_cat命令如果想要返回所有字段的话，带上?v=true&h=*
带上h=*的时候最好用postman，因为postman有warp line，可以不换行，这样能好看一些。
配置es oom自动退出
-XX:+ExitOnOutOfMemoryError
有时因为聚合操作的原因，会导致某一台机器上的JAVA进程出现OOM，但是这个JVM进程还在，并没有退出，退出的话可以通过monit捕捉到，也可以进行重启。如果没有退出，而是一直挂在那的话，就不能提供正常的服务。 此外加上这个参数的话，需要升级一下JDK版本，JDK要求1.8.0_92, 从这个版本开始支持ExitOnOutOfMemoryError参数。
查看shard未分配原因
GET /_cluster/allocation/explain
同集群数据迁移
索引名没有别名的情况
// 数据迁移
POST _reindex
{
"source": {
"index": "resource-dev-jiankunking"
},
"dest": {
"index": "resource-new-dev-jiankunking"
}
}
// 删除需要清理的索引
DELETE /resource-dev-s00792
// 重新指定索引别名
POST /_aliases
{
"actions": [
{
"add": {
"index": "resource-new-dev-s00792*",
"alias": "resource-dev-s00792"
}
}
]
}
_reindex
curl --location --request POST 'http://10.138.25.214:9200/_reindex' \
--header 'Content-Type: application/json' \
--data-raw '{
"source": {
"index": "deploy-log"
},
"dest": {
"index": "deploy-log-2018.12.24"
}
}'
创建index
curl --location --request PUT 'http://10.138.25.214:9200/deploy-log'
创建mapping
curl --location --request POST 'http://10.138.25.214:9200/deploy-log/deploy_log' \
--header 'Content-Type: application/javascript' \
--data-raw '{
"settings":{
"number_of_shards":5,
"number_of_replicas":1
},
"mappings":{
"deploy_log":{
"properties":{
"project":{
"type":"keyword",
"index":"not_analyzed"
},
"app":{
"type":"string",
"index":"not_analyzed"
},
"endpoint":{
"type":"ip"
},
"containerName":{
"type":"string",
"index":"not_analyzed"
},
"timestamp":{
"type":"long"
},
"message":{
"type":"text"
}
}
}
}
}'
删除index
curl --location --request DELETE 'http://10.133.0.87:9200/.kibana_1'
_termvectors(词频统计)
curl --location --request GET 'http://10.138.25.214:9200/deploy-log/deploy_log/AWfK6rkZ_ashmo4ko1yd/_termvectors?fields=containerName'
index插入内容
curl --location --request POST 'http://10.163.204.193:9200/logstash-2020.10.27/deploy_log' \
--header 'Content-Type: application/javascript' \
--data-raw '{
"project":"monitor",
"app":"elasticsearch1111",
"env":"dev",
"containerName":"monitor1545302038695",
"endpoint":"10.138.40.223",
"timestamp":1545302038,
"message":"image: hub.docker.terminus.io:5000/es-ext:log-search_1811301023_PRO_180410"
}'
mapping删除
curl --location --request DELETE 'http://10.138.25.214:9200/deploy-log/deploy_log/_mapping'
_template删除
curl --location --request DELETE 'http://10.138.25.214:9200/_template/d*'
查询_template
全量的_template
curl --location --request GET 'http://10.138.25.214:9201/_template?pretty'
某个索引的_template
curl --location --request GET 'http://10.138.25.214:9201/_template/索引名?pretty'
indices
curl --location --request GET 'http://10.138.16.190:9200/_cat/indices?v'
allocate_replica(reroute)
curl --location --request POST 'http://10.163.204.80:9200/_cluster/reroute?retry_failed=true' \
--header 'Content-Type: application/json' \
--data-raw '{
"commands":[
{
"allocate_replica":{
"index":".kibana_1",
"shard":0,
"node":"10.163.204.80"
}
}
]
}'
cluster.routing.allocation.enable
curl --location --request PUT 'http://10.138.16.188:9200/_cluster/settings' \
--header 'Content-Type: application/json' \
--data-raw '{
"transient":{
"cluster.routing.allocation.enable":"all"
}
}'
template更新(新增)
6.x
curl --location --request PUT 'http://10.163.204.193:9200/_template/k8s-log-template2222' \
