\\n \\\"as\\\": [\\\"connections\\\"]\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"sources\\\",\\n \\\"expr\\\": \\\"pluck(datum.connections, 'source')\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"node-data\\\",\\n \\\"source\\\" :\\\"node-data-raw\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"lookup\\\",\\n \\\"from\\\": \\\"source-connections\\\",\\n \\\"key\\\": \\\"source\\\",\\n \\\"fields\\\": [\\\"name\\\"],\\n \\\"values\\\": [\\\"targets\\\"],\\n \\\"as\\\": [\\\"targets\\\"],\\n \\\"default\\\": [\\\"\\\"]\\n },\\n {\\n \\\"type\\\": \\\"lookup\\\",\\n \\\"from\\\": \\\"target-connections\\\",\\n \\\"key\\\": \\\"target\\\",\\n \\\"fields\\\": [\\\"name\\\"],\\n \\\"values\\\": [\\\"sources\\\"],\\n \\\"as\\\": [\\\"sources\\\"],\\n \\\"default\\\": [\\\"\\\"]\\n },\\n {\\n \\\"type\\\": \\\"force\\\",\\n \\\"iterations\\\": 300,\\n \\\"restart\\\": {\\\"signal\\\": \\\"restart\\\"},\\n \\\"signal\\\": \\\"force\\\",\\n \\\"forces\\\": [\\n {\\\"force\\\": \\\"center\\\", \\\"x\\\": {\\\"signal\\\": \\\"cx\\\"}, \\\"y\\\": {\\\"signal\\\": \\\"cy\\\"}},\\n {\\n \\\"force\\\": \\\"collide\\\",\\n \\\"radius\\\": {\\\"signal\\\": \\\"sqrt(4 * nodeRadius * nodeRadius)\\\"},\\n \\\"iterations\\\": 1,\\n \\\"strength\\\": 0.7\\n },\\n {\\\"force\\\": \\\"nbody\\\", \\\"strength\\\": {\\\"signal\\\": \\\"nodeCharge\\\"}},\\n {\\n \\\"force\\\": \\\"link\\\",\\n \\\"links\\\": \\\"link-data-raw\\\",\\n \\\"distance\\\": {\\\"signal\\\": \\\"linkDistance\\\"},\\n \\\"id\\\": \\\"name\\\"\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"fx\\\",\\n \\\"expr\\\": \\\"fix[0]!=null && node==datum.index ?invert('xscale',fix[0]):null\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"fy\\\",\\n \\\"expr\\\": \\\"fix[1]!=null && node==datum.index ?invert('yscale',fix[1]):null\\\"\\n }\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"color\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"node-data\\\", \\\"field\\\": \\\"group\\\"},\\n \\\"range\\\": [\\n \\\"#4682b4\\\",\\n \\\"#4666b4\\\",\\n \\\"#46b494\\\",\\n \\\"#b46746\\\",\\n \\\"#b44662\\\",\\n \\\"#a44fa3\\\"\\n ]\\n },\\n {\\n \\\"name\\\": \\\"xscale\\\",\\n \\\"zero\\\": false,\\n \\\"domain\\\": {\\\"signal\\\": \\\"xdom\\\"},\\n \\\"range\\\": {\\\"signal\\\": \\\"xrange\\\"}\\n },\\n {\\n \\\"name\\\": \\\"yscale\\\",\\n \\\"zero\\\": false,\\n \\\"domain\\\": {\\\"signal\\\": \\\"ydom\\\"},\\n \\\"range\\\": {\\\"signal\\\": \\\"yrange\\\"}\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"path\\\",\\n \\\"name\\\": \\\"links\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"link-data\\\"},\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"stroke\\\": {\\n \\\"signal\\\": \\\"datum.source.index!=nodeHover.id && datum.target.index!=nodeHover.id ? '#929399':merge(hsl(scale('color', datum.source.group)), {l:0.64})\\\"\\n },\\n \\\"strokeWidth\\\": {\\n \\\"signal\\\": \\\"datum.source.index!=nodeHover.id && datum.target.index!=nodeHover.id ? 0.5:2\\\"\\n }\\n }\\n },\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"linkpath\\\",\\n \\\"require\\\": {\\\"signal\\\": \\\"force\\\"},\\n \\\"shape\\\": \\\"line\\\",\\n \\\"sourceX\\\": {\\\"expr\\\": \\\"scale('xscale', datum.datum.source.x)\\\"},\\n \\\"sourceY\\\": {\\\"expr\\\": \\\"scale('yscale', datum.datum.source.y)\\\"},\\n \\\"targetX\\\": {\\\"expr\\\": \\\"scale('xscale', datum.datum.target.x)\\\"},\\n \\\"targetY\\\": {\\\"expr\\\": \\\"scale('yscale', datum.datum.target.y)\\\"}\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"atan2(datum.datum.target.y - datum.datum.source.y,datum.datum.source.x - datum.datum.target.x)\\\",\\n \\\"as\\\": \\\"angle1\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"(datum.angle1>=0?datum.angle1:(2*PI + datum.angle1)) * (360 / (2*PI))\\\",\\n \\\"as\\\": \\\"angle2\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"(360-datum.angle2)*(PI/180)\\\",\\n \\\"as\\\": \\\"angle3\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"(cos(datum.angle3)*(nodeRadius+5))+(scale('xscale',datum.datum.target.x))\\\",\\n \\\"as\\\": \\\"arrowX\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"expr\\\": \\\"(sin(datum.angle3)*(nodeRadius+5))+(scale('yscale',datum.datum.target.y))\\\",\\n \\\"as\\\": \\\"arrowY\\\"\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"name\\\": \\\"arrows\\\",\\n \\\"zindex\\\": 1,\\n \\\"from\\\": {\\\"data\\\": \\\"links\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"shape\\\": {\\\"value\\\": \\\"triangle\\\"},\\n \\\"angle\\\": {\\\"signal\\\": \\\"-datum.angle2-90\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"datum.arrowX\\\"},\\n \\\"y\\\": {\\\"signal\\\": \\\"datum.arrowY\\\"},\\n \\\"text\\\": {\\\"signal\\\": \\\"'â–²'\\\"},\\n \\\"fill\\\": {\\n \\\"signal\\\": \\\"datum.datum.source.index!=nodeHover.id && datum.datum.target.index!=nodeHover.id ? '#929399':merge(hsl(scale('color', datum.datum.source.group)), {l:0.64})\\\"\\n },\\n \\\"size\\\": {\\\"signal\\\": \\\"nodeRadius==1?0:60\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"nodes\\\",\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"zindex\\\": 1,\\n \\\"from\\\": {\\\"data\\\": \\\"node-data\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 1},\\n \\\"href\\\": {\\\"signal\\\": \\\"datum.link\\\"},\\n \\\"fill\\\": {\\n \\\"signal\\\": \\\"nodeHover.id===datum.index || indexof(nodeHover.connections, datum.name)>-1 ?scale('color', datum.group):merge(hsl(scale('color', datum.group)), {l:0.64})\\\"\\n },\\n \\\"stroke\\\": {\\n \\\"signal\\\": \\\"nodeHover.id===datum.index || indexof(nodeHover.connections, datum.name)>-1 ?scale('color', datum.group):merge(hsl(scale('color', datum.group)), {l:0.84})\\\"\\n },\\n \\\"strokeWidth\\\": {\\\"value\\\": 3},\\n \\\"strokeOpacity\\\": {\\\"value\\\": 1},\\n \\\"size\\\": {\\\"signal\\\": \\\"4 * nodeRadius * nodeRadius\\\"},\\n \\\"cursor\\\": {\\\"value\\\": \\\"pointer\\\"},\\n \\\"x\\\": {\\n \\\"signal\\\": \\\"fix[0]!=null && node===datum.index ?fix[0]:scale('xscale', datum.x)\\\"\\n },\\n \\\"y\\\": {\\n \\\"signal\\\": \\\"fix[1]!=null && node===datum.index ?fix[1]:scale('yscale', datum.y)\\\"\\n }\\n },\\n \\\"hover\\\": {\\\"tooltip\\\": {\\\"signal\\\": \\\"datum.name\\\"}}\\n }\\n },\\n {\\n \\\"type\\\": \\\"text\\\",\\n \\\"name\\\": \\\"labels\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"nodes\\\"},\\n \\\"zindex\\\": 2,\\n \\\"interactive\\\": false,\\n \\\"enter\\\": {},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"fill\\\": {\\\"signal\\\": \\\"'white'\\\"},\\n \\\"y\\\": {\\\"field\\\": \\\"y\\\"},\\n \\\"x\\\": {\\\"field\\\": \\\"x\\\"},\\n \\\"text\\\": {\\\"field\\\": \\\"datum.name\\\"},\\n \\\"align\\\": {\\\"value\\\": \\\"center\\\"},\\n \\\"fontSize\\\": {\\\"value\\\": 10},\\n \\\"baseline\\\": {\\\"value\\\": \\\"middle\\\"},\\n \\\"limit\\\": {\\n \\\"signal\\\": \\\"clamp(sqrt(4 * nodeRadius * nodeRadius)-7,1,1000)\\\"\\n },\\n \\\"ellipsis\\\": {\\\"value\\\": \\\" \\\"}\\n }\\n }\\n }\\n ]\\n}\"}}"},"id":"1c59f345-ad69-4717-90ca-75b65efee96b","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-04-19T21:11:09.530Z","version":"Wzc5MiwyXQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"services-groups-pie","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"services-groups-pie\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"services\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"serviceName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"services\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"row\":true}}"},"id":"f43111e2-256c-4d15-be98-89086c5b2bca","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"a7cea13f-0173-4ade-8993-f4468193da16","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-04-19T20:23:00.002Z","version":"Wzc2OCwyXQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"services-summary-table","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"services-summary-table\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"requests\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"serviceName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"services\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"percentiles\",\"params\":{\"field\":\"durationInNanos\",\"percents\":[95],\"customLabel\":\"duration\"},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"status.code\",\"customLabel\":\"status\"},\"schema\":\"metric\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"traceId\",\"customLabel\":\"traces\"},\"schema\":\"metric\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"traceGroup\",\"customLabel\":\"groups\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"row\":true}}"},"id":"e7c75468-4e40-4b30-adad-b1d64962c76f","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"a7cea13f-0173-4ade-8993-f4468193da16","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-04-19T20:23:11.470Z","version":"Wzc3NywyXQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"multi-line-selectable-date-services-request-rate","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"multi-line-selectable-date-services-request-rate\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"title\\\": \\\"Services Requests Rate\\\",\\n \\\"data\\\": [\\n {\\n \\\"name\\\": \\\"rawdata\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-v1-apm-span-*\\\",\\n \\\"%context%\\\": true,\\n \\\"%timefield%\\\": \\\"startTime\\\",\\n \\\"body\\\": {\\n \\\"aggs\\\": {\\n \\\"services\\\": {\\n \\\"terms\\\": {\\n \\\"field\\\": \\\"serviceName\\\",\\n \\\"size\\\": 15\\n },\\n \\\"aggs\\\": {\\n \\\"time_buckets\\\": {\\n \\\"date_histogram\\\": {\\n \\\"field\\\": \\\"startTime\\\",\\n \\\"interval\\\": {\\\"%autointerval%\\\": true},\\n \\\"extended_bounds\\\": {\\n \\\"min\\\": {\\\"%timefilter%\\\": \\\"min\\\"},\\n \\\"max\\\": {\\\"%timefilter%\\\": \\\"max\\\"}\\n },\\n \\\"min_doc_count\\\":0\\n },\\n \\\"aggs\\\": {\\n \\\"duration\\\": {\\n \\\"avg\\\": {\\n \\\"missing\\\": 0,\\n \\\"script\\\": {\\n \\\"source\\\": \\\"!doc.containsKey('durationInNanos') || doc['durationInNanos'].empty ? 0 : doc['durationInNanos'].value / 1000000.0\\\",\\n \\\"lang\\\": \\\"painless\\\"\\n }\\n }\\n }\\n }\\n }\\n }\\n }\\n },\\n \\\"size\\\": 0\\n }\\n },\\n \\\"format\\\": {\\\"property\\\": \\\"aggregations.services.buckets\\\"}\\n },\\n {\\n \\\"name\\\": \\\"flatdata\\\",\\n \\\"source\\\": \\\"rawdata\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"flatten\\\",\\n \\\"fields\\\": [\\\"time_buckets.buckets\\\"],\\n \\\"as\\\": [\\\"val\\\"]\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"count\\\",\\n \\\"expr\\\":\\\"datum.val.doc_count\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"duration\\\",\\n \\\"expr\\\": \\\"datum.val.duration.value == null ? 0 : datum.val.duration.value\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"time\\\",\\n \\\"expr\\\": \\\"timeFormat(utcParse(datum.val.key_as_string,'%Y-%m-%dT%H:%M:%S.%LZ'), '%B %d, %Y %H:%M')\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"hasSelection\\\",\\n \\\"values\\\": [{}],\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"filter\\\", \\\"expr\\\": \\\"selected[0] != selected[1]\\\"}\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"groupScale\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"padding\\\": 0.1,\\n \\\"domain\\\": {\\\"data\\\": \\\"rawdata\\\", \\\"field\\\": \\\"key\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"height\\\"\\n },\\n {\\n \\\"name\\\": \\\"xScale\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"flatdata\\\", \\\"field\\\": \\\"val.key\\\"},\\n \\\"range\\\": \\\"width\\\",\\n \\\"padding\\\": 5\\n },\\n {\\n \\\"name\\\": \\\"durationScale\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"flatdata\\\", \\\"field\\\": \\\"duration\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"bandwidth('groupScale')\\\"}, 0]\\n },\\n {\\n \\\"name\\\": \\\"yScale\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"flatdata\\\", \\\"field\\\": \\\"val.doc_count\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"bandwidth('groupScale')\\\"}, 0]\\n },\\n {\\n \\\"name\\\": \\\"colorScale\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"rawdata\\\", \\\"field\\\": \\\"key\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"category\\\"\\n }\\n ],\\n \\\"axes\\\": [\\n {\\\"orient\\\": \\\"bottom\\\", \\\"scale\\\": \\\"xScale\\\", \\\"tickCount\\\": 5}\\n ],\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"currentX\\\",\\n \\\"value\\\": -1,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"view:mousemove\\\", \\\"update\\\": \\\"clamp(x(), 0, width)\\\"},\\n {\\\"events\\\": \\\"view:mouseout\\\", \\\"update\\\": \\\"-1\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"selected\\\",\\n \\\"value\\\": [0, 0],\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"@grapharea:mousedown\\\", \\\"update\\\": \\\"[x(), x()]\\\"},\\n {\\n \\\"events\\\": \\\"[@grapharea:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"[selected[0], clamp(x(), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"delta\\\"},\\n \\\"update\\\": \\\"clampRange([anchor[0] + delta, anchor[1] + delta], 0, width)\\\"\\n },\\n {\\n \\\"events\\\": \\\"[@leftEdge:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"[clamp(x(), 0, width), selected[1]]\\\"\\n },\\n {\\n \\\"events\\\": \\\"[@rightEdge:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"[selected[0], clamp(x(), 0, width)]\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"anchor\\\",\\n \\\"value\\\": null,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"@selectedRect:mousedown\\\", \\\"update\\\": \\\"selected\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"xDown\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"@selectedRect:mousedown\\\", \\\"update\\\": \\\"x()\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"delta\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"[@selectedRect:mousedown, window:mouseup] > window:mousemove!\\\", \\\"update\\\": \\\"x() - xDown\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"applyTimeFilter\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"@applyTimeFilterButton:click, @selectedRect:dblclick\\\",\\n \\\"update\\\": \\\"opensearchDashboardsSetTimeFilter(invert('xScale',selected[0]), invert('xScale',selected[1]))\\\"\\n },\\n {\\\"events\\\": \\\"@grapharea:dblclick\\\", \\\"update\\\": \\\"opensearchDashboardsSetTimeFilter('now-15d', 'now')\\\"}\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"grapharea\\\",\\n \\\"type\\\": \\\"group\\\",\\n \\\"from\\\": {\\n \\\"facet\\\": {\\\"name\\\": \\\"facets\\\", \\\"data\\\": \\\"rawdata\\\", \\\"field\\\": \\\"time_buckets.buckets\\\"}\\n },\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"y\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"field\\\": \\\"key\\\"},\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"x\\\": {\\\"value\\\": 0},\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0},\\n \\\"fill\\\": {\\\"value\\\": \\\"#000\\\"},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'Service': datum['key']}\\\"\\n }\\n }\\n },\\n \\\"axes\\\": [\\n {\\n \\\"orient\\\": \\\"left\\\",\\n \\\"scale\\\": \\\"yScale\\\",\\n \\\"title\\\": {\\\"signal\\\": \\\"parent.key\\\"},\\n \\\"tickCount\\\": 4,\\n \\\"encode\\\": {\\n \\\"title\\\": {\\n \\\"name\\\": \\\"extFilter\\\",\\n \\\"interactive\\\": true,\\n \\\"update\\\": {\\n \\\"cursor\\\": {\\\"value\\\": \\\"pointer\\\"},\\n \\\"fontSize\\\": {\\\"value\\\": 8},\\n \\\"fill\\\": {\\\"value\\\": \\\"steelblue\\\"}\\n },\\n \\\"hover\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"}\\n }\\n }\\n }\\n },\\n {\\n \\\"orient\\\": \\\"right\\\",\\n \\\"scale\\\": \\\"durationScale\\\",\\n \\\"tickCount\\\": 4,\\n \\\"title\\\": {\\\"signal\\\": \\\"parent.key\\\"},\\n \\\"encode\\\": {\\n \\\"title\\\": {\\n \\\"name\\\": \\\"extErrorFilter\\\",\\n \\\"interactive\\\": true,\\n \\\"update\\\": {\\n \\\"cursor\\\": {\\\"value\\\": \\\"pointer\\\"},\\n \\\"fontSize\\\": {\\\"value\\\": 8},\\n \\\"fill\\\": {\\\"value\\\": \\\"red\\\"}\\n },\\n \\\"hover\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"}\\n }\\n }\\n }\\n }\\n ],\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"updateErrFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"source\\\": \\\"scope\\\", \\\"markname\\\": \\\"extErrorFilter\\\", \\\"type\\\": \\\"click\\\"},\\n \\\"update\\\": \\\"{'match': {'status.code': {'query': 2, 'type': 'phrase'}}}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"applyErrorFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"updateErrFilterObj\\\"},\\n \\\"update\\\": \\\"length(domain('groupScale')) > 1 ? opensearchDashboardsAddFilter(updateErrFilterObj) : opensearchDashboardsRemoveFilter(updateErrFilterObj)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"updateFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"source\\\": \\\"scope\\\", \\\"markname\\\": \\\"extFilter\\\", \\\"type\\\": \\\"click\\\"},\\n \\\"update\\\": \\\"{'match': {'serviceName': {'query': parent.key, 'type': 'phrase'}}}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"applyFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"updateFilterObj\\\"},\\n \\\"update\\\": \\\"length(domain('groupScale')) > 1 ? opensearchDashboardsAddFilter(updateFilterObj) : opensearchDashboardsRemoveFilter(updateFilterObj)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"line\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"facets\\\"},\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"scale\\\": \\\"xScale\\\", \\\"field\\\": \\\"key\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"yScale\\\", \\\"field\\\": \\\"doc_count\\\"},\\n \\\"fill\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.2},\\n \\\"stroke\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}}\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"rect\\\",\\n \\\"from\\\": {\\n \\\"data\\\": \\\"facets\\\"\\n },\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\n \\\"scale\\\": \\\"xScale\\\",\\n \\\"field\\\": \\\"key\\\"\\n },\\n \\\"width\\\": { \\\"value\\\": 15},\\n\\\"cornerRadius\\\": { \\\"value\\\": 5 }\\n \\\"y\\\": {\\n \\\"scale\\\": \\\"durationScale\\\",\\n \\\"field\\\": \\\"duration.value\\\",\\n \\\"offset\\\": -3\\n },\\n \\\"y2\\\": {\\\"scale\\\": \\\"durationScale\\\", \\\"value\\\": 0}\\n\\n \\\"stroke\\\": {\\\"value\\\":\\\"black\\\"},\\n \\\"fill\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.8},\\n\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'Date': timeFormat(datum['key'], '%Y-%m-%d %H:%M'), 'Value': datum['duration']}\\\"\\n }\\n }\\n }\\n},\\n {\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"from\\\": {\\n \\\"data\\\": \\\"facets\\\"\\n },\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\n \\\"scale\\\": \\\"xScale\\\",\\n \\\"field\\\": \\\"key\\\"\\n },\\n \\\"y\\\": {\\n \\\"scale\\\": \\\"yScale\\\",\\n \\\"field\\\": \\\"doc_count\\\"\\n },\\n \\\"size\\\": {\\n \\\"value\\\": 8\\n },\\n \\\"stroke\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'Date': timeFormat(datum['key'], '%Y-%m-%d %H:%M'), 'Value': datum['doc_count']}\\\"\\n }\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"hasSelection\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"selectedRect\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.2},\\n \\\"cursor\\\": {\\\"value\\\": \\\"move\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"selected[0]\\\"},\\n \\\"x2\\\": {\\\"signal\\\": \\\"selected[1]\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"leftEdge\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"width\\\": {\\\"value\\\": 2},\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"},\\n \\\"cursor\\\": {\\\"value\\\": \\\"ew-resize\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"selected[0]\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"rightEdge\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"width\\\": {\\\"value\\\": 2},\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"},\\n \\\"cursor\\\": {\\\"value\\\": \\\"ew-resize\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"selected[1]\\\"}\\n }\\n }\\n }\\n ]\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"applyTimeFilterButton\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"hasSelection\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"cursor\\\": {\\\"value\\\": \\\"pointer\\\"},\\n \\\"cornerRadius\\\": {\\\"value\\\": 6},\\n \\\"fill\\\": {\\\"value\\\": \\\"#f5f5f5\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"#c1c1c1\\\"},\\n \\\"strokeWidth\\\": {\\\"value\\\": 2},\\n \\\"xc\\\": {\\\"signal\\\": \\\"width/2\\\"},\\n \\\"y\\\": {\\\"value\\\": 30},\\n \\\"width\\\": {\\\"value\\\": 80},\\n \\\"height\\\": {\\\"value\\\": 30},\\n \\\"opacity\\\": {\\\"value\\\": 1}\\n },\\n \\\"hover\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"text\\\",\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"xc\\\": {\\\"field\\\": {\\\"group\\\": \\\"width\\\"}, \\\"mult\\\": 0.5},\\n \\\"yc\\\": {\\\"field\\\": {\\\"group\\\": \\\"height\\\"}, \\\"mult\\\": 0.5, \\\"offset\\\": 2},\\n \\\"align\\\": {\\\"value\\\": \\\"center\\\"},\\n \\\"baseline\\\": {\\\"value\\\": \\\"middle\\\"},\\n \\\"fontWeight\\\": {\\\"value\\\": \\\"bold\\\"},\\n \\\"text\\\": {\\\"value\\\": \\\"Apply Filter\\\"}\\n }\\n }\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"rule\\\",\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"y\\\": {\\\"value\\\": 0},\\n \\\"y2\\\": {\\\"signal\\\": \\\"height\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"gray\\\"},\\n \\\"strokeDash\\\": {\\\"value\\\": [2, 1]},\\n \\\"x\\\": {\\\"signal\\\": \\\"max(currentX,0)\\\"},\\n \\\"strokeOpacity\\\": {\\\"signal\\\": \\\"currentX > 0 ? 1 : 0\\\"}\\n }\\n }\\n }\\n ]\\n}\\n\"}}"},"id":"cb36546d-6eff-460a-a82f-06dd192be2b9","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-04-19T20:23:11.470Z","version":"Wzc3OCwyXQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"traces-by-duration","uiStateJSON":"{\"vis\":{\"sortColumn\":{\"colIndex\":2,\"direction\":\"desc\"},\"columnsWidth\":[{\"colIndex\":1,\"width\":182.66666666666669},{\"colIndex\":0,\"width\":398.16666666666663},{\"colIndex\":3,\"width\":253.05555555555557},{\"colIndex\":2,\"width\":222.5555555555556}]}}","version":1,"visState":"{\"title\":\"traces-by-duration\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"amount\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"traceId\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"traces\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"durationInNanos\",\"customLabel\":\"avg duration\"},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"percentiles\",\"params\":{\"field\":\"durationInNanos\",\"percents\":[75,95]},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"row\":true}}"},"id":"f7ed5710-23c5-485e-8d2e-5d91c7530a7c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"a7cea13f-0173-4ade-8993-f4468193da16","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-04-19T20:23:11.470Z","version":"Wzc4MCwyXQ=="}
-{"attributes":{"description":"traces gantt chart representing a trace transaction","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"traces-gantt-chart","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"traces-gantt-chart\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega-lite/v5.json\\\",\\n\\n \\\"data\\\": {\\n \\\"url\\\" :{\\n \\\"%context%\\\": \\\"true\\\",\\n \\\"%timefield%\\\": \\\"startTime\\\",\\n \\\"index\\\": \\\"otel-v1-apm-span-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\": 75\\n }\\n }\\n \\\"format\\\":{\\n \\\"type\\\": \\\"json\\\",\\n \\\"property\\\":\\\"hits.hits\\\"\\n }\\n },\\n \\\"transform\\\": [\\n{\\\"calculate\\\": \\\"datum._source.durationInNanos / 1000000\\\", \\\"as\\\": \\\"durationInMs\\\"},\\n {\\n \\\"window\\\": [\\n {\\n \\\"op\\\": \\\"max\\\",\\n \\\"field\\\": \\\"durationInMs\\\",\\n \\\"as\\\": \\\"maxDuration\\\"\\n }\\n ],\\n \\\"frame\\\": [null, null]\\n },\\n {\\n \\\"calculate\\\": \\\"datum.durationInMs / datum.maxDuration\\\",\\n \\\"as\\\": \\\"normalizedDuration\\\"\\n },\\n { \\\"calculate\\\": \\\"datum._source.traceGroup\\\", \\\"as\\\": \\\"traceGroup\\\"},\\n { \\\"calculate\\\": \\\"toDate(datum._source.startTime)\\\", \\\"as\\\": \\\"currentDate\\\"},\\n { \\\"calculate\\\": \\\"toDate(datum._source.startTime)\\\", \\\"as\\\": \\\"startTime\\\"},\\n {\\n \\\"calculate\\\": \\\"format(datum.durationInMs, '.1f') + 'ms'\\\",\\n \\\"as\\\": \\\"formattedDuration\\\"\\n }, {\\n \\\"calculate\\\": \\\"toDate(datum._source.endTime)\\\", \\\"as\\\": \\\"endTime\\\" },\\n {\\n \\\"window\\\": [{\\\"op\\\": \\\"row_number\\\", \\\"as\\\": \\\"running_number\\\"}],\\n \\\"groupby\\\": [\\\"_source.traceId\\\"],\\n \\\"sort\\\": [{\\\"field\\\": \\\"currentDate\\\"}]\\n },\\n {\\n \\\"calculate\\\": \\\"datum._source.traceId + ' | ' + datum._source.serviceName + ' | Start:' + toDate(datum._source.startTime) + ' #' + datum['running_number']\\\",\\n \\\"as\\\": \\\"project_full_descr\\\"\\n }\\n ],\\n \\n \\\"title\\\": {\\n \\\"text\\\": \\\"Order Gantt by: Trace > Span\\\",\\n \\\"fontSize\\\": 14,\\n \\\"anchor\\\": \\\"start\\\",\\n \\\"dy\\\": -15,\\n \\\"color\\\": \\\"#706D6C\\\"\\n },\\n \\\"layer\\\": [\\n {\\n \\\"mark\\\": {\\n \\\"type\\\": \\\"bar\\\",\\n \\\"tooltip\\\": true,\\n \\\"cornerRadiusTopRight\\\": 4,\\n \\\"cornerRadiusBottomRight\\\": 4\\n },\\n \\\"encoding\\\": {\\n \\\"y\\\": {\\n \\\"field\\\": \\\"project_full_descr\\\",\\n \\\"type\\\": \\\"nominal\\\",\\n \\\"sort\\\": {\\\"field\\\": \\\"startTime\\\", \\\"order\\\": \\\"ascending\\\"},\\n \\\"axis\\\": {\\n \\\"domain\\\": true,\\n \\\"grid\\\": true,\\n \\\"ticks\\\": true,\\n \\\"labels\\\": true,\\n \\\"labelLimit\\\": 800,\\n \\\"labelFontSize\\\": 12,\\n \\\"labelPadding\\\": 10,\\n \\\"labelExpr\\\": \\\"split(datum.label, '|')[1]\\\"\\n },\\n \\\"scale\\\": {\\n \\\"padding\\\": 0.5\\n },\\n \\\"title\\\": null\\n },\\n \\\"x\\\": {\\n \\\"field\\\": \\\"_source.startTime\\\",\\n \\\"type\\\": \\\"temporal\\\",\\n \\\"title\\\": \\\"time\\\"\\n },\\n \\\"x2\\\": {\\\"field\\\": \\\"_source.endTime\\\"},\\n \\\"color\\\": {\\n \\\"field\\\": \\\"_source.serviceName\\\",\\n \\\"type\\\": \\\"nominal\\\",\\n \\\"legend\\\": {\\\"title\\\": \\\"Service Name\\\"},\\n \\\"scale\\\": {\\\"scheme\\\": \\\"category10\\\"}\\n },\\n \\\"opacity\\\": {\\n \\\"field\\\": \\\"normalizedDuration\\\",\\n \\\"legend\\\":null,\\n \\\"type\\\": \\\"quantitative\\\",\\n \\\"scale\\\": {\\\"domain\\\": [0, 1], \\\"range\\\": [0.2, 1]}\\n },\\n \\\"tooltip\\\": [\\n {\\\"field\\\": \\\"_source.serviceName\\\", \\\"title\\\": \\\"Service Name\\\"},\\n {\\\"field\\\": \\\"formattedDuration\\\", \\\"title\\\": \\\"Duration\\\"},\\n {\\\"field\\\": \\\"_source.traceId\\\", \\\"title\\\": \\\"Trace ID\\\"},\\n {\\\"field\\\": \\\"_source.traceGroup\\\", \\\"title\\\": \\\"Trace Group\\\"}\\n ]\\n }\\n },\\n {\\n \\\"mark\\\": {\\\"type\\\": \\\"rule\\\", \\\"strokeDash\\\": [2, 2], \\\"strokeWidth\\\": 2},\\n \\\"encoding\\\": {\\n \\\"x\\\": {\\n \\\"field\\\": \\\"currentDate\\\",\\n \\\"type\\\": \\\"temporal\\\"\\n }\\n }\\n },\\n {\\n \\\"mark\\\": {\\n \\\"type\\\": \\\"text\\\",\\n \\\"align\\\": \\\"right\\\",\\n \\\"dx\\\": -24,\\n \\\"dy\\\": 0,\\n \\\"fontSize\\\": 9\\n },\\n \\\"encoding\\\": {\\n \\\"x\\\": {\\\"field\\\": \\\"startTime\\\"},\\n \\\"y\\\": {\\\"field\\\": \\\"project_full_descr\\\", \\\"type\\\": \\\"nominal\\\",\\n \\\"sort\\\": {\\\"field\\\": \\\"startTime\\\", \\\"order\\\": \\\"ascending\\\"}\\n},\\n \\\"text\\\": {\\\"field\\\": \\\"formattedDuration\\\"},\\n \\\"color\\\": {\\\"value\\\": \\\"white\\\"}\\n }\\n },\\n {\\n \\\"mark\\\": {\\n \\\"type\\\": \\\"text\\\",\\n \\\"align\\\": \\\"left\\\",\\n \\\"dx\\\": 5,\\n \\\"dy\\\": 0,\\n \\\"fontSize\\\": 9\\n },\\n \\\"encoding\\\": {\\n \\\"x\\\": {\\\"field\\\": \\\"endTime\\\"},\\n \\\"y\\\": {\\\"field\\\": \\\"project_full_descr\\\", \\\"type\\\": \\\"nominal\\\", \\\"sort\\\": {\\\"field\\\": \\\"startTime\\\", \\\"order\\\": \\\"ascending\\\"}},\\n \\\"text\\\": {\\\"field\\\": \\\"formattedDuration\\\"},\\n \\\"color\\\": {\\\"value\\\": \\\"black\\\"}\\n }\\n },\\n \\n ],\\n \\\"config\\\": {\\\"view\\\": {\\\"stroke\\\": null}}\\n}\"}}"},"id":"546033dc-4047-4d3c-87f9-dc8d5566a438","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-04-19T20:23:11.470Z","version":"Wzc3OSwyXQ=="}
-{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{},\"gridData\":{\"h\":6,\"i\":\"ce4b94b7-9cf3-41ef-af99-d842c93ce571\",\"w\":47,\"x\":1,\"y\":0},\"panelIndex\":\"ce4b94b7-9cf3-41ef-af99-d842c93ce571\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":16,\"i\":\"18938833-0275-421a-8e90-aa3b376d8580\",\"w\":23,\"x\":1,\"y\":6},\"panelIndex\":\"18938833-0275-421a-8e90-aa3b376d8580\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":16,\"i\":\"ef8ea6a5-af3f-488a-ada9-c24ca4a8c5d4\",\"w\":24,\"x\":24,\"y\":6},\"panelIndex\":\"ef8ea6a5-af3f-488a-ada9-c24ca4a8c5d4\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"299e9782-a654-465e-8cd3-37f1cfbe24a4\",\"w\":47,\"x\":1,\"y\":22},\"panelIndex\":\"299e9782-a654-465e-8cd3-37f1cfbe24a4\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":56,\"i\":\"f2ac1c50-3cea-4084-be20-4a23a4e09e6a\",\"w\":47,\"x\":1,\"y\":33},\"panelIndex\":\"f2ac1c50-3cea-4084-be20-4a23a4e09e6a\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{\"vis\":{\"columnsWidth\":[{\"colIndex\":1,\"width\":182.66666666666669},{\"colIndex\":0,\"width\":398.16666666666663},{\"colIndex\":3,\"width\":405.05555555555554},{\"colIndex\":2,\"width\":325.5555555555556}],\"sortColumn\":{\"colIndex\":2,\"direction\":\"desc\"}}},\"gridData\":{\"h\":11,\"i\":\"45b84c55-14f2-4cf8-b0dd-bea4aece5c7a\",\"w\":47,\"x\":1,\"y\":89},\"panelIndex\":\"45b84c55-14f2-4cf8-b0dd-bea4aece5c7a\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":35,\"i\":\"a546dd15-c336-47e0-a8b7-df153289658d\",\"w\":47,\"x\":1,\"y\":100},\"panelIndex\":\"a546dd15-c336-47e0-a8b7-df153289658d\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_6\"}]","refreshInterval":{"pause":true,"value":0},"timeFrom":"now-30w","timeRestore":true,"timeTo":"now","title":"observability-services-dashboard","version":1},"id":"otel-services-dashboard-1_0_0_ID","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"7e12d8ea-1220-4caa-b145-d6be91b46170","name":"panel_0","type":"visualization"},{"id":"1c59f345-ad69-4717-90ca-75b65efee96b","name":"panel_1","type":"visualization"},{"id":"f43111e2-256c-4d15-be98-89086c5b2bca","name":"panel_2","type":"visualization"},{"id":"e7c75468-4e40-4b30-adad-b1d64962c76f","name":"panel_3","type":"visualization"},{"id":"cb36546d-6eff-460a-a82f-06dd192be2b9","name":"panel_4","type":"visualization"},{"id":"f7ed5710-23c5-485e-8d2e-5d91c7530a7c","name":"panel_5","type":"visualization"},{"id":"546033dc-4047-4d3c-87f9-dc8d5566a438","name":"panel_6","type":"visualization"}],"type":"dashboard","updated_at":"2024-04-19T20:41:59.216Z","version":"Wzc5MSwyXQ=="}
-{"exportedCount":10,"missingRefCount":0,"missingReferences":[]}
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/assets/otel_single_service_dashboard-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/otel-services/assets/otel_single_service_dashboard-1.0.0.ndjson
deleted file mode 100644
index fec9f13d7a..0000000000
--- a/server/adaptors/integrations/__data__/repository/otel-services/assets/otel_single_service_dashboard-1.0.0.ndjson
+++ /dev/null
@@ -1,9 +0,0 @@