--header 'Content-Type: application/json' \
--data-raw '{
"order": 0,
"index_patterns": [
"logstash-*"
],
"settings": {
"index": {
"number_of_shards": "12",
"number_of_replicas": "1",
"translog.durability": "async",
"translog.flush_threshold_size": "1024mb",
"translog.sync_interval": "120s",
"refresh_interval": "120s"
}
},
"mappings": {
"_default_": {
"_all": {
"enabled": false
},
"dynamic_templates": [
{
"strings_as_keywords": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"unmatch": "log"
}
},
{
"log": {
"match": "log",
"match_mapping_type": "string",
"mapping": {
"type": "text",
"analyzer": "standard",
"norms": false
}
}
}
]
}
},
"aliases": {}
}'
7.x
curl --location --request PUT 'http://10.163.204.193:9200/_template/k8s-log-template2222' \
--header 'Content-Type: application/json' \
--data-raw '{
"order": 0,
"index_patterns": [
"logstash-*"
],
"settings": {
"index": {
"number_of_shards": "12",
"number_of_replicas": "1",
"refresh_interval": "30s"
}
},
"mappings": {
"dynamic_templates": [
{
"strings_as_keywords": {
"unmatch": "log",
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string"
}
},
{
"log": {
"mapping": {
"norms": false,
"analyzer": "standard",
"type": "text"
},
"match_mapping_type": "string",
"match": "log"
}
},
{
"@timestamp": {
"mapping": {
"type": "date"
},
"match_mapping_type": "date",
"match": "@timestamp"
}
}
]
},
"aliases": {}
}'
查询_mapping
curl --location --request GET 'http://10.133.0.87:9200/logstash-2019.12.04/_mapping'
修改indices.breaker.fielddata.limit
curl --location --request PUT 'http://10.133.0.89:9200/_cluster/settings' \
--header 'Content-Type: application/json' \
--data-raw '{
"persistent":{
"indices.breaker.fielddata.limit":"75%"
}
}'
清理cache
curl --location --request POST 'http://10.133.0.89:9200/logstash-*/_cache/clear?fields=*'
查询_cluster/settings
curl --location --request GET 'http://10.133.0.89:9200/_cluster/settings'
修改indices.breaker.total.limit
curl --location --request PUT 'http://10.133.0.89:9200/_cluster/settings' \
--header 'Content-Type: application/json' \
--data-raw '{
"transient":{
"indices.breaker.total.limit":"80%"
}
}'
修改max_shards_per_node
curl --location --request PUT 'http://10.163.204.80:9200/_cluster/settings' \
--header 'Content-Type: application/json' \
--data-raw '{
"persistent": {
"cluster": {
"max_shards_per_node":10000
}
}
}'
remote cluster info
curl --location --request GET 'http://10.133.0.86:9201/_remote/info' \
--header 'Authorization: Basic ZWxhc3RpYzplbGFzdGlj'
修改索引number_of_replicas
curl --location --request PUT 'http://10.163.204.80:9200/security-tracelogdev-20200223/_settings' \
--header 'Content-Type: application/json' \
--data-raw '{
"index" : {
"number_of_replicas" : 0
}
}'
allocation.exclude._ip节点下线
curl --location --request PUT 'http://10.163.204.80:9200/_cluster/settings' \
--header 'Content-Type: application/json' \
--data-raw '{
"transient" : {
"cluster.routing.allocation.exclude._ip" : "10.163.204.81,10.163.204.82"
}
}'
shard移动到某个节点(reroute)
curl --location --request POST 'http://10.163.204.80:9200/_cluster/reroute?retry_failed=true' \
--header 'Content-Type: application/json' \
--data-raw '{
"commands": [
{
"move": {
"index": "security-tracelogdev-20200223",
"shard": 2,
"from_node": "10.163.204.81",
"to_node": "10.163.204.80"
}
}
]
}'
调整refresh_interval
curl --location --request PUT 'http://10.163.204.193:9200/logstash-2020.09.24/_settings' \
--header 'Content-Type: application/json' \
--data-raw '{
"refresh_interval": "10s"
}'
修改disk.watermark.high
curl --location --request PUT 'http://10.163.204.193:9200/_cluster/settings' \
--header 'Content-Type: application/json' \
--data-raw '{
"persistent" : {
"cluster.routing.allocation.disk.watermark.low":"90%",
"cluster.routing.allocation.disk.watermark.high" : "95%"
}
}'
修改recovery相关配置
curl --location --request PUT 'http://10.163.204.193:9201/_cluster/settings' \
--header 'Content-Type: application/json' \
--data-raw '{
"persistent": {
"indices.recovery.max_bytes_per_sec": "40mb",
"cluster.routing.allocation.node_concurrent_recoveries": "2"
}
}'
查看某个节点的thread_pool状态
curl --location --request GET 'http://10.163.204.193:9200/_nodes/10.163.204.193-node1/stats/thread_pool?human&pretty'
es集群thread_pool write状态
curl --location --request GET 'http://10.163.204.193:9200/_cat/thread_pool/write?v&h=node_name,ip,name,type,active,size,queue,queue_size,largest,rejected,completed&pretty'
查看集群indices缓存信息
curl --location --request GET 'http://10.162.166.136:9201/_cluster/settings?include_defaults&flat_settings&local&filter_path=defaults.indices*'
索引关闭
curl --location --request POST 'http://10.162.166.45:9201/hmcenter-*/_close'
索引打开
curl --location --request POST 'http://10.162.166.45:9201/console*/_open'
es写入速度调优
curl --location --request PUT 'http://10.163.204.193:9200/logstash-2021.01.11/_settings' \
--header 'Content-Type: application/json' \
--data-raw '{
"index" : {
"translog.durability" : "async",
"translog.flush_threshold_size" : "1024mb",
"translog.sync_interval" : "120s"
}
}'
查询_ingest/pipeline
curl --location --request GET 'http://10.163.204.193:9200/_ingest/pipeline'
集群read_only_allow_delete
curl --location --request PUT 'http://10.133.0.84:9200/_settings' \
--header 'Content-Type: application/json' \
--data-raw '{
"index": {
"blocks": {
"read_only_allow_delete": "false"
}
}
}'
查看索引_settings
curl --location --request GET 'http://10.163.204.193:9200/.monitoring-es-6-2021.01.27/_settings?pretty'
索引read_only_allow_delete
curl --location --request PUT 'http://10.163.204.193:9200/.monitoring-es-6-2021.01.28/_settings' \
--header 'Content-Type: application/json' \
--data-raw '{
"index": {
"blocks": {
"read_only_allow_delete": "false"
}
}
}'
查询_cluster/stats
curl --location --request GET 'http://10.163.204.193:9200/_cluster/stats'
查看集群_nodes/hot_threads
curl --location --request GET 'http://10.163.204.193:9200/_nodes/hot_threads'
查询某个节点的hot_threads
curl --location --request GET 'http://10.163.204.193:9200/_nodes/10.163.204.193/hot_threads'
某个节点的stats/thread_pool
curl --location --request GET 'http://10.163.204.193:9200/_nodes/10.163.204.193/stats/thread_pool?human&pretty'
查看某个模板
curl --location --request GET 'http://10.163.204.193:9200/_template/.monitoring-es?pretty'
索引备份
https://www.elastic.co/guide/en/elasticsearch/reference/5.4/docs-reindex.html
curl -XPOST 'localhost:9200/_reindex?pretty' -H 'Content-Type: application/json' -d'
{
"source": {
"index": "twitter"
},
"dest": {
"index": "new_twitter"
}
}
'
es重启
先kill 杀死es