-{"attributes":{"fields":"[{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"droppedEventsCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"droppedLinksCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"durationInNanos\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"endTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"events.attributes.app@payment@transaction@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@payment@transaction@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@payment@transaction@id\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@quote@cost@total\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@cost@total\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@cost@total.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@shipping@cost@total\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@tracking@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@tracking@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@shipping@tracking@id\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@message.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@message\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@stacktrace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@stacktrace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@stacktrace\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@type\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.message@type\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.name\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.time\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"instrumentationScope.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.name\"}}},{\"count\":0,\"name\":\"instrumentationScope.version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.version\"}}},{\"count\":0,\"name\":\"kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"links.droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.spanId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.spanId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.spanId\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.traceId\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.traceState\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"parentSpanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.container@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.host@arch\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.host@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command_args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@executable@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@executable@path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@pid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@instance@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@auto@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@language\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@ad_request_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@ad_response_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@contextKeys\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@contextKeys@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@cart@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@currency@conversion@from\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@currency@conversion@to\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@email@recipient\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@featureflag@enabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@featureflag@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@filtered_products@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@filtered_products@list\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@card_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@card_valid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@charged\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@quantity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@products@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@products_recommended@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@quote@cost@total\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@quote@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@recommendation@cache_enabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@cost@total\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@tracking@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@zip_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@synthetic_request\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@user@currency\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@user@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.busy_ns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@filepath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@function\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@lineno\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@instance\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@redis@database_index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@redis@flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@statement\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.decode_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.grpc@error_message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.grpc@error_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@client_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@flavor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@request_content_length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@request_content_length_uncompressed\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@response_content_length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@route\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@scheme\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@status_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@status_text\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@target\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.idle_ns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.idle_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@client_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@destination@kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@destination@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@consumer@group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@destination@partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@message@offset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@message@payload_size_bytes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@host@addr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@peer@addr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@peer@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@transport\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.peer@service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.phoenix@action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.phoenix@plug\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.query_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.queue_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@grpc@status_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.sinatra@template_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.thread@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.thread@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.total_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"spanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"startTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status.code\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.durationInNanos\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.endTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.statusCode\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"traceState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"traceState\"}}}]","timeFieldName":"startTime","title":"otel-v1-apm-span*"},"id":"f67e4370-d84f-11ee-8f84-1b81ddb8574c","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2024-04-19T20:23:11.470Z","version":"Wzc3NCwyXQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"single-service-metrics-tree-map","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"single-service-metrics-tree-map\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"padding\\\": 5,\\n\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"labels\\\", \\\"value\\\": true,\\n \\\"bind\\\": {\\\"input\\\": \\\"checkbox\\\"}\\n },\\n {\\n \\\"name\\\": \\\"layout\\\", \\\"value\\\": \\\"tidy\\\",\\n \\\"bind\\\": {\\\"input\\\": \\\"radio\\\", \\\"options\\\": [\\\"tidy\\\", \\\"cluster\\\"]}\\n },\\n {\\n \\\"name\\\": \\\"links\\\", \\\"value\\\": \\\"diagonal\\\",\\n \\\"bind\\\": {\\n \\\"input\\\": \\\"select\\\",\\n \\\"options\\\": [\\\"line\\\", \\\"curve\\\", \\\"diagonal\\\", \\\"orthogonal\\\"]\\n }\\n },\\n {\\n \\\"name\\\": \\\"separation\\\", \\\"value\\\": false,\\n \\\"bind\\\": {\\\"input\\\": \\\"checkbox\\\"}\\n }\\n ],\\n\\n \\\"data\\\": [\\n{\\n \\\"name\\\": \\\"raw-data\\\",\\n \\\"values\\\": [\\n {\\\"id\\\": 0, \\\"name\\\": \\\"recommendationservice\\\"},\\n {\\\"id\\\": 1, \\\"name\\\": \\\"system\\\", \\\"parent\\\": 0},\\n {\\\"id\\\": 2, \\\"name\\\": \\\"disk\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 3, \\\"name\\\": \\\"io\\\", \\\"parent\\\": 2},\\n {\\\"id\\\": 4, \\\"name\\\": \\\"operations\\\", \\\"parent\\\": 2},\\n {\\\"id\\\": 5, \\\"name\\\": \\\"time\\\", \\\"parent\\\": 2},\\n {\\\"id\\\": 6, \\\"name\\\": \\\"calls\\\", \\\"parent\\\": 0},\\n {\\\"id\\\": 7, \\\"name\\\": \\\"duration\\\", \\\"parent\\\": 0},\\n {\\\"id\\\": 8, \\\"name\\\": \\\"cpu\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 9, \\\"name\\\": \\\"time\\\", \\\"parent\\\": 8},\\n {\\\"id\\\": 10, \\\"name\\\": \\\"utilization\\\", \\\"parent\\\": 8},\\n {\\\"id\\\": 11, \\\"name\\\": \\\"network\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 12, \\\"name\\\": \\\"dropped_packets\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 13, \\\"name\\\": \\\"errors\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 14, \\\"name\\\": \\\"io\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 15, \\\"name\\\": \\\"packets\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 16, \\\"name\\\": \\\"memory\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 17, \\\"name\\\": \\\"usage\\\", \\\"parent\\\": 16},\\n {\\\"id\\\": 18, \\\"name\\\": \\\"utilization\\\", \\\"parent\\\": 16},\\n {\\\"id\\\": 19, \\\"name\\\": \\\"process\\\", \\\"parent\\\": 0},\\n {\\\"id\\\": 20, \\\"name\\\": \\\"runtime\\\", \\\"parent\\\": 19},\\n {\\\"id\\\": 21, \\\"name\\\": \\\"cpython\\\", \\\"parent\\\": 20},\\n {\\\"id\\\": 22, \\\"name\\\": \\\"gc_count\\\", \\\"parent\\\": 21},\\n {\\\"id\\\": 23, \\\"name\\\": \\\"connections\\\", \\\"parent\\\": 11},\\n {\\\"id\\\": 24, \\\"name\\\": \\\"swap\\\", \\\"parent\\\": 1},\\n {\\\"id\\\": 25, \\\"name\\\": \\\"usage\\\", \\\"parent\\\": 24},\\n {\\\"id\\\": 26, \\\"name\\\": \\\"utilization\\\", \\\"parent\\\": 24},\\n {\\\"id\\\": 27, \\\"name\\\": \\\"cpu_time\\\", \\\"parent\\\": 21},\\n {\\\"id\\\": 28, \\\"name\\\": \\\"memory\\\", \\\"parent\\\": 21},\\n {\\\"id\\\": 29, \\\"name\\\": \\\"app_recommendations_counter\\\", \\\"parent\\\": 0},\\n {\\\"id\\\": 30, \\\"name\\\": \\\"thread_count\\\", \\\"parent\\\": 1}\\n ]\\n},\\n\\n {\\n \\\"name\\\": \\\"tree\\\",\\n \\\"source\\\":\\\"raw-data\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"stratify\\\",\\n \\\"key\\\": \\\"id\\\",\\n \\\"parentKey\\\": \\\"parent\\\"\\n },\\n {\\n \\\"type\\\": \\\"lookup\\\",\\n \\\"from\\\": \\\"raw-data\\\",\\n \\\"key\\\": \\\"id\\\",\\n \\\"fields\\\": [\\\"parent\\\"],\\n \\\"as\\\": [\\\"parentData\\\"]\\n },\\n {\\n \\\"type\\\": \\\"tree\\\",\\n \\\"method\\\": {\\\"signal\\\": \\\"layout\\\"},\\n \\\"size\\\": [{\\\"signal\\\": \\\"height\\\"}, {\\\"signal\\\": \\\"width - 100\\\"}],\\n \\\"separation\\\": {\\\"signal\\\": \\\"separation\\\"},\\n \\\"as\\\": [\\\"y\\\", \\\"x\\\", \\\"depth\\\", \\\"children\\\"]\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"links\\\",\\n \\\"source\\\": \\\"tree\\\",\\n \\\"transform\\\": [\\n { \\\"type\\\": \\\"treelinks\\\" },\\n {\\n \\\"type\\\": \\\"linkpath\\\",\\n \\\"orient\\\": \\\"horizontal\\\",\\n \\\"shape\\\": {\\\"signal\\\": \\\"links\\\"}\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"parentName\\\",\\n \\\"expr\\\": \\\"datum.source.name\\\"\\n }\\n ]\\n }\\n ],\\n\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"parentColor\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"tree\\\", \\\"field\\\": \\\"parent\\\"},\\n \\\"range\\\": {\\\"scheme\\\": \\\"category20\\\"}\\n }\\n ],\\n\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"path\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"links\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"path\\\": {\\\"field\\\": \\\"path\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"#ccc\\\"}\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"tree\\\"},\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"size\\\": {\\\"value\\\": 200},\\n \\\"stroke\\\": {\\\"value\\\": \\\"#fff\\\"}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"field\\\": \\\"x\\\"},\\n \\\"y\\\": {\\\"field\\\": \\\"y\\\"},\\n \\\"fill\\\": {\\\"scale\\\": \\\"parentColor\\\", \\\"field\\\": \\\"parent\\\"},\\n \\\"size\\\": {\\\"signal\\\": \\\"datum.children ? 150 : 200\\\"}, \\n \\\"shape\\\": {\\\"signal\\\": \\\"datum.children ? 'circle' : 'square'\\\"}, \\n \\\"strokeWidth\\\": {\\\"value\\\": 1.5}\\n },\\n \\\"hover\\\": {\\n \\\"size\\\":{\\\"value\\\": 400},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"datum.parentData ? {'Name': datum.name, 'Parent Group': datum.parentData.name} : {'Name': datum.name}\\\"\\n\\n }\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"text\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"tree\\\"},\\n \\\"encode\\\": {\\n \\\"enter\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"black\\\"},\\n \\\"text\\\": {\\\"field\\\": \\\"name\\\"},\\n \\\"fontSize\\\": {\\\"value\\\": 12},\\n \\\"baseline\\\": {\\\"value\\\": \\\"middle\\\"}\\n },\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"field\\\": \\\"x\\\"},\\n \\\"y\\\": {\\\"field\\\": \\\"y\\\"},\\n \\\"dx\\\": {\\\"signal\\\": \\\"datum.children ? -7 : 7\\\"},\\n \\\"align\\\": {\\\"signal\\\": \\\"datum.children ? 'right' : 'left'\\\"},\\n \\\"opacity\\\": {\\\"signal\\\": \\\"labels ? 1 : 0\\\"}\\n }\\n }\\n }\\n ]\\n}\\n\"}}"},"id":"a75f6330-d9d2-11ee-9203-cf873e97f443","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-04-19T20:23:11.470Z","version":"Wzc3NSwyXQ=="}
-{"attributes":{"fields":"[{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"droppedEventsCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"droppedLinksCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"durationInNanos\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"endTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"events.attributes.app@payment@transaction@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@payment@transaction@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@payment@transaction@id\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@quote@cost@total\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@cost@total\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@cost@total.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@shipping@cost@total\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@tracking@id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.app@shipping@tracking@id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.app@shipping@tracking@id\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@escaped\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@escaped.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@escaped\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@message.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@message\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@stacktrace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@stacktrace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@stacktrace\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.exception@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.exception@type\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@id\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.attributes.message@type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.attributes.message@type\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"events.name\"},\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"events.time\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"events\"}}},{\"count\":0,\"name\":\"instrumentationScope.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.name\"}}},{\"count\":0,\"name\":\"instrumentationScope.version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.version\"}}},{\"count\":0,\"name\":\"kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"links.droppedAttributesCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.spanId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.spanId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.spanId\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.traceId\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"subType\":{\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"links.traceState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"links.traceState\"},\"nested\":{\"path\":\"links\"}}},{\"count\":0,\"name\":\"name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"parentSpanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.container@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.host@arch\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.host@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.os@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command_args\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@command_line\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@executable@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@executable@path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@pid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@description\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.process@runtime@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@instance@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.service@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@auto@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@language\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"resource.attributes.telemetry@sdk@version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"serviceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@ad_request_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@ad_response_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@contextKeys\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@contextKeys@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@ads@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@cart@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@currency@conversion@from\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@currency@conversion@to\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@email@recipient\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@featureflag@enabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@featureflag@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@filtered_products@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@filtered_products@list\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@order@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@card_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@card_valid\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@payment@charged\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@product@quantity\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@products@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@products_recommended@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@quote@cost@total\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@quote@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@recommendation@cache_enabled\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@session@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@amount\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@cost@total\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@items@count\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@tracking@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@shipping@zip_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@synthetic_request\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@user@currency\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.app@user@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.busy_ns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@filepath\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@function\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@lineno\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.code@namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@instance\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@redis@database_index\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@redis@flags\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@statement\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.db@url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.decode_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@client_ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@flavor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@host\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@request_content_length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@request_content_length_uncompressed\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@response_content_length\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@route\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@scheme\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@status_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@status_text\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@target\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.http@user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.idle_ns\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.idle_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.jinja2@template_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.jinja2@template_path\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@client_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@destination@kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@destination@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@consumer@group\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@destination@partition\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@kafka@message@offset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@message@payload_size_bytes\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.messaging@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@host@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@ip\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@peer@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@host@addr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@peer@addr\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@sock@peer@port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.net@transport\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.peer@service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.phoenix@action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.phoenix@plug\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.query_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.queue_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@grpc@status_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@system\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.rpc@user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.sinatra@template_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.thread@id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.thread@name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span.attributes.total_time_microseconds\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"spanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"startTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status.code\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"status.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroup\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.durationInNanos\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.endTime\",\"type\":\"date\",\"esTypes\":[\"date_nanos\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceGroupFields.statusCode\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"traceState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"traceState\"}}}]","timeFieldName":"startTime","title":"otel-v1-apm-span-0*"},"id":"a7cea13f-0173-4ade-8993-f4468193da16","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2024-04-19T20:23:11.470Z","version":"Wzc3NiwyXQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"services-summary-table","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"services-summary-table\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"requests\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"serviceName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"services\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"percentiles\",\"params\":{\"field\":\"durationInNanos\",\"percents\":[95],\"customLabel\":\"duration\"},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"status.code\",\"customLabel\":\"status\"},\"schema\":\"metric\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"traceId\",\"customLabel\":\"traces\"},\"schema\":\"metric\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"traceGroup\",\"customLabel\":\"groups\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"row\":true}}"},"id":"e7c75468-4e40-4b30-adad-b1d64962c76f","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"a7cea13f-0173-4ade-8993-f4468193da16","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-04-19T20:23:11.470Z","version":"Wzc3NywyXQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"traces-by-duration","uiStateJSON":"{\"vis\":{\"sortColumn\":{\"colIndex\":2,\"direction\":\"desc\"},\"columnsWidth\":[{\"colIndex\":1,\"width\":182.66666666666669},{\"colIndex\":0,\"width\":398.16666666666663},{\"colIndex\":3,\"width\":253.05555555555557},{\"colIndex\":2,\"width\":222.5555555555556}]}}","version":1,"visState":"{\"title\":\"traces-by-duration\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"amount\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"traceId\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"traces\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"durationInNanos\",\"customLabel\":\"avg duration\"},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"percentiles\",\"params\":{\"field\":\"durationInNanos\",\"percents\":[75,95]},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"row\":true}}"},"id":"f7ed5710-23c5-485e-8d2e-5d91c7530a7c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"a7cea13f-0173-4ade-8993-f4468193da16","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-04-19T20:23:11.470Z","version":"Wzc4MCwyXQ=="}
-{"attributes":{"description":"traces gantt chart representing a trace transaction","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"traces-gantt-chart","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"traces-gantt-chart\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega-lite/v5.json\\\",\\n\\n \\\"data\\\": {\\n \\\"url\\\" :{\\n \\\"%context%\\\": \\\"true\\\",\\n \\\"%timefield%\\\": \\\"startTime\\\",\\n \\\"index\\\": \\\"otel-v1-apm-span-*\\\",\\n \\\"body\\\": {\\n \\\"size\\\": 75\\n }\\n }\\n \\\"format\\\":{\\n \\\"type\\\": \\\"json\\\",\\n \\\"property\\\":\\\"hits.hits\\\"\\n }\\n },\\n \\\"transform\\\": [\\n{\\\"calculate\\\": \\\"datum._source.durationInNanos / 1000000\\\", \\\"as\\\": \\\"durationInMs\\\"},\\n {\\n \\\"window\\\": [\\n {\\n \\\"op\\\": \\\"max\\\",\\n \\\"field\\\": \\\"durationInMs\\\",\\n \\\"as\\\": \\\"maxDuration\\\"\\n }\\n ],\\n \\\"frame\\\": [null, null]\\n },\\n {\\n \\\"calculate\\\": \\\"datum.durationInMs / datum.maxDuration\\\",\\n \\\"as\\\": \\\"normalizedDuration\\\"\\n },\\n { \\\"calculate\\\": \\\"datum._source.traceGroup\\\", \\\"as\\\": \\\"traceGroup\\\"},\\n { \\\"calculate\\\": \\\"toDate(datum._source.startTime)\\\", \\\"as\\\": \\\"currentDate\\\"},\\n { \\\"calculate\\\": \\\"toDate(datum._source.startTime)\\\", \\\"as\\\": \\\"startTime\\\"},\\n {\\n \\\"calculate\\\": \\\"format(datum.durationInMs, '.1f') + 'ms'\\\",\\n \\\"as\\\": \\\"formattedDuration\\\"\\n }, {\\n \\\"calculate\\\": \\\"toDate(datum._source.endTime)\\\", \\\"as\\\": \\\"endTime\\\" },\\n {\\n \\\"window\\\": [{\\\"op\\\": \\\"row_number\\\", \\\"as\\\": \\\"running_number\\\"}],\\n \\\"groupby\\\": [\\\"_source.traceId\\\"],\\n \\\"sort\\\": [{\\\"field\\\": \\\"currentDate\\\"}]\\n },\\n {\\n \\\"calculate\\\": \\\"datum._source.traceId + ' | ' + datum._source.serviceName + ' | Start:' + toDate(datum._source.startTime) + ' #' + datum['running_number']\\\",\\n \\\"as\\\": \\\"project_full_descr\\\"\\n }\\n ],\\n \\n \\\"title\\\": {\\n \\\"text\\\": \\\"Order Gantt by: Trace > Span\\\",\\n \\\"fontSize\\\": 14,\\n \\\"anchor\\\": \\\"start\\\",\\n \\\"dy\\\": -15,\\n \\\"color\\\": \\\"#706D6C\\\"\\n },\\n \\\"layer\\\": [\\n {\\n \\\"mark\\\": {\\n \\\"type\\\": \\\"bar\\\",\\n \\\"tooltip\\\": true,\\n \\\"cornerRadiusTopRight\\\": 4,\\n \\\"cornerRadiusBottomRight\\\": 4\\n },\\n \\\"encoding\\\": {\\n \\\"y\\\": {\\n \\\"field\\\": \\\"project_full_descr\\\",\\n \\\"type\\\": \\\"nominal\\\",\\n \\\"sort\\\": {\\\"field\\\": \\\"startTime\\\", \\\"order\\\": \\\"ascending\\\"},\\n \\\"axis\\\": {\\n \\\"domain\\\": true,\\n \\\"grid\\\": true,\\n \\\"ticks\\\": true,\\n \\\"labels\\\": true,\\n \\\"labelLimit\\\": 800,\\n \\\"labelFontSize\\\": 12,\\n \\\"labelPadding\\\": 10,\\n \\\"labelExpr\\\": \\\"split(datum.label, '|')[1]\\\"\\n },\\n \\\"scale\\\": {\\n \\\"padding\\\": 0.5\\n },\\n \\\"title\\\": null\\n },\\n \\\"x\\\": {\\n \\\"field\\\": \\\"_source.startTime\\\",\\n \\\"type\\\": \\\"temporal\\\",\\n \\\"title\\\": \\\"time\\\"\\n },\\n \\\"x2\\\": {\\\"field\\\": \\\"_source.endTime\\\"},\\n \\\"color\\\": {\\n \\\"field\\\": \\\"_source.serviceName\\\",\\n \\\"type\\\": \\\"nominal\\\",\\n \\\"legend\\\": {\\\"title\\\": \\\"Service Name\\\"},\\n \\\"scale\\\": {\\\"scheme\\\": \\\"category10\\\"}\\n },\\n \\\"opacity\\\": {\\n \\\"field\\\": \\\"normalizedDuration\\\",\\n \\\"legend\\\":null,\\n \\\"type\\\": \\\"quantitative\\\",\\n \\\"scale\\\": {\\\"domain\\\": [0, 1], \\\"range\\\": [0.2, 1]}\\n },\\n \\\"tooltip\\\": [\\n {\\\"field\\\": \\\"_source.serviceName\\\", \\\"title\\\": \\\"Service Name\\\"},\\n {\\\"field\\\": \\\"formattedDuration\\\", \\\"title\\\": \\\"Duration\\\"},\\n {\\\"field\\\": \\\"_source.traceId\\\", \\\"title\\\": \\\"Trace ID\\\"},\\n {\\\"field\\\": \\\"_source.traceGroup\\\", \\\"title\\\": \\\"Trace Group\\\"}\\n ]\\n }\\n },\\n {\\n \\\"mark\\\": {\\\"type\\\": \\\"rule\\\", \\\"strokeDash\\\": [2, 2], \\\"strokeWidth\\\": 2},\\n \\\"encoding\\\": {\\n \\\"x\\\": {\\n \\\"field\\\": \\\"currentDate\\\",\\n \\\"type\\\": \\\"temporal\\\"\\n }\\n }\\n },\\n {\\n \\\"mark\\\": {\\n \\\"type\\\": \\\"text\\\",\\n \\\"align\\\": \\\"right\\\",\\n \\\"dx\\\": -24,\\n \\\"dy\\\": 0,\\n \\\"fontSize\\\": 9\\n },\\n \\\"encoding\\\": {\\n \\\"x\\\": {\\\"field\\\": \\\"startTime\\\"},\\n \\\"y\\\": {\\\"field\\\": \\\"project_full_descr\\\", \\\"type\\\": \\\"nominal\\\",\\n \\\"sort\\\": {\\\"field\\\": \\\"startTime\\\", \\\"order\\\": \\\"ascending\\\"}\\n},\\n \\\"text\\\": {\\\"field\\\": \\\"formattedDuration\\\"},\\n \\\"color\\\": {\\\"value\\\": \\\"white\\\"}\\n }\\n },\\n {\\n \\\"mark\\\": {\\n \\\"type\\\": \\\"text\\\",\\n \\\"align\\\": \\\"left\\\",\\n \\\"dx\\\": 5,\\n \\\"dy\\\": 0,\\n \\\"fontSize\\\": 9\\n },\\n \\\"encoding\\\": {\\n \\\"x\\\": {\\\"field\\\": \\\"endTime\\\"},\\n \\\"y\\\": {\\\"field\\\": \\\"project_full_descr\\\", \\\"type\\\": \\\"nominal\\\", \\\"sort\\\": {\\\"field\\\": \\\"startTime\\\", \\\"order\\\": \\\"ascending\\\"}},\\n \\\"text\\\": {\\\"field\\\": \\\"formattedDuration\\\"},\\n \\\"color\\\": {\\\"value\\\": \\\"black\\\"}\\n }\\n },\\n \\n ],\\n \\\"config\\\": {\\\"view\\\": {\\\"stroke\\\": null}}\\n}\"}}"},"id":"546033dc-4047-4d3c-87f9-dc8d5566a438","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-04-19T20:23:11.470Z","version":"Wzc3OSwyXQ=="}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"multi-line-selectable-date-services-request-rate","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"multi-line-selectable-date-services-request-rate\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{\\n \\\"$schema\\\": \\\"https://vega.github.io/schema/vega/v5.json\\\",\\n \\\"title\\\": \\\"Services Requests Rate\\\",\\n \\\"data\\\": [\\n {\\n \\\"name\\\": \\\"rawdata\\\",\\n \\\"url\\\": {\\n \\\"index\\\": \\\"otel-v1-apm-span-*\\\",\\n \\\"%context%\\\": true,\\n \\\"%timefield%\\\": \\\"startTime\\\",\\n \\\"body\\\": {\\n \\\"aggs\\\": {\\n \\\"services\\\": {\\n \\\"terms\\\": {\\n \\\"field\\\": \\\"serviceName\\\",\\n \\\"size\\\": 15\\n },\\n \\\"aggs\\\": {\\n \\\"time_buckets\\\": {\\n \\\"date_histogram\\\": {\\n \\\"field\\\": \\\"startTime\\\",\\n \\\"interval\\\": {\\\"%autointerval%\\\": true},\\n \\\"extended_bounds\\\": {\\n \\\"min\\\": {\\\"%timefilter%\\\": \\\"min\\\"},\\n \\\"max\\\": {\\\"%timefilter%\\\": \\\"max\\\"}\\n },\\n \\\"min_doc_count\\\":0\\n },\\n \\\"aggs\\\": {\\n \\\"duration\\\": {\\n \\\"avg\\\": {\\n \\\"missing\\\": 0,\\n \\\"script\\\": {\\n \\\"source\\\": \\\"!doc.containsKey('durationInNanos') || doc['durationInNanos'].empty ? 0 : doc['durationInNanos'].value / 1000000.0\\\",\\n \\\"lang\\\": \\\"painless\\\"\\n }\\n }\\n }\\n }\\n }\\n }\\n }\\n },\\n \\\"size\\\": 0\\n }\\n },\\n \\\"format\\\": {\\\"property\\\": \\\"aggregations.services.buckets\\\"}\\n },\\n {\\n \\\"name\\\": \\\"flatdata\\\",\\n \\\"source\\\": \\\"rawdata\\\",\\n \\\"transform\\\": [\\n {\\n \\\"type\\\": \\\"flatten\\\",\\n \\\"fields\\\": [\\\"time_buckets.buckets\\\"],\\n \\\"as\\\": [\\\"val\\\"]\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"count\\\",\\n \\\"expr\\\":\\\"datum.val.doc_count\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"duration\\\",\\n \\\"expr\\\": \\\"datum.val.duration.value == null ? 