sh bin/elasticsearch -d
elasticsearch 查看集群所有设置（包含默认的）
http://10.138.1.1:9200/_cluster/settings?include_defaults=true
elasticsearch集群开启密码
./bin/elasticsearch-setup-passwords interactive
elasticsearch 修改密码
curl --location --request PUT 'http://10.138.12.121:9213/_xpack/security/user/elastic/_password?pretty' \
--header 'Authorization: Basic ZWxhc3RpYzpQd2QxMjM0NQ==' \
--header 'Content-Type: application/json' \
--data-raw '{
"password" : "Pwd12345_3"
}'
跨集群查询
curl --location --request GET 'http://10.138.16.11:9213/cluster1:1-test-*,cluster2:2-*/_search?size=1000' \
--header 'Authorization: Basic ZWxhc3RpYzpQd2QxMjM0NV8z'
查看es集群恢复情况
http://10.138.1.1:9200/_cluster/allocation/explain?pretty
分词器
分词器测试
curl --location --request POST 'http://127.0.0.1:9200/_analyze' \
--header 'Content-Type: application/json' \
--data-raw '{
"analyzer": "standard",
"text": "c0fd5b9d293d4dbcaa5729e14abe075a.109.16141504936690007"
}'
查看索引中doc字段分词情况
GET /索引名称/_doc/文档id/_termvectors?fields=字段名称
内存占用
查看一个索引所有segment的memory占用情况
http://127.0.0.1:9201/_cat/segments?v
size.memory就是内存占用，单位Bytes
查看node上所有segment占用的memory总和
http://127.0.0.1:9201/_cat/nodes?v&h=segments.count,segments.memory,segments.index_writer_memory,segments.version_map_memory,segments.fixed_bitset_memory
Fielddata cache在text类型字段上进行聚合和排序时会用到 Fielddata，默认是关闭的，如果开启了Fielddata，则其大小默认没有上 限，可以通过indices.fielddata.cache.size设置一个百分比来控制其使用的 堆内存上限。可以通过下面的命令查看节点上的Fielddata使用情况:
http://127.0.0.1:9201/_cat/nodes?v&h=fielddata.memory_size
监控缓存
节点级别
观测每个节点上缓存占用的空间大小以及 request cache的命中率：
http://127.0.0.1:9201/_cat/nodes?v&h=name,queryCacheMemory,fielddataMemory,requestCacheMemory,requestCacheHitCount,requestCach
query cache的缓存命中可以通过 Nodes stats API 来查看：
http://127.0.0.1:9201/_nodes/stats/indices/query_cache,request_cache,fielddata?pretty
索引级别
索引级别的信息可以通过 Index stats API来查看，对于缓存方面的指标可以使用如下命令：
http://127.0.0.1:9201/uoc-gatewayprod-v2-2021.03.02/_stats/query_cache,fielddata,request_cache?pretty&human
ElasticSearch 服务修改部分配置或增加硬件资源时，需要重新 ElasticSearch 服务的对应节点。
为了避免 ElasticSearch 节点重启过程中，分片分配恢复和分片重新平衡机制，造成分片数据迁移，进而使 ElasticSearch 集群长时间处于 Yellow 或 Red状态；应该在节点重启前，禁止分片恢复和分片平衡机制；待节点重启完成后，在启动分片恢复和分片平衡机制。
禁止分片分配恢复和分片重新平衡
curl -XPUT http://127.0.0.1:9200/_cluster/settings -H 'Content-Type: application/json' -d '{
"transient" : {
"cluster.routing.allocation.enable" : "none"
}
}'
curl -XPUT http://127.0.0.1:9200/_cluster/settings?pretty -H 'Content-Type: application/json' -d '{
"transient" : {
"cluster.routing.rebalance.enable" : "none"
}
}'启动分片分配恢复和分配重新平衡
curl -XPUT http://127.0.0.1:9200/_cluster/settings?pretty -H 'Content-Type: application/json' -d '{
"transient" : {
"cluster.routing.rebalance.enable" : "all"
}
}'
curl -XPUT http://127.0.0.1:9200/_cluster/settings -H 'Content-Type: application/json' -d '{
"transient" : {
"cluster.routing.allocation.enable" : "all"
}
}开启 ElasticSearch 服务的慢日志记录
curl -H "Content-type:application/json" -XPUT http://127.0.0.1:9200/_all/_settings --data '{"index.search.slowlog.threshold.query.warn":"5s",
"index.search.slowlog.threshold.query.info":"-1",
"index.search.slowlog.threshold.query.debug":"-1",
"index.search.slowlog.threshold.query.trace":"-1",
"index.search.slowlog.threshold.fetch.warn":"1s",
"index.search.slowlog.threshold.fetch.info":"-1",