0 : datum.val.duration.value\\\"\\n },\\n {\\n \\\"type\\\": \\\"formula\\\",\\n \\\"as\\\": \\\"time\\\",\\n \\\"expr\\\": \\\"timeFormat(utcParse(datum.val.key_as_string,'%Y-%m-%dT%H:%M:%S.%LZ'), '%B %d, %Y %H:%M')\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"hasSelection\\\",\\n \\\"values\\\": [{}],\\n \\\"transform\\\": [\\n {\\\"type\\\": \\\"filter\\\", \\\"expr\\\": \\\"selected[0] != selected[1]\\\"}\\n ]\\n }\\n ],\\n \\\"scales\\\": [\\n {\\n \\\"name\\\": \\\"groupScale\\\",\\n \\\"type\\\": \\\"band\\\",\\n \\\"padding\\\": 0.1,\\n \\\"domain\\\": {\\\"data\\\": \\\"rawdata\\\", \\\"field\\\": \\\"key\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"height\\\"\\n },\\n {\\n \\\"name\\\": \\\"xScale\\\",\\n \\\"type\\\": \\\"time\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"flatdata\\\", \\\"field\\\": \\\"val.key\\\"},\\n \\\"range\\\": \\\"width\\\",\\n \\\"padding\\\": 5\\n },\\n {\\n \\\"name\\\": \\\"durationScale\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"flatdata\\\", \\\"field\\\": \\\"duration\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"bandwidth('groupScale')\\\"}, 0]\\n },\\n {\\n \\\"name\\\": \\\"yScale\\\",\\n \\\"type\\\": \\\"linear\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"flatdata\\\", \\\"field\\\": \\\"val.doc_count\\\"},\\n \\\"range\\\": [{\\\"signal\\\": \\\"bandwidth('groupScale')\\\"}, 0]\\n },\\n {\\n \\\"name\\\": \\\"colorScale\\\",\\n \\\"type\\\": \\\"ordinal\\\",\\n \\\"domain\\\": {\\\"data\\\": \\\"rawdata\\\", \\\"field\\\": \\\"key\\\", \\\"sort\\\": true},\\n \\\"range\\\": \\\"category\\\"\\n }\\n ],\\n \\\"axes\\\": [\\n {\\\"orient\\\": \\\"bottom\\\", \\\"scale\\\": \\\"xScale\\\", \\\"tickCount\\\": 5}\\n ],\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"currentX\\\",\\n \\\"value\\\": -1,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"view:mousemove\\\", \\\"update\\\": \\\"clamp(x(), 0, width)\\\"},\\n {\\\"events\\\": \\\"view:mouseout\\\", \\\"update\\\": \\\"-1\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"selected\\\",\\n \\\"value\\\": [0, 0],\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"@grapharea:mousedown\\\", \\\"update\\\": \\\"[x(), x()]\\\"},\\n {\\n \\\"events\\\": \\\"[@grapharea:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"[selected[0], clamp(x(), 0, width)]\\\"\\n },\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"delta\\\"},\\n \\\"update\\\": \\\"clampRange([anchor[0] + delta, anchor[1] + delta], 0, width)\\\"\\n },\\n {\\n \\\"events\\\": \\\"[@leftEdge:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"[clamp(x(), 0, width), selected[1]]\\\"\\n },\\n {\\n \\\"events\\\": \\\"[@rightEdge:mousedown, window:mouseup] > window:mousemove!\\\",\\n \\\"update\\\": \\\"[selected[0], clamp(x(), 0, width)]\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"anchor\\\",\\n \\\"value\\\": null,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"@selectedRect:mousedown\\\", \\\"update\\\": \\\"selected\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"xDown\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"@selectedRect:mousedown\\\", \\\"update\\\": \\\"x()\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"delta\\\",\\n \\\"value\\\": 0,\\n \\\"on\\\": [\\n {\\\"events\\\": \\\"[@selectedRect:mousedown, window:mouseup] > window:mousemove!\\\", \\\"update\\\": \\\"x() - xDown\\\"}\\n ]\\n },\\n {\\n \\\"name\\\": \\\"applyTimeFilter\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": \\\"@applyTimeFilterButton:click, @selectedRect:dblclick\\\",\\n \\\"update\\\": \\\"opensearchDashboardsSetTimeFilter(invert('xScale',selected[0]), invert('xScale',selected[1]))\\\"\\n },\\n {\\\"events\\\": \\\"@grapharea:dblclick\\\", \\\"update\\\": \\\"opensearchDashboardsSetTimeFilter('now-15d', 'now')\\\"}\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"grapharea\\\",\\n \\\"type\\\": \\\"group\\\",\\n \\\"from\\\": {\\n \\\"facet\\\": {\\\"name\\\": \\\"facets\\\", \\\"data\\\": \\\"rawdata\\\", \\\"field\\\": \\\"time_buckets.buckets\\\"}\\n },\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"y\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"field\\\": \\\"key\\\"},\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"x\\\": {\\\"value\\\": 0},\\n \\\"width\\\": {\\\"signal\\\": \\\"width\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0},\\n \\\"fill\\\": {\\\"value\\\": \\\"#000\\\"},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'Service': datum['key']}\\\"\\n }\\n }\\n },\\n \\\"axes\\\": [\\n {\\n \\\"orient\\\": \\\"left\\\",\\n \\\"scale\\\": \\\"yScale\\\",\\n \\\"title\\\": {\\\"signal\\\": \\\"parent.key\\\"},\\n \\\"tickCount\\\": 4,\\n \\\"encode\\\": {\\n \\\"title\\\": {\\n \\\"name\\\": \\\"extFilter\\\",\\n \\\"interactive\\\": true,\\n \\\"update\\\": {\\n \\\"cursor\\\": {\\\"value\\\": \\\"pointer\\\"},\\n \\\"fontSize\\\": {\\\"value\\\": 8},\\n \\\"fill\\\": {\\\"value\\\": \\\"steelblue\\\"}\\n },\\n \\\"hover\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"}\\n }\\n }\\n }\\n },\\n {\\n \\\"orient\\\": \\\"right\\\",\\n \\\"scale\\\": \\\"durationScale\\\",\\n \\\"tickCount\\\": 4,\\n \\\"title\\\": {\\\"signal\\\": \\\"parent.key\\\"},\\n \\\"encode\\\": {\\n \\\"title\\\": {\\n \\\"name\\\": \\\"extErrorFilter\\\",\\n \\\"interactive\\\": true,\\n \\\"update\\\": {\\n \\\"cursor\\\": {\\\"value\\\": \\\"pointer\\\"},\\n \\\"fontSize\\\": {\\\"value\\\": 8},\\n \\\"fill\\\": {\\\"value\\\": \\\"red\\\"}\\n },\\n \\\"hover\\\": {\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"}\\n }\\n }\\n }\\n }\\n ],\\n \\\"signals\\\": [\\n {\\n \\\"name\\\": \\\"updateErrFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"source\\\": \\\"scope\\\", \\\"markname\\\": \\\"extErrorFilter\\\", \\\"type\\\": \\\"click\\\"},\\n \\\"update\\\": \\\"{'match': {'status.code': {'query': 2, 'type': 'phrase'}}}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"applyErrorFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"updateErrFilterObj\\\"},\\n \\\"update\\\": \\\"length(domain('groupScale')) > 1 ? opensearchDashboardsAddFilter(updateErrFilterObj) : opensearchDashboardsRemoveFilter(updateErrFilterObj)\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"updateFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"source\\\": \\\"scope\\\", \\\"markname\\\": \\\"extFilter\\\", \\\"type\\\": \\\"click\\\"},\\n \\\"update\\\": \\\"{'match': {'serviceName': {'query': parent.key, 'type': 'phrase'}}}\\\"\\n }\\n ]\\n },\\n {\\n \\\"name\\\": \\\"applyFilterObj\\\",\\n \\\"on\\\": [\\n {\\n \\\"events\\\": {\\\"signal\\\": \\\"updateFilterObj\\\"},\\n \\\"update\\\": \\\"length(domain('groupScale')) > 1 ? opensearchDashboardsAddFilter(updateFilterObj) : opensearchDashboardsRemoveFilter(updateFilterObj)\\\"\\n }\\n ]\\n }\\n ],\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"line\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"facets\\\"},\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\\"scale\\\": \\\"xScale\\\", \\\"field\\\": \\\"key\\\"},\\n \\\"y\\\": {\\\"scale\\\": \\\"yScale\\\", \\\"field\\\": \\\"doc_count\\\"},\\n \\\"fill\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.2},\\n \\\"stroke\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}}\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"rect\\\",\\n \\\"from\\\": {\\n \\\"data\\\": \\\"facets\\\"\\n },\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\n \\\"scale\\\": \\\"xScale\\\",\\n \\\"field\\\": \\\"key\\\"\\n },\\n \\\"width\\\": { \\\"value\\\": 15},\\n\\\"cornerRadius\\\": { \\\"value\\\": 5 }\\n \\\"y\\\": {\\n \\\"scale\\\": \\\"durationScale\\\",\\n \\\"field\\\": \\\"duration.value\\\",\\n \\\"offset\\\": -3\\n },\\n \\\"y2\\\": {\\\"scale\\\": \\\"durationScale\\\", \\\"value\\\": 0}\\n\\n \\\"stroke\\\": {\\\"value\\\":\\\"black\\\"},\\n \\\"fill\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.8},\\n\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'Date': timeFormat(datum['key'], '%Y-%m-%d %H:%M'), 'Value': datum['duration']}\\\"\\n }\\n }\\n }\\n},\\n {\\n \\\"type\\\": \\\"symbol\\\",\\n \\\"style\\\": [\\\"point\\\"],\\n \\\"from\\\": {\\n \\\"data\\\": \\\"facets\\\"\\n },\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"x\\\": {\\n \\\"scale\\\": \\\"xScale\\\",\\n \\\"field\\\": \\\"key\\\"\\n },\\n \\\"y\\\": {\\n \\\"scale\\\": \\\"yScale\\\",\\n \\\"field\\\": \\\"doc_count\\\"\\n },\\n \\\"size\\\": {\\n \\\"value\\\": 8\\n },\\n \\\"stroke\\\": {\\\"scale\\\": \\\"colorScale\\\", \\\"field\\\": {\\\"parent\\\": \\\"key\\\"}},\\n \\\"tooltip\\\": {\\n \\\"signal\\\": \\\"{'Date': timeFormat(datum['key'], '%Y-%m-%d %H:%M'), 'Value': datum['doc_count']}\\\"\\n }\\n }\\n }\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"hasSelection\\\"},\\n \\\"marks\\\": [\\n {\\n \\\"name\\\": \\\"selectedRect\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"fill\\\": {\\\"value\\\": \\\"#333\\\"},\\n \\\"fillOpacity\\\": {\\\"value\\\": 0.2},\\n \\\"cursor\\\": {\\\"value\\\": \\\"move\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"selected[0]\\\"},\\n \\\"x2\\\": {\\\"signal\\\": \\\"selected[1]\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"leftEdge\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"width\\\": {\\\"value\\\": 2},\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"},\\n \\\"cursor\\\": {\\\"value\\\": \\\"ew-resize\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"selected[0]\\\"}\\n }\\n }\\n },\\n {\\n \\\"name\\\": \\\"rightEdge\\\",\\n \\\"type\\\": \\\"rect\\\",\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"height\\\": {\\\"scale\\\": \\\"groupScale\\\", \\\"band\\\": 1},\\n \\\"width\\\": {\\\"value\\\": 2},\\n \\\"fill\\\": {\\\"value\\\": \\\"firebrick\\\"},\\n \\\"cursor\\\": {\\\"value\\\": \\\"ew-resize\\\"},\\n \\\"x\\\": {\\\"signal\\\": \\\"selected[1]\\\"}\\n }\\n }\\n }\\n ]\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"group\\\",\\n \\\"name\\\": \\\"applyTimeFilterButton\\\",\\n \\\"from\\\": {\\\"data\\\": \\\"hasSelection\\\"},\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"cursor\\\": {\\\"value\\\": \\\"pointer\\\"},\\n \\\"cornerRadius\\\": {\\\"value\\\": 6},\\n \\\"fill\\\": {\\\"value\\\": \\\"#f5f5f5\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"#c1c1c1\\\"},\\n \\\"strokeWidth\\\": {\\\"value\\\": 2},\\n \\\"xc\\\": {\\\"signal\\\": \\\"width/2\\\"},\\n \\\"y\\\": {\\\"value\\\": 30},\\n \\\"width\\\": {\\\"value\\\": 80},\\n \\\"height\\\": {\\\"value\\\": 30},\\n \\\"opacity\\\": {\\\"value\\\": 1}\\n },\\n \\\"hover\\\": {\\n \\\"opacity\\\": {\\\"value\\\": 0.7}\\n }\\n },\\n \\\"marks\\\": [\\n {\\n \\\"type\\\": \\\"text\\\",\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"xc\\\": {\\\"field\\\": {\\\"group\\\": \\\"width\\\"}, \\\"mult\\\": 0.5},\\n \\\"yc\\\": {\\\"field\\\": {\\\"group\\\": \\\"height\\\"}, \\\"mult\\\": 0.5, \\\"offset\\\": 2},\\n \\\"align\\\": {\\\"value\\\": \\\"center\\\"},\\n \\\"baseline\\\": {\\\"value\\\": \\\"middle\\\"},\\n \\\"fontWeight\\\": {\\\"value\\\": \\\"bold\\\"},\\n \\\"text\\\": {\\\"value\\\": \\\"Apply Filter\\\"}\\n }\\n }\\n }\\n ]\\n },\\n {\\n \\\"type\\\": \\\"rule\\\",\\n \\\"interactive\\\": false,\\n \\\"encode\\\": {\\n \\\"update\\\": {\\n \\\"y\\\": {\\\"value\\\": 0},\\n \\\"y2\\\": {\\\"signal\\\": \\\"height\\\"},\\n \\\"stroke\\\": {\\\"value\\\": \\\"gray\\\"},\\n \\\"strokeDash\\\": {\\\"value\\\": [2, 1]},\\n \\\"x\\\": {\\\"signal\\\": \\\"max(currentX,0)\\\"},\\n \\\"strokeOpacity\\\": {\\\"signal\\\": \\\"currentX > 0 ? 1 : 0\\\"}\\n }\\n }\\n }\\n ]\\n}\\n\"}}"},"id":"cb36546d-6eff-460a-a82f-06dd192be2b9","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2024-04-19T20:23:11.470Z","version":"Wzc3OCwyXQ=="}
-{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"serviceName\",\"negate\":false,\"params\":{\"query\":\"recommendationservice\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"serviceName\":\"recommendationservice\"}}}]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"2.13.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":20,\"i\":\"807c5b1d-54dc-4124-bbc0-27a96e41a805\"},\"panelIndex\":\"807c5b1d-54dc-4124-bbc0-27a96e41a805\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"2.13.0\",\"gridData\":{\"x\":24,\"y\":0,\"w\":24,\"h\":13,\"i\":\"2885c3d8-cecc-464f-abc1-4221c528952e\"},\"panelIndex\":\"2885c3d8-cecc-464f-abc1-4221c528952e\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"2.13.0\",\"gridData\":{\"x\":24,\"y\":13,\"w\":24,\"h\":13,\"i\":\"91dbd986-baa1-4961-9e56-65fbda6b612d\"},\"panelIndex\":\"91dbd986-baa1-4961-9e56-65fbda6b612d\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"2.13.0\",\"gridData\":{\"x\":0,\"y\":20,\"w\":24,\"h\":37,\"i\":\"8622cb4c-e564-4df6-813a-75ac81bfe7bf\"},\"panelIndex\":\"8622cb4c-e564-4df6-813a-75ac81bfe7bf\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"2.13.0\",\"gridData\":{\"x\":24,\"y\":26,\"w\":24,\"h\":31,\"i\":\"8c81d68e-3686-409e-8e4a-00cfbd600715\"},\"panelIndex\":\"8c81d68e-3686-409e-8e4a-00cfbd600715\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"}]","timeRestore":false,"title":"single-service-correlated-dashboard","version":1},"id":"single-service-correlated-dashboard-1_0_0_ID","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"f67e4370-d84f-11ee-8f84-1b81ddb8574c","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"a75f6330-d9d2-11ee-9203-cf873e97f443","name":"panel_0","type":"visualization"},{"id":"e7c75468-4e40-4b30-adad-b1d64962c76f","name":"panel_1","type":"visualization"},{"id":"f7ed5710-23c5-485e-8d2e-5d91c7530a7c","name":"panel_2","type":"visualization"},{"id":"546033dc-4047-4d3c-87f9-dc8d5566a438","name":"panel_3","type":"visualization"},{"id":"cb36546d-6eff-460a-a82f-06dd192be2b9","name":"panel_4","type":"visualization"}],"type":"dashboard","updated_at":"2024-04-19T20:24:42.321Z","version":"Wzc4NiwyXQ=="}
-{"exportedCount":8,"missingRefCount":0,"missingReferences":[]}
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/assets/sense.json b/server/adaptors/integrations/__data__/repository/otel-services/assets/sense.json
new file mode 100644
index 0000000000..8b5dc1dcdf
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/otel-services/assets/sense.json
@@ -0,0 +1 @@
+{"id":"eb36bc49-d640-4d5f-a597-906cf1a0993d","createdAt":1714859639203,"updatedAt":1714910453255,"text":"# This is a SimpleSchema for Observability based mapping setup integration \n# The OTEL schema defines the four signale which compose the root elements of the OTEL protocol. :\n\n# (Traces) Setup ss4o_traces_template\n# (Logs) Setup ss4o_logs_template\n# (Metrics) Setup ss4o_metrics_template\n# (Services) Setup ss4o_services_template\n\n# ------------------------------------------------------------------------------------------------------------------------------------\n#\n# The workflow includes the following steps\n# - create a new `ss4o_traces_template` index template\n# - create a new `ss4o_logs_template` index template\n# - create a new `ss4o_metrics_template` index template\n# - create a new `ss4o_services_template` index template\n\n\n# For Additional Information visit : https://github.com/opensearch-project/opensearch-catalog/integrations/observability/otel-schema-setup/info\n# ------------------------------------------------------------------------------------------------------------------------------------\n\n# Create the ss4o_traces_template index template \n# >> ADD the \"data_stream\":{} line to apply for data-streams\nPUT _index_template/ss4o_traces_template\n{\n \"index_patterns\": [\n \"ss4o_traces-*-*\"\n ],\n \"template\": {\n \"mappings\": {\n \"_meta\": {\n \"version\": \"1.0.0\",\n \"catalog\": \"observability\",\n \"type\": \"traces\",\n \"component\": \"trace\",\n \"correlations\": [\n {\n \"field\": \"serviceName\",\n \"foreign-schema\": \"services\",\n \"foreign-field\": \"spanId\"\n }\n ]\n },\n \"dynamic_templates\": [\n {\n \"events_attributes_map\": {\n \"mapping\": {\n \"type\": \"keyword\"\n },\n \"path_match\": \"events.attributes.*\"\n }\n },\n {\n \"links_attributes_map\": {\n \"mapping\": {\n \"type\": \"keyword\"\n },\n \"path_match\": \"links.attributes.*\"\n }\n },\n {\n \"instrumentation_scope_attributes_map\": {\n \"mapping\": {\n \"type\": \"keyword\"\n },\n \"path_match\": \"instrumentationScope.attributes.*\"\n }\n }\n ],\n \"_source\": {\n \"enabled\": true\n },\n \"properties\": {\n \"traceId\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"spanId\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"traceState\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n }\n }\n },\n \"parentSpanId\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"name\": {\n \"ignore_above\": 1024,\n \"type\": \"keyword\"\n },\n \"kind\": {\n \"ignore_above\": 128,\n \"type\": \"keyword\"\n },\n \"startTime\": {\n \"type\": \"date_nanos\"\n },\n \"endTime\": {\n \"type\": \"date_nanos\"\n },\n \"droppedAttributesCount\": {\n \"type\": \"long\"\n },\n \"droppedEventsCount\": {\n \"type\": \"long\"\n },\n \"droppedLinksCount\": {\n \"type\": \"long\"\n },\n \"status\": {\n \"properties\": {\n \"code\": {\n \"type\": \"long\"\n },\n \"message\": {\n \"ignore_above\": 128,\n \"type\": \"keyword\"\n }\n }\n },\n \"attributes\": {\n \"type\": \"object\",\n \"properties\": {\n \"serviceName\": {\n \"type\": \"keyword\"\n },\n \"data_stream\": {\n \"properties\": {\n \"dataset\": {\n \"ignore_above\": 128,\n \"type\": \"keyword\"\n },\n \"namespace\": {\n \"ignore_above\": 128,\n \"type\": \"keyword\"\n },\n \"type\": {\n \"ignore_above\": 56,\n \"type\": \"keyword\"\n }\n }\n }\n }\n },\n \"events\": {\n \"type\": \"nested\",\n \"properties\": {\n \"name\": {\n \"ignore_above\": 1024,\n \"type\": \"keyword\"\n },\n \"@timestamp\": {\n \"type\": \"date_nanos\"\n },\n \"observedTimestamp\": {\n \"type\": \"date_nanos\"\n }\n }\n },\n \"links\": {\n \"type\": \"nested\",\n \"properties\": {\n \"traceId\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"spanId\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"traceState\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n }\n }\n }\n }\n },\n \"instrumentationScope\": {\n \"properties\": {\n \"name\": {\n \"type\": \"keyword\"\n },\n \"version\": {\n \"type\": \"keyword\"\n },\n \"droppedAttributesCount\": {\n \"type\": \"integer\"\n },\n \"schemaUrl\": {\n \"type\": \"keyword\"\n }\n }\n },\n \"schemaUrl\": {\n \"type\": \"keyword\"\n }\n }\n },\n \"aliases\" : {\n \"otel-v1-apm-span\" : {}\n }\n },\n \"composed_of\": [],\n \"version\": 1,\n \"_meta\": {\n \"description\": \"Observability Traces Mapping Template\",\n \"catalog\": \"observability\",\n \"type\": \"traces\",\n \"correlations\": [\n {\n \"field\": \"serviceName\",\n \"foreign-schema\": \"services\",\n \"foreign-field\": \"serviceName\"\n }\n ]\n }\n}\n\n# Create the ss4o_logs_template index template\n# >> add the \"data_stream\":{} line to apply for data-streams\nPUT _index_template/ss4o_logs_template\n{\n \"index_patterns\": [\"ss4o_logs-*-*\"],\n \"priority\": 900,\n \"template\": {\n \"mappings\": {\n \"_meta\": {\n \"version\": \"1.0.0\",\n \"catalog\": \"observability\",\n \"type\": \"logs\",\n \"component\": \"log\",\n \"correlations\": [\n {\n \"field\": \"spanId\",\n \"foreign-schema\": \"traces\",\n \"foreign-field\": \"spanId\"\n },\n {\n \"field\": \"traceId\",\n \"foreign-schema\": \"traces\",\n \"foreign-field\": \"traceId\"\n }\n ]\n },\n \"_source\": {\n \"enabled\": true\n },\n \"dynamic_templates\": [\n {\n \"instrumentation_scope_attributes_map\": {\n \"mapping\": {\n \"type\": \"keyword\"\n },\n \"path_match\": \"instrumentationScope.attributes.*\"\n }\n }\n ],\n \"properties\": {\n \"severity\": {\n \"properties\": {\n \"number\": {\n \"type\": \"long\"\n },\n \"text\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n }\n }\n }\n }\n },\n \"attributes\": {\n \"type\": \"object\",\n \"properties\": {\n \"data_stream\": {\n \"properties\": {\n \"dataset\": {\n \"ignore_above\": 128,\n \"type\": \"keyword\"\n },\n \"namespace\": {\n \"ignore_above\": 128,\n \"type\": \"keyword\"\n },\n \"type\": {\n \"ignore_above\": 56,\n \"type\": \"keyword\"\n }\n }\n }\n }\n },\n \"body\": {\n \"type\": \"text\"\n },\n \"@message\": {\n \"type\": \"alias\",\n \"path\": \"body\"\n },\n \"@timestamp\": {\n \"type\": \"date\"\n },\n \"observedTimestamp\": {\n \"type\": \"date\"\n },\n \"observerTime\": {\n \"type\": \"alias\",\n \"path\": \"observedTimestamp\"\n },\n \"traceId\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"spanId\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"schemaUrl\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n }\n }\n },\n \"instrumentationScope\": {\n \"properties\": {\n \"name\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 128\n }\n }\n },\n \"version\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n }\n }\n },\n \"dropped_attributes_count\": {\n \"type\": \"integer\"\n },\n \"schemaUrl\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n }\n }\n }\n }\n },\n \"event\": {\n \"properties\": {\n \"domain\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"name\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"source\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"category\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"type\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"kind\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"result\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"exception\": {\n \"properties\": {\n \"message\": {\n \"ignore_above\": 1024,\n \"type\": \"keyword\"\n },\n \"type\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"stacktrace\": {\n \"type\": \"text\"\n }\n }\n }\n }\n }\n }\n },\n \"settings\": {\n \"index\": {\n \"mapping\": {\n \"total_fields\": {\n \"limit\": 10000\n }\n },\n \"refresh_interval\": \"5s\"\n }\n },\n \"aliases\" : {\n \"otel-events\" : {}\n }\n },\n \"composed_of\": [],\n \"version\": 1\n}\n\n# Create the ss4o_metrics_template index template\n# >> add the \"data_stream\":{} line to apply for data-streams\nPUT _index_template/ss4o_metrics_template\n{\n \"index_patterns\": [\n \"ss4o_metrics-*-*\"\n ],\n \"template\": {\n \"mappings\": {\n \"_meta\": {\n \"version\": \"1.0.0\",\n \"catalog\": \"observability\",\n \"type\": \"metrics\",\n \"component\": \"metrics\",\n \"correlations\" : [\n {\n \"field\": \"spanId\",\n \"foreign-schema\" : \"traces\",\n \"foreign-field\" : \"spanId\"\n },\n {\n \"field\": \"traceId\",\n \"foreign-schema\" : \"traces\",\n \"foreign-field\" : \"traceId\"\n }\n ]\n },\n \"_source\": {\n \"enabled\": true\n },\n \"dynamic_templates\": [\n {\n \"exemplar_attributes_map\": {\n \"mapping\": {\n \"type\": \"keyword\"\n },\n \"path_match\": \"exemplar.attributes.*\"\n }\n },\n {\n \"instrumentation_scope_attributes_map\": {\n \"mapping\": {\n \"type\": \"keyword\"\n },\n \"path_match\": \"instrumentationScope.attributes.*\"\n }\n }\n ],\n \"properties\": {\n \"name\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n },\n \"attributes\": {\n \"type\": \"object\",\n \"properties\": {\n \"data_stream\": {\n \"properties\": {\n \"dataset\": {\n \"ignore_above\": 128,\n \"type\": \"keyword\"\n },\n \"namespace\": {\n \"ignore_above\": 128,\n \"type\": \"keyword\"\n },\n \"type\": {\n \"ignore_above\": 56,\n \"type\": \"keyword\"\n }\n }\n }\n }\n },\n \"description\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n }\n }\n },\n \"unit\": {\n \"type\": \"keyword\",\n \"ignore_above\": 128\n },\n \"kind\": {\n \"type\": \"keyword\",\n \"ignore_above\": 128\n },\n \"aggregationTemporality\": {\n \"type\": \"keyword\",\n \"ignore_above\": 128\n },\n \"monotonic\": {\n \"type\": \"boolean\"\n },\n \"startTime\": {\n \"type\": \"date\"\n },\n \"@timestamp\": {\n \"type\": \"date\"\n },\n \"observedTimestamp\": {\n \"type\": \"date_nanos\"\n },\n \"value@int\": {\n \"type\": \"integer\"\n },\n \"value@double\": {\n \"type\": \"double\"\n },\n \"buckets\": {\n \"type\" : \"nested\",\n \"properties\": {\n \"count\": {\n \"type\": \"long\"\n },\n \"sum\": {\n \"type\": \"double\"\n },\n \"max\": {\n \"type\": \"float\"\n },\n \"min\": {\n \"type\": \"float\"\n }\n }\n },\n \"bucketCount\": {\n \"type\": \"long\"\n },\n \"bucketCountsList\": {\n \"type\": \"long\"\n },\n \"explicitBoundsList\": {\n \"type\": \"float\"\n },\n \"explicitBoundsCount\": {\n \"type\": \"float\"\n },\n \"quantiles\": {\n \"properties\": {\n \"quantile\": {\n \"type\": \"double\"\n },\n \"value\": {\n \"type\": \"double\"\n }\n }\n },\n \"quantileValuesCount\": {\n \"type\": \"long\"\n },\n \"positiveBuckets\": {\n \"type\" : \"nested\",\n \"properties\": {\n \"count\": {\n \"type\": \"long\"\n },\n \"max\": {\n \"type\": \"float\"\n },\n \"min\": {\n \"type\": \"float\"\n }\n }\n },\n \"negativeBuckets\": {\n \"type\" : \"nested\",\n \"properties\": {\n \"count\": {\n \"type\": \"long\"\n },\n \"max\": {\n \"type\": \"float\"\n },\n \"min\": {\n \"type\": \"float\"\n }\n }\n },\n \"negativeOffset\": {\n \"type\": \"integer\"\n },\n \"positiveOffset\": {\n \"type\": \"integer\"\n },\n \"zeroCount\": {\n \"type\": \"long\"\n },\n \"scale\": {\n \"type\": \"long\"\n },\n \"max\": {\n \"type\": \"float\"\n },\n \"min\": {\n \"type\": \"float\"\n },\n \"sum\": {\n \"type\": \"float\"\n },\n \"count\": {\n \"type\": \"long\"\n },\n \"exemplar\": {\n \"properties\": {\n \"time\": {\n \"type\": \"date\"\n },\n \"traceId\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n },\n \"spanId\": {\n \"ignore_above\": 256,\n \"type\": \"keyword\"\n }\n }\n },\n \"instrumentationScope\": {\n \"properties\": {\n \"name\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n },\n \"version\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n },\n \"droppedAttributesCount\": {\n \"type\": \"integer\"\n },\n \"schemaUrl\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n }\n }\n }\n }\n },\n \"schemaUrl\": {\n \"type\": \"text\",\n \"fields\": {\n \"keyword\": {\n \"type\": \"keyword\",\n \"ignore_above\": 256\n }\n }\n }\n }\n },\n \"aliases\" : {\n \"otel-metrics\" : {}\n },\n \"settings\": {\n \"index\": {\n \"mapping\": {\n \"total_fields\": {\n \"limit\": 10000\n }\n },\n \"refresh_interval\": \"5s\"\n }\n }\n },\n \"composed_of\": [],\n \"version\": 1,\n \"_meta\": {\n \"description\": \"Observability Metrics Mapping Template\",\n \"catalog\": \"observability\",\n \"type\": \"metrics\",\n \"correlations\" : [\n {\n \"field\": \"spanId\",\n \"foreign-schema\" : \"traces\",\n \"foreign-field\" : \"spanId\"\n },\n {\n \"field\": \"traceId\",\n \"foreign-schema\" : \"traces\",\n \"foreign-field\" : \"traceId\"\n }\n ]\n }\n}\n\n# Create the ss4o_services_template index template\n# >> add the \"data_stream\":{} line to apply for data-streams\nPUT _index_template/ss4o_services_template\n{\n \"index_patterns\": [\n \"ss4o_services-*-*\"\n ],\n \"template\": {\n \"mappings\": {\n \"_meta\": {\n \"version\": \"1.0.0\",\n \"catalog\": \"observability\",\n \"type\": \"traces\",\n \"component\": \"services\",\n \"correlations\": [\n {\n \"field\": \"traceGroupName\",\n \"foreign-schema\": \"traceGroups\",\n \"foreign-field\": \"traceGroup\"\n }\n ]\n },\n \"_source\": {\n \"enabled\": true\n },\n \"properties\": {\n \"destination\": {\n \"properties\": {\n \"domain\": {\n \"type\": \"keyword\",\n \"ignore_above\": 1024\n },\n \"resource\": {\n \"type\": \"keyword\",\n \"ignore_above\": 1024\n }\n }\n },\n \"hashId\": {\n \"type\": \"keyword\",\n \"ignore_above\": 1024\n },\n \"serviceName\": {\n \"type\": \"keyword\",\n \"ignore_above\": 1024\n },\n \"kind\": {\n \"type\": \"keyword\",\n \"ignore_above\": 1024\n },\n \"target\": {\n \"properties\": {\n \"domain\": {\n \"type\": \"keyword\",\n \"ignore_above\": 1024\n },\n \"resource\": {\n \"type\": \"keyword\",\n \"ignore_above\": 1024\n }\n }\n },\n \"traceGroupName\": {\n \"type\": \"keyword\",\n \"ignore_above\": 1024\n }\n }\n },\n \"aliases\" : {\n \"open otel-v1-apm-service-map\" : {}\n },\n \"settings\": {\n \"index\": {\n \"mapping\": {\n \"total_fields\": {\n \"limit\": 10000\n }\n },\n \"refresh_interval\": \"5s\"\n }\n }\n },\n \"composed_of\": [],\n \"version\": 1,\n \"_meta\": {\n \"description\": \"Simple Schema For Observability Service\",\n \"catalog\": \"observability\",\n \"type\": \"services\",\n \"correlations\": [\n {\n \"field\": \"traceGroupName\",\n \"foreign-schema\": \"traceGroups\",\n \"foreign-field\": \"traceGroup\"\n }\n ]\n }\n}\n"}
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/DemoLandingPage.md b/server/adaptors/integrations/__data__/repository/otel-services/info/DemoLandingPage.md
deleted file mode 100644
index 1669e56236..0000000000
--- a/server/adaptors/integrations/__data__/repository/otel-services/info/DemoLandingPage.md
+++ /dev/null
@@ -1,64 +0,0 @@
-
-_
-# OpenSearch Observability OTEL Demo
-
-Welcome to the [OpenSearch](https://opensearch.org/docs/latest) OpenTelemetry [Demo](https://opentelemetry.io/docs/demo/) documentation, which covers how to install and run the demo, and some scenarios you can use to view OpenTelemetry in action.
-
-## Purpose
-The purpose of this demo is to demonstrate the different capabilities of OpenSearch Observability to investigate and reflect your system.
-
-
-
-### Services
-[OTEL DEMO](https://opentelemetry.io/docs/demo/services/) Describes the list of services that are composing the Astronomy Shop.
-
-The main services that are open to user interactions:
-
-- [Dashboards](https://observability.playground.opensearch.org/)
-
-- [Demo Proxy](https://observability.playground.demo-proxy.opensearch.org/)
-
-- [Demo loader](https://observability.playground.demo-loader.opensearch.org/)
-
-- [Demo feature-flag](https://observability.playground.demo-feature-flag.opensearch.org/)
-
-### Screenshots
-_**The shopping App**_
-
-
-_**The feature flag**_
-
-
-_**The load generator**_
-
-
----
-### Ingestion
-The ingestion capabilities for OpenSearch is to be able to support multiple pipelines:
-- [Data-Prepper](https://github.com/opensearch-project/data-prepper/) is an OpenSearch ingestion project that allows ingestion of OTEL standard signals using Otel-Collector
-- [Jaeger](https://opensearch.org/docs/latest/observing-your-data/trace/trace-analytics-jaeger/) is an ingestion framework which has a build in capability for pushing OTEL signals into OpenSearch
-- [Fluent-Bit](https://docs.fluentbit.io/manual/pipeline/outputs/opensearch) is an ingestion framework which has a build in capability for pushing OTEL signals into OpenSearch
-
-### Integrations
-The integration service is a list of pre-canned assets that are loaded in a combined manner to allow users the ability for simple and automatic way to discover and review their services topology.
-
-These (demo-sample) integrations contain the following assets:
-- components & index template mapping
-- datasources
-- data-stream & indices
-- queries
-- dashboards_
-
-### Tutorials
-
-Welcome to the OpenSearch Observability tutorials!
-
-This tutorial is designed to guide users in the Observability domain through the process of using the OpenSearch Observability plugin. By the end of this tutorial, you will be familiar with building dashboards, creating Pipe Processing Language (PPL) queries, federating metrics from Prometheus data sources, and conducting root cause analysis investigations on your data.
-
-### Overview
-
-This tutorial uses the OpenTelemetry demo application, an e-commerce application for an astronomy shop. The application includes multiple microservices, each providing different functionalities. These services are monitored and traced using the OpenTelemetry trace collector and additional agents.
-The resulting traces and logs are stored in structured indices in OpenSearch indices, following the OpenTelemetry format.
-This provides a realistic environment for learning and applying Observability concepts, investigation and diagnostic patterns.
-
-[Happy Learning](README.md)
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/GettingStarted.md b/server/adaptors/integrations/__data__/repository/otel-services/info/GettingStarted.md
new file mode 100644
index 0000000000..01d7400262
--- /dev/null
+++ b/server/adaptors/integrations/__data__/repository/otel-services/info/GettingStarted.md
@@ -0,0 +1,119 @@
+# Getting Started
+Getting started with the OTEL demo including running the OpenSearch Server and Dashboard.
+
+`docker-compose up -d` starts all the services and initiates the load-generator activity for synthetically creating user activity on the demo web store.
+
+The following web-pages can be directly access to review the load generator
+- http://localhost:8089/
+
+- Here the synthetic testing process can be started
+
+
+
+The following web-pages can be directly access to actually simulate store purchase
+- http://localhost:8080/ (front-end) OR http://localhost:90 (nginx-forntend proxy)
+- Here the actual shop demo can be used (simulated demo shop ...)