"index.search.slowlog.threshold.fetch.debug":"-1",
"index.search.slowlog.threshold.fetch.trace":"-1",
"index.indexing.slowlog.threshold.index.warn":"5s",
"index.indexing.slowlog.threshold.index.info":"-1",
"index.indexing.slowlog.threshold.index.debug":"-1",
"index.indexing.slowlog.threshold.index.trace":"-1"}'查询node信息
http://10.163.204.193:9200/_nodes
查询某个节点
http://10.163.204.193:9200/_nodes/10.163.204.193
具体返回结果
{
"_nodes": {
"total": 1,
"successful": 1,
"failed": 0
},
"cluster_name": "elasticsearch",
"nodes": {
"4hEWcF8hRFWTEkQxlKQmqg": {
"name": "10.163.204.193-node1",
"transport_address": "10.163.204.193:9300",
"host": "10.163.204.193",
"ip": "10.163.204.193",
"version": "7.13.4",
"build_flavor": "default",
"build_type": "docker",
"build_hash": "c5f60e894ca0c61cdbae4f5a686d9f08bcefc942",
"total_indexing_buffer": 3328599654,
"roles": [
"data",
"data_cold",
"data_content",
"data_frozen",
"data_hot",
"data_warm",
"ingest",
"master",
"ml",
"remote_cluster_client",
"transform"
],
"attributes": {
"ml.machine_memory": "135202676736",
"xpack.installed": "true",
"transform.node": "true",
"ml.max_open_jobs": "512",
"ml.max_jvm_size": "33285996544"
},
"settings": {
"cluster": {
"initial_master_nodes": [
"10.163.204.193",
"10.163.204.194",
"10.163.204.195"
],
"name": "elasticsearch",
"election": {
"strategy": "supports_voting_only"
}
},
"node": {
"attr": {
"transform": {
"node": "true"
},
"xpack": {
"installed": "true"
},
"ml": {
"max_jvm_size": "33285996544",
"machine_memory": "135202676736",
"max_open_jobs": "512"
}
},
"name": "10.163.204.193-node1"
},
"path": {
"data": [
"/usr/share/elasticsearch/data4",
"/usr/share/elasticsearch/data3"
],
"logs": "/usr/share/elasticsearch/logs",
"home": "/usr/share/elasticsearch"
},
"discovery": {
"seed_hosts": [
"10.163.204.193",
"10.163.204.194",
"10.163.204.195"
]
},
"client": {
"type": "node"
},
"http": {
"type": "security4",
"port": "9200",
"type.default": "netty4"
},
"bootstrap": {
"memory_lock": "true"
},
"transport": {
"tcp": {
"port": "9300"
},
"features": {
"x-pack": "true"
},
"type": "security4",
"type.default": "netty4"
},
"xpack": {
"monitoring": {
"collection": {
"enabled": "true"
}
},
"security": {
"http": {
"ssl": {
"enabled": "false"
}
},
"enabled": "true",
"transport": {
"ssl": {
"enabled": "true"
}
}
}
},
"network": {
"bind_host": "10.163.204.193",
"publish_host": "10.163.204.193"
}
},
"os": {
"refresh_interval_in_millis": 1000,
"name": "Linux",
"pretty_name": "CentOS Linux 8",
"arch": "amd64",
"version": "4.4.0-142-generic",
"available_processors": 32,
"allocated_processors": 32
},
"process": {
"refresh_interval_in_millis": 1000,
"id": 6,
"mlockall": true
},
"jvm": {
"pid": 6,
"version": "16",
"vm_name": "OpenJDK 64-Bit Server VM",
"vm_version": "16+36",
"vm_vendor": "AdoptOpenJDK",
"bundled_jdk": true,
"using_bundled_jdk": true,
"start_time_in_millis": 1629968308831,
"mem": {
"heap_init_in_bytes": 33285996544,
"heap_max_in_bytes": 33285996544,
"non_heap_init_in_bytes": 7667712,
"non_heap_max_in_bytes": 0,
"direct_max_in_bytes": 0
},
"gc_collectors": [
"G1 Young Generation",
"G1 Old Generation"
],
"memory_pools": [
"CodeHeap 'non-nmethods'",
"Metaspace",
"CodeHeap 'profiled nmethods'",
"Compressed Class Space",
"G1 Eden Space",