+
+
+
+
+---
+
+## Logging In Dashboard
+
+Once all services are up and running - log-in to the Dashboard and enter the next credentials
+
+**User: `admin` | Password: `my_%New%_passW0rd!@#`**
+
+- http://localhost:5601/
+- OpenSearch Dashboard login
+
+
+
+## Store URLs in session storage
+Enable Store URLs in session storage for allowing to view and edit Vega based visualizations
+- Once logged in, go to [Advanced Setting](http://localhost:5601/app/management/opensearch-dashboards/settings)
+ 
+
+## Installing OTEL Services Demo
+
+Install OpenTelemetry Integration - navigate to the Integration sections and select the OTEL-Demo Integration
+- Go to the [available integrations ](http://localhost:5601/app/integrations#/available) dialog
+- Select the [OTEL-Demo Integration](http://localhost:5601/app/integrations#/available/otel-services)
+ 
+ 
+
+- Run the set-up integration and choose the `otel-*` index name as the integration data source
+
+
+
+- View all the Generated Dashboards:
+
+
+
+## Ingestion Rate Dashboard
+This dashboard show the 3 signals ingestion rate as they are shipped via data-prepper into OpenSearch indices
+
+
+
+## Services High Level Dashboards View
+This dashboard show the 3 signals ingestion rate as they are shipped via data-prepper into OpenSearch indices
+
+
+## Single Service Details Dashboards View
+This dashboard show the specific service details including associated high level view of the metrics collected for the service
+
+
+## Service Metrics View
+
+### Service Metrics system projection Dashboards
+This dashboard show the specific service details in particular the system related metrics collected for the service
+
+
+
+### Service Metrics network projection Dashboards
+This dashboard show the specific service details in particular the network related metrics collected for the service
+
+
+
+## Trace Analytics
+Traces can also be seen using the following [menu-item](http://localhost:5601/app/observability-traces#/traces)
+
+- showing a table of traces with their duration/errors rates
+
+
+- showing a specific trace's spans water fall chart
+---
+## Services Analytics
+Services can be also be seen using the following [menu-item](http://localhost:5601/app/observability-traces#/services)
+
+
+- showing the table of services including their Group /Avg Duration / Errors
+
+
+- showing the service map graph with the services relationships
+
+
+- showing the services trace-group charts according to Avg Duration / Traces-Error rates / Traces Request rates
+
+
+---
+## Metrics Analytics
+
+### Setting Up Prometheus `datasource`
+- First [setup](http://localhost:5601/app/datasources#/new) the Prometheus datasource we wanted to connect with
+ 
+
+### Query Prometheus OTEL metrics
+- [Select the OTEL metrics](http://localhost:5601/app/observability-metrics#/) (Prometheus / OpenSearch) we want to display
+ 
+ 
+
+### Query OpenSearch OTEL metrics
+- Select the `ss4o_metrics-*-*` based index to view the OTEL metrics stored in OpenSearch:
+ 
+ 
+
+## Discover - Log Exploration
+- [Discover](http://localhost:5601/app/data-explorer/discover) the OTEL logs stored inside OpenSearch
+ 
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/README.md b/server/adaptors/integrations/__data__/repository/otel-services/info/README.md
index 38b29668a5..2b68fe0202 100644
--- a/server/adaptors/integrations/__data__/repository/otel-services/info/README.md
+++ b/server/adaptors/integrations/__data__/repository/otel-services/info/README.md
@@ -50,5 +50,5 @@ Happy Learning!
#### 2. [Observability Introduction](Observability Introduction.md)
-#### 3. [DemoLandingPage.md](DemoLandingPage.md)
+#### 3. [GettingStarted.md](GettingStarted.md)
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/amp-services-network-metrics-details.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/amp-services-network-metrics-details.png
new file mode 100644
index 0000000000..9c1dfd63a5
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/amp-services-network-metrics-details.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/amp-services-system-metrics-details.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/amp-services-system-metrics-details.png
new file mode 100644
index 0000000000..b8ff8ac478
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/amp-services-system-metrics-details.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/configure-prometheus-datasource.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/configure-prometheus-datasource.png
new file mode 100644
index 0000000000..24b93a762a
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/configure-prometheus-datasource.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/dashboard-login.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/dashboard-login.png
new file mode 100644
index 0000000000..197a4cab23
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/dashboard-login.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/demo-app.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/demo-app.png
new file mode 100644
index 0000000000..98e5d42b35
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/demo-app.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/dev-tool-schema-notebook.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/dev-tool-schema-notebook.png
new file mode 100644
index 0000000000..33fce2fb00
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/dev-tool-schema-notebook.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/import-dev-console-sense-notebook.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/import-dev-console-sense-notebook.png
new file mode 100644
index 0000000000..e571b72105
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/import-dev-console-sense-notebook.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/integration-otel-services-dashboards.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/integration-otel-services-dashboards.png
new file mode 100644
index 0000000000..0e722ccf4e
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/integration-otel-services-dashboards.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/integration-otel-services-info.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/integration-otel-services-info.png
new file mode 100644
index 0000000000..8856c0f098
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/integration-otel-services-info.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/integration-otel-services-selection.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/integration-otel-services-selection.png
new file mode 100644
index 0000000000..e1de6bd196
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/integration-otel-services-selection.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/integration-otel-services-setup.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/integration-otel-services-setup.png
new file mode 100644
index 0000000000..214b953a46
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/integration-otel-services-setup.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/load-generator.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/load-generator.png
new file mode 100644
index 0000000000..6fa68486bd
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/load-generator.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/logs-discovery-otel.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/logs-discovery-otel.png
new file mode 100644
index 0000000000..20a6f265d7
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/logs-discovery-otel.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/metrics-analytics-opensearch-otel-metrics-select-metrics.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/metrics-analytics-opensearch-otel-metrics-select-metrics.png
new file mode 100644
index 0000000000..07abad30c4
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/metrics-analytics-opensearch-otel-metrics-select-metrics.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/metrics-analytics-opensearch-otel-metrics.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/metrics-analytics-opensearch-otel-metrics.png
new file mode 100644
index 0000000000..53180037dc
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/metrics-analytics-opensearch-otel-metrics.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/metrics-analytics-prometheus-select-metrics.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/metrics-analytics-prometheus-select-metrics.png
new file mode 100644
index 0000000000..a6bbd8e106
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/metrics-analytics-prometheus-select-metrics.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/metrics-analytics-prometheus.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/metrics-analytics-prometheus.png
new file mode 100644
index 0000000000..2a5e2ca545
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/metrics-analytics-prometheus.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/otel-ingestion-rate-dashboard.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/otel-ingestion-rate-dashboard.png
new file mode 100644
index 0000000000..06f75df5d0
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/otel-ingestion-rate-dashboard.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/service-analytics-dialog-list.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/service-analytics-dialog-list.png
new file mode 100644
index 0000000000..25dd2b27e0
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/service-analytics-dialog-list.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/service-analytics-dialog-services_map.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/service-analytics-dialog-services_map.png
new file mode 100644
index 0000000000..69ea55c401
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/service-analytics-dialog-services_map.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/service-analytics-dialog-trace_group.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/service-analytics-dialog-trace_group.png
new file mode 100644
index 0000000000..11e999a568
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/service-analytics-dialog-trace_group.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/services-general-dashboard.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/services-general-dashboard.png
new file mode 100644
index 0000000000..51183b8058
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/services-general-dashboard.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/specific-service-dashboard.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/specific-service-dashboard.png
new file mode 100644
index 0000000000..e7b44768ca
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/specific-service-dashboard.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/store-url-in-session.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/store-url-in-session.png
new file mode 100644
index 0000000000..520a20da20
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/store-url-in-session.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/traces-analytics-dialog-spans.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/traces-analytics-dialog-spans.png
new file mode 100644
index 0000000000..21be60594d
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/traces-analytics-dialog-spans.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/img/traces-analytics-dialog.png b/server/adaptors/integrations/__data__/repository/otel-services/info/img/traces-analytics-dialog.png
new file mode 100644
index 0000000000..5833e54c63
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/info/img/traces-analytics-dialog.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/info/notebook.json b/server/adaptors/integrations/__data__/repository/otel-services/info/notebook.json
index e69de29bb2..006705060b 100644
--- a/server/adaptors/integrations/__data__/repository/otel-services/info/notebook.json
+++ b/server/adaptors/integrations/__data__/repository/otel-services/info/notebook.json
@@ -0,0 +1,832 @@
+GET _cat/indices/otel*
+
+# This is a SimpleSchema for Observability based mapping setup integration
+# The OTEL schema defines the four signale which compose the root elements of the OTEL protocol. :
+
+# (Traces) Setup ss4o_traces_template
+# (Logs) Setup ss4o_logs_template
+# (Metrics) Setup ss4o_metrics_template
+# (Services) Setup ss4o_services_template
+
+# ------------------------------------------------------------------------------------------------------------------------------------
+#
+# The workflow includes the following steps
+# - create a new `ss4o_traces_template` index template
+# - create a new `ss4o_logs_template` index template
+# - create a new `ss4o_metrics_template` index template
+# - create a new `ss4o_services_template` index template
+
+
+# For Additional Information visit : https://github.com/opensearch-project/opensearch-catalog/integrations/observability/otel-schema-setup/info
+# ------------------------------------------------------------------------------------------------------------------------------------
+
+# Create the ss4o_traces_template index template
+# >> ADD the "data_stream":{} line to apply for data-streams
+PUT _index_template/ss4o_traces_template
+{
+ "index_patterns": [
+ "ss4o_traces-*-*"
+ ],
+ "template": {
+ "mappings": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "observability",
+ "type": "traces",
+ "component": "trace",
+ "correlations": [
+ {
+ "field": "serviceName",
+ "foreign-schema": "services",
+ "foreign-field": "spanId"
+ }
+ ]
+ },
+ "dynamic_templates": [
+ {
+ "events_attributes_map": {
+ "mapping": {
+ "type": "keyword"
+ },
+ "path_match": "events.attributes.*"
+ }
+ },
+ {
+ "links_attributes_map": {
+ "mapping": {
+ "type": "keyword"
+ },
+ "path_match": "links.attributes.*"
+ }
+ },
+ {
+ "instrumentation_scope_attributes_map": {
+ "mapping": {
+ "type": "keyword"
+ },
+ "path_match": "instrumentationScope.attributes.*"
+ }
+ }
+ ],
+ "_source": {
+ "enabled": true
+ },
+ "properties": {
+ "traceId": {
+ "ignore_above": 256,
+ "type": "keyword"
+ },
+ "spanId": {
+ "ignore_above": 256,
+ "type": "keyword"
+ },
+ "traceState": {
+ "type": "text",
+ "fields": {
+ "keyword": {
+ "type": "keyword",
+ "ignore_above": 256
+ }
+ }
+ },
+ "parentSpanId": {
+ "ignore_above": 256,
+ "type": "keyword"
+ },
+ "name": {
+ "ignore_above": 1024,
+ "type": "keyword"
+ },
+ "kind": {
+ "ignore_above": 128,
+ "type": "keyword"
+ },
+ "startTime": {
+ "type": "date_nanos"
+ },
+ "endTime": {
+ "type": "date_nanos"
+ },
+ "droppedAttributesCount": {
+ "type": "long"
+ },
+ "droppedEventsCount": {
+ "type": "long"
+ },
+ "droppedLinksCount": {
+ "type": "long"
+ },
+ "status": {
+ "properties": {
+ "code": {
+ "type": "long"
+ },
+ "message": {
+ "ignore_above": 128,
+ "type": "keyword"
+ }
+ }
+ },
+ "attributes": {
+ "type": "object",
+ "properties": {
+ "serviceName": {
+ "type": "keyword"
+ },
+ "data_stream": {
+ "properties": {
+ "dataset": {
+ "ignore_above": 128,
+ "type": "keyword"
+ },
+ "namespace": {
+ "ignore_above": 128,
+ "type": "keyword"
+ },
+ "type": {
+ "ignore_above": 56,
+ "type": "keyword"
+ }
+ }
+ }
+ }
+ },
+ "events": {
+ "type": "nested",
+ "properties": {
+ "name": {
+ "ignore_above": 1024,
+ "type": "keyword"
+ },
+ "@timestamp": {
+ "type": "date_nanos"
+ },
+ "observedTimestamp": {
+ "type": "date_nanos"
+ }
+ }
+ },
+ "links": {
+ "type": "nested",
+ "properties": {
+ "traceId": {
+ "ignore_above": 256,
+ "type": "keyword"
+ },
+ "spanId": {
+ "ignore_above": 256,
+ "type": "keyword"
+ },
+ "traceState": {
+ "type": "text",
+ "fields": {
+ "keyword": {
+ "type": "keyword",
+ "ignore_above": 256
+ }
+ }
+ }
+ }
+ },
+ "instrumentationScope": {
+ "properties": {
+ "name": {
+ "type": "keyword"
+ },
+ "version": {
+ "type": "keyword"
+ },
+ "droppedAttributesCount": {
+ "type": "integer"
+ },
+ "schemaUrl": {
+ "type": "keyword"
+ }
+ }
+ },
+ "schemaUrl": {
+ "type": "keyword"
+ }
+ }
+ },
+ "aliases" : {
+ "otel-v1-apm-span" : {}
+ }
+ },
+ "composed_of": [],
+ "version": 1,
+ "_meta": {
+ "description": "Observability Traces Mapping Template",
+ "catalog": "observability",
+ "type": "traces",
+ "correlations": [
+ {
+ "field": "serviceName",
+ "foreign-schema": "services",
+ "foreign-field": "serviceName"
+ }
+ ]
+ }
+}
+
+# Create the ss4o_logs_template index template
+# >> add the "data_stream":{} line to apply for data-streams
+PUT _index_template/ss4o_logs_template
+{
+ "index_patterns": ["ss4o_logs-*-*"],
+ "priority": 900,
+ "template": {
+ "mappings": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "observability",
+ "type": "logs",
+ "component": "log",
+ "correlations": [
+ {
+ "field": "spanId",
+ "foreign-schema": "traces",
+ "foreign-field": "spanId"
+ },
+ {
+ "field": "traceId",
+ "foreign-schema": "traces",
+ "foreign-field": "traceId"
+ }
+ ]
+ },
+ "_source": {
+ "enabled": true
+ },
+ "dynamic_templates": [
+ {
+ "instrumentation_scope_attributes_map": {
+ "mapping": {
+ "type": "keyword"
+ },
+ "path_match": "instrumentationScope.attributes.*"
+ }
+ }
+ ],
+ "properties": {
+ "severity": {
+ "properties": {
+ "number": {
+ "type": "long"
+ },
+ "text": {
+ "type": "text",
+ "fields": {
+ "keyword": {
+ "type": "keyword",
+ "ignore_above": 256
+ }
+ }
+ }
+ }
+ },
+ "attributes": {
+ "type": "object",
+ "properties": {
+ "data_stream": {
+ "properties": {
+ "dataset": {
+ "ignore_above": 128,
+ "type": "keyword"
+ },
+ "namespace": {
+ "ignore_above": 128,
+ "type": "keyword"
+ },
+ "type": {
+ "ignore_above": 56,
+ "type": "keyword"
+ }
+ }
+ }
+ }
+ },
+ "body": {
+ "type": "text"
+ },
+ "@message": {
+ "type": "alias",
+ "path": "body"
+ },
+ "@timestamp": {
+ "type": "date"
+ },
+ "observedTimestamp": {
+ "type": "date"
+ },
+ "observerTime": {
+ "type": "alias",
+ "path": "observedTimestamp"
+ },
+ "traceId": {
+ "ignore_above": 256,
+ "type": "keyword"
+ },
+ "spanId": {
+ "ignore_above": 256,
+ "type": "keyword"
+ },
+ "schemaUrl": {
+ "type": "text",
+ "fields": {
+ "keyword": {
+ "type": "keyword",
+ "ignore_above": 256
+ }
+ }
+ },
+ "instrumentationScope": {
+ "properties": {
+ "name": {
+ "type": "text",
+ "fields": {
+ "keyword": {
+ "type": "keyword",
+ "ignore_above": 128
+ }
+ }
+ },
+ "version": {
+ "type": "text",
+ "fields": {
+ "keyword": {
+ "type": "keyword",
+ "ignore_above": 256
+ }
+ }
+ },
+ "dropped_attributes_count": {
+ "type": "integer"
+ },
+ "schemaUrl": {
+ "type": "text",
+ "fields": {
+ "keyword": {
+ "type": "keyword",
+ "ignore_above": 256
+ }
+ }
+ }
+ }
+ },
+ "event": {
+ "properties": {
+ "domain": {
+ "ignore_above": 256,
+ "type": "keyword"
+ },
+ "name": {
+ "ignore_above": 256,
+ "type": "keyword"
+ },
+ "source": {
+ "ignore_above": 256,
+ "type": "keyword"
+ },
+ "category": {
+ "ignore_above": 256,
+ "type": "keyword"
+ },
+ "type": {
+ "ignore_above": 256,
+ "type": "keyword"
+ },
+ "kind": {
+ "ignore_above": 256,
+ "type": "keyword"
+ },
+ "result": {
+ "ignore_above": 256,
+ "type": "keyword"
+ },
+ "exception": {
+ "properties": {
+ "message": {
+ "ignore_above": 1024,
+ "type": "keyword"
+ },
+ "type": {
+ "ignore_above": 256,
+ "type": "keyword"
+ },
+ "stacktrace": {
+ "type": "text"
+ }
+ }
+ }
+ }
+ }
+ }
+ },
+ "settings": {
+ "index": {
+ "mapping": {
+ "total_fields": {
+ "limit": 10000
+ }
+ },
+ "refresh_interval": "5s"
+ }
+ },
+ "aliases" : {
+ "otel-events" : {}
+ }
+ },
+ "composed_of": [],
+ "version": 1
+}
+
+# Create the ss4o_metrics_template index template
+# >> add the "data_stream":{} line to apply for data-streams
+PUT _index_template/ss4o_metrics_template
+{
+ "index_patterns": [
+ "ss4o_metrics-*-*"
+ ],
+ "template": {
+ "mappings": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "observability",
+ "type": "metrics",
+ "component": "metrics",
+ "correlations" : [
+ {
+ "field": "spanId",
+ "foreign-schema" : "traces",
+ "foreign-field" : "spanId"
+ },
+ {
+ "field": "traceId",
+ "foreign-schema" : "traces",
+ "foreign-field" : "traceId"
+ }
+ ]
+ },
+ "_source": {
+ "enabled": true
+ },
+ "dynamic_templates": [
+ {
+ "exemplar_attributes_map": {
+ "mapping": {
+ "type": "keyword"
+ },
+ "path_match": "exemplar.attributes.*"
+ }
+ },
+ {
+ "instrumentation_scope_attributes_map": {
+ "mapping": {
+ "type": "keyword"
+ },
+ "path_match": "instrumentationScope.attributes.*"
+ }
+ }
+ ],
+ "properties": {
+ "name": {
+ "type": "keyword",
+ "ignore_above": 256
+ },
+ "attributes": {
+ "type": "object",
+ "properties": {
+ "data_stream": {
+ "properties": {
+ "dataset": {
+ "ignore_above": 128,
+ "type": "keyword"
+ },
+ "namespace": {
+ "ignore_above": 128,
+ "type": "keyword"
+ },
+ "type": {
+ "ignore_above": 56,
+ "type": "keyword"
+ }
+ }
+ }
+ }
+ },
+ "description": {
+ "type": "text",
+ "fields": {
+ "keyword": {
+ "type": "keyword",
+ "ignore_above": 256
+ }
+ }
+ },
+ "unit": {
+ "type": "keyword",
+ "ignore_above": 128
+ },
+ "kind": {
+ "type": "keyword",
+ "ignore_above": 128
+ },
+ "aggregationTemporality": {
+ "type": "keyword",
+ "ignore_above": 128
+ },
+ "monotonic": {
+ "type": "boolean"
+ },
+ "startTime": {
+ "type": "date"
+ },
+ "@timestamp": {
+ "type": "date"
+ },
+ "observedTimestamp": {
+ "type": "date_nanos"
+ },
+ "value@int": {
+ "type": "integer"
+ },
+ "value@double": {
+ "type": "double"
+ },
+ "buckets": {
+ "type" : "nested",
+ "properties": {
+ "count": {
+ "type": "long"
+ },
+ "sum": {
+ "type": "double"
+ },
+ "max": {
+ "type": "float"
+ },
+ "min": {
+ "type": "float"
+ }
+ }
+ },
+ "bucketCount": {
+ "type": "long"
+ },
+ "bucketCountsList": {
+ "type": "long"
+ },
+ "explicitBoundsList": {
+ "type": "float"
+ },
+ "explicitBoundsCount": {
+ "type": "float"
+ },
+ "quantiles": {
+ "properties": {
+ "quantile": {
+ "type": "double"
+ },
+ "value": {
+ "type": "double"
+ }
+ }
+ },
+ "quantileValuesCount": {
+ "type": "long"
+ },
+ "positiveBuckets": {
+ "type" : "nested",
+ "properties": {
+ "count": {
+ "type": "long"
+ },
+ "max": {
+ "type": "float"
+ },
+ "min": {
+ "type": "float"
+ }
+ }
+ },
+ "negativeBuckets": {
+ "type" : "nested",
+ "properties": {
+ "count": {
+ "type": "long"
+ },
+ "max": {
+ "type": "float"
+ },
+ "min": {
+ "type": "float"
+ }
+ }
+ },
+ "negativeOffset": {
+ "type": "integer"
+ },
+ "positiveOffset": {
+ "type": "integer"
+ },
+ "zeroCount": {
+ "type": "long"
+ },
+ "scale": {
+ "type": "long"
+ },
+ "max": {
+ "type": "float"
+ },
+ "min": {
+ "type": "float"
+ },
+ "sum": {
+ "type": "float"
+ },
+ "count": {
+ "type": "long"
+ },
+ "exemplar": {
+ "properties": {
+ "time": {
+ "type": "date"
+ },
+ "traceId": {
+ "ignore_above": 256,
+ "type": "keyword"
+ },
+ "spanId": {
+ "ignore_above": 256,
+ "type": "keyword"
+ }
+ }
+ },
+ "instrumentationScope": {
+ "properties": {
+ "name": {
+ "type": "keyword",
+ "ignore_above": 256
+ },
+ "version": {
+ "type": "keyword",
+ "ignore_above": 256
+ },
+ "droppedAttributesCount": {
+ "type": "integer"
+ },
+ "schemaUrl": {
+ "type": "text",
+ "fields": {
+ "keyword": {
+ "type": "keyword",
+ "ignore_above": 256
+ }
+ }
+ }
+ }
+ },
+ "schemaUrl": {
+ "type": "text",
+ "fields": {
+ "keyword": {
+ "type": "keyword",
+ "ignore_above": 256
+ }
+ }
+ }
+ }
+ },
+ "aliases" : {
+ "otel-metrics" : {}
+ },
+ "settings": {
+ "index": {
+ "mapping": {
+ "total_fields": {
+ "limit": 10000
+ }
+ },
+ "refresh_interval": "5s"
+ }
+ }
+ },
+ "composed_of": [],
+ "version": 1,
+ "_meta": {
+ "description": "Observability Metrics Mapping Template",
+ "catalog": "observability",
+ "type": "metrics",
+ "correlations" : [
+ {
+ "field": "spanId",
+ "foreign-schema" : "traces",
+ "foreign-field" : "spanId"
+ },
+ {
+ "field": "traceId",
+ "foreign-schema" : "traces",
+ "foreign-field" : "traceId"
+ }
+ ]
+ }
+}
+
+# Create the ss4o_services_template index template
+# >> add the "data_stream":{} line to apply for data-streams
+PUT _index_template/ss4o_services_template
+{
+ "index_patterns": [
+ "ss4o_services-*-*"
+ ],
+ "template": {
+ "mappings": {
+ "_meta": {
+ "version": "1.0.0",
+ "catalog": "observability",
+ "type": "traces",
+ "component": "services",
+ "correlations": [
+ {
+ "field": "traceGroupName",
+ "foreign-schema": "traceGroups",
+ "foreign-field": "traceGroup"
+ }
+ ]
+ },
+ "_source": {
+ "enabled": true
+ },
+ "properties": {
+ "destination": {
+ "properties": {
+ "domain": {
+ "type": "keyword",
+ "ignore_above": 1024
+ },
+ "resource": {
+ "type": "keyword",
+ "ignore_above": 1024
+ }
+ }
+ },
+ "hashId": {
+ "type": "keyword",
+ "ignore_above": 1024
+ },
+ "serviceName": {
+ "type": "keyword",
+ "ignore_above": 1024
+ },
+ "kind": {
+ "type": "keyword",
+ "ignore_above": 1024
+ },
+ "target": {
+ "properties": {
+ "domain": {
+ "type": "keyword",
+ "ignore_above": 1024
+ },
+ "resource": {
+ "type": "keyword",
+ "ignore_above": 1024
+ }
+ }
+ },
+ "traceGroupName": {
+ "type": "keyword",
+ "ignore_above": 1024
+ }
+ }
+ },
+ "aliases" : {
+ "open otel-v1-apm-service-map" : {}
+ },
+ "settings": {
+ "index": {
+ "mapping": {
+ "total_fields": {
+ "limit": 10000
+ }
+ },
+ "refresh_interval": "5s"
+ }
+ }
+ },
+ "composed_of": [],
+ "version": 1,
+ "_meta": {
+ "description": "Simple Schema For Observability Service",
+ "catalog": "observability",
+ "type": "services",
+ "correlations": [
+ {
+ "field": "traceGroupName",
+ "foreign-schema": "traceGroups",
+ "foreign-field": "traceGroup"
+ }
+ ]
+ }
+}
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/otel-services-1.0.0.json b/server/adaptors/integrations/__data__/repository/otel-services/otel-services-1.0.0.json
index 2e26f015b8..2f501c327c 100644
--- a/server/adaptors/integrations/__data__/repository/otel-services/otel-services-1.0.0.json
+++ b/server/adaptors/integrations/__data__/repository/otel-services/otel-services-1.0.0.json
@@ -1,11 +1,15 @@
{
"name": "otel-services",
"version": "1.0.0",
- "displayName": "Otel Services Demo",
- "description": "Otel Services Demo App with OpenSearch Observability",
+ "displayName": "Otel Services Demo Flow",
+ "description": "Otel Services Demo Use Case with OpenSearch Observability",
"license": "Apache-2.0",
"type": "traces",
- "labels": ["log", "traces", "metrics"],
+ "labels": [
+ "log",
+ "traces",
+ "metrics"
+ ],
"author": "OpenSearch",
"sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/otel-services/info",
"workflows": [
@@ -29,24 +33,24 @@
},
"gallery": [
{
- "annotation": "OTEL Demo Architecture",
- "path": "dashboard1.png"
+ "annotation": "Services Step",
+ "path": "observability-services-step.png"
},
{
- "annotation": "OTEL Demo Tutorial",
- "path": "dashboard2.png"
+ "annotation": "Ingestion Rate Step",
+ "path": "rate-ingestion-step.png"
},
{
- "annotation": "OTEL Services Dashboard - 1",
- "path": "dashboard3.png"
+ "annotation": "Single service monitoring",
+ "path": "single-service-step.png"
},
{
- "annotation": "OTEL Traces Gantt Dashboard - 2",
- "path": "dashboard4.png"
+ "annotation": "Network Metrics Monitoring",
+ "path": "apm-network-metrics-step.png"
},
{
- "annotation": "OTEL AMP Metrics Dashboard",
- "path": "dashboard5.png"
+ "annotation": "System Metrics Monitoring",
+ "path": "apm-system-metrics-step.png"
}
]
},
@@ -69,42 +73,34 @@
}
],
"assets": [
- {
- "name": "otel_services_dashboard",
- "version": "1.0.0",
- "extension": "ndjson",
- "type": "savedObjectBundle",
- "workflows": ["dashboards"]
- },
- {
- "name": "otel_single_service_dashboard",
- "version": "1.0.0",
- "extension": "ndjson",
- "type": "savedObjectBundle",
- "workflows": ["dashboards"]
- },
- {
- "name": "otel_ingestion_rate_dashboard",
- "version": "1.0.0",
- "extension": "ndjson",
- "type": "savedObjectBundle",
- "workflows": ["dashboards"]
- },
- {
- "name": "otel_amp_network_metrics_dashboard",
- "version": "1.0.0",
- "extension": "ndjson",
- "type": "savedObjectBundle",
- "workflows": ["dashboards"]
- },
- {
- "name": "otel_apm_network_services",
- "version": "1.0.0",
- "extension": "ndjson",
- "type": "savedObjectBundle",
- "workflows": ["dashboards"]
- }
- ],
+ {
+ "name": "otel-service-flow-use-case-integration",
+ "version": "1.0.0",
+ "extension": "ndjson",
+ "type": "savedObjectBundle",
+ "workflows": [
+ "dashboards"
+ ]
+ },
+ {
+ "name": "demo-langing-page",
+ "version": "1.0.0",
+ "extension": "ndjson",
+ "type": "savedObjectBundle",
+ "workflows": [
+ "dashboards"
+ ]
+ },
+ {
+ "name": "otel-architecture",
+ "version": "1.0.0",
+ "extension": "ndjson",
+ "type": "savedObjectBundle",
+ "workflows": [
+ "dashboards"
+ ]
+ }
+ ],
"sampleData": {
"path": "traces-samples.json"
}
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/schemas/logs-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/otel-services/schemas/logs-1.0.0.mapping.json
index 7fb8aca966..92f8611430 100644
--- a/server/adaptors/integrations/__data__/repository/otel-services/schemas/logs-1.0.0.mapping.json
+++ b/server/adaptors/integrations/__data__/repository/otel-services/schemas/logs-1.0.0.mapping.json
@@ -8,7 +8,6 @@
"catalog": "observability",
"type": "logs",
"component": "log",
- "labels": ["log", "http", "communication"],
"correlations": [
{
"field": "spanId",
@@ -199,6 +198,9 @@
},
"refresh_interval": "5s"
}
+ },
+ "aliases" : {
+ "otel-events" : {}
}
},
"composed_of": [],
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/schemas/metrics-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/otel-services/schemas/metrics-1.0.0.mapping.json
index 239392046a..e4124d678f 100644
--- a/server/adaptors/integrations/__data__/repository/otel-services/schemas/metrics-1.0.0.mapping.json
+++ b/server/adaptors/integrations/__data__/repository/otel-services/schemas/metrics-1.0.0.mapping.json
@@ -44,11 +44,9 @@
}
],
"properties": {
- "serviceName": {
- "type": "keyword"
- },
"name": {
- "type": "keyword"
+ "type": "keyword",
+ "ignore_above": 256
},
"attributes": {
"type": "object",
@@ -222,22 +220,12 @@
"instrumentationScope": {
"properties": {
"name": {
- "type": "text",
- "fields": {
- "keyword": {
- "type": "keyword",
- "ignore_above": 128
- }
- }
+ "type": "keyword",
+ "ignore_above": 256
},
"version": {
- "type": "text",
- "fields": {
- "keyword": {
- "type": "keyword",
- "ignore_above": 256
- }
- }
+ "type": "keyword",
+ "ignore_above": 256
},
"droppedAttributesCount": {
"type": "integer"
@@ -264,6 +252,9 @@
}
}
},
+ "aliases" : {
+ "otel-metrics" : {}
+ },
"settings": {
"index": {
"mapping": {
@@ -294,4 +285,4 @@
}
]
}
-}
\ No newline at end of file
+}
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/schemas/services-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/otel-services/schemas/services-1.0.0.mapping.json
index 84a03fd617..7690012ace 100644
--- a/server/adaptors/integrations/__data__/repository/otel-services/schemas/services-1.0.0.mapping.json
+++ b/server/adaptors/integrations/__data__/repository/otel-services/schemas/services-1.0.0.mapping.json
@@ -5,7 +5,7 @@
"template": {
"mappings": {
"_meta": {
- "version": "1.0.1",
+ "version": "1.0.0",
"catalog": "observability",
"type": "traces",
"component": "services",
@@ -63,6 +63,9 @@
}
}
},
+ "aliases" : {
+ "open otel-v1-apm-service-map" : {}
+ },
"settings": {
"index": {
"mapping": {
@@ -88,4 +91,4 @@
}
]
}
-}
\ No newline at end of file
+}
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/schemas/traces-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/otel-services/schemas/traces-1.0.0.mapping.json
index ce0aef3962..b21ba296fc 100644
--- a/server/adaptors/integrations/__data__/repository/otel-services/schemas/traces-1.0.0.mapping.json
+++ b/server/adaptors/integrations/__data__/repository/otel-services/schemas/traces-1.0.0.mapping.json
@@ -47,9 +47,6 @@
"enabled": true
},
"properties": {
- "serviceName": {
- "type": "keyword"
- },
"traceId": {
"ignore_above": 256,
"type": "keyword"
@@ -107,8 +104,12 @@
},
"attributes": {
"type": "object",
- "data_stream": {
- "properties": {
+ "properties": {
+ "serviceName": {
+ "type": "keyword"
+ },
+ "data_stream": {
+ "properties": {
"dataset": {
"ignore_above": 128,
"type": "keyword"
@@ -183,6 +184,10 @@
}
}
},
+ "aliases" : {
+ "otel-v1-apm-span" : {}
+ }
+ },
"composed_of": [],
"version": 1,
"_meta": {
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/static/apm-network-metrics-step.png b/server/adaptors/integrations/__data__/repository/otel-services/static/apm-network-metrics-step.png
new file mode 100644
index 0000000000..9171aa5803
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/static/apm-network-metrics-step.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/static/apm-system-metrics-step.png b/server/adaptors/integrations/__data__/repository/otel-services/static/apm-system-metrics-step.png
new file mode 100644
index 0000000000..4b6843894b
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/static/apm-system-metrics-step.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/static/observability-services-step.png b/server/adaptors/integrations/__data__/repository/otel-services/static/observability-services-step.png
new file mode 100644
index 0000000000..6be120d48f
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/static/observability-services-step.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/static/rate-ingestion-step.png b/server/adaptors/integrations/__data__/repository/otel-services/static/rate-ingestion-step.png
new file mode 100644
index 0000000000..ee4620f3bc
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/static/rate-ingestion-step.png differ
diff --git a/server/adaptors/integrations/__data__/repository/otel-services/static/single-service-step.png b/server/adaptors/integrations/__data__/repository/otel-services/static/single-service-step.png
new file mode 100644
index 0000000000..cc4db4244c
Binary files /dev/null and b/server/adaptors/integrations/__data__/repository/otel-services/static/single-service-step.png differ