"G1 Old Gen",
"G1 Survivor Space",
"CodeHeap 'non-profiled nmethods'"
],
"using_compressed_ordinary_object_pointers": "true",
"input_arguments": [
"-Xshare:auto",
"-Des.networkaddress.cache.ttl=60",
"-Des.networkaddress.cache.negative.ttl=10",
"-XX:+AlwaysPreTouch",
"-Xss1m",
"-Djava.awt.headless=true",
"-Dfile.encoding=UTF-8",
"-Djna.nosys=true",
"-XX:-OmitStackTraceInFastThrow",
"-XX:+ShowCodeDetailsInExceptionMessages",
"-Dio.netty.noUnsafe=true",
"-Dio.netty.noKeySetOptimization=true",
"-Dio.netty.recycler.maxCapacityPerThread=0",
"-Dio.netty.allocator.numDirectArenas=0",
"-Dlog4j.shutdownHookEnabled=false",
"-Dlog4j2.disable.jmx=true",
"-Djava.locale.providers=SPI,COMPAT",
"--add-opens=java.base/java.io=ALL-UNNAMED",
"-Xms31g",
"-Xmx31g",
"-XX:+UseG1GC",
"-Djava.io.tmpdir=/tmp/elasticsearch-16463143251624083160",
"-XX:+HeapDumpOnOutOfMemoryError",
"-XX:HeapDumpPath=data",
"-XX:ErrorFile=logs/hs_err_pid%p.log",
"-Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m",
"-Des.cgroups.hierarchy.override=/",
"-XX:MaxDirectMemorySize=16642998272",
"-XX:InitiatingHeapOccupancyPercent=30",
"-XX:G1ReservePercent=25",
"-Des.path.home=/usr/share/elasticsearch",
"-Des.path.conf=/usr/share/elasticsearch/config",
"-Des.distribution.flavor=default",
"-Des.distribution.type=docker",
"-Des.bundled_jdk=true"
]
},
"thread_pool": {
"force_merge": {
"type": "fixed",
"size": 1,
"queue_size": -1
},
"ml_datafeed": {
"type": "scaling",
"core": 1,
"max": 512,
"keep_alive": "1m",
"queue_size": -1
},
"searchable_snapshots_cache_fetch_async": {
"type": "scaling",
"core": 0,
"max": 50,
"keep_alive": "30s",
"queue_size": -1
},
"fetch_shard_started": {
"type": "scaling",
"core": 1,
"max": 64,
"keep_alive": "5m",
"queue_size": -1
},
"listener": {
"type": "fixed",
"size": 10,
"queue_size": -1
},
"rollup_indexing": {
"type": "fixed",
"size": 1,
"queue_size": -1
},
"search": {
"type": "fixed_auto_queue_size",
"size": 49,
"queue_size": 1000
},
"security-crypto": {
"type": "fixed",
"size": 16,
"queue_size": 1000
},
"ccr": {
"type": "fixed",
"size": 32,
"queue_size": 100
},
"flush": {
"type": "scaling",
"core": 1,
"max": 5,
"keep_alive": "5m",
"queue_size": -1
},
"fetch_shard_store": {
"type": "scaling",
"core": 1,
"max": 64,
"keep_alive": "5m",
"queue_size": -1
},
"ml_utility": {
"type": "scaling",
"core": 1,
"max": 2048,
"keep_alive": "10m",
"queue_size": -1
},
"get": {
"type": "fixed",
"size": 32,
"queue_size": 1000
},
"system_read": {
"type": "fixed",
"size": 5,
"queue_size": 2000
},
"transform_indexing": {
"type": "fixed",
"size": 4,
"queue_size": 4
},
"write": {
"type": "fixed",
"size": 32,
"queue_size": 10000
},
"watcher": {
"type": "fixed",
"size": 50,
"queue_size": 1000
},
"security-token-key": {
"type": "fixed",
"size": 1,
"queue_size": 1000
},
"refresh": {
"type": "scaling",
"core": 1,
"max": 10,
"keep_alive": "5m",
"queue_size": -1
},
"system_write": {
"type": "fixed",
"size": 5,
"queue_size": 1000
},
"generic": {
"type": "scaling",
"core": 4,
"max": 128,
"keep_alive": "30s",
"queue_size": -1
},
"warmer": {
"type": "scaling",
"core": 1,
"max": 5,
"keep_alive": "5m",
"queue_size": -1
},
"management": {
"type": "scaling",
"core": 1,
"max": 5,
"keep_alive": "5m",
"queue_size": -1
},
"analyze": {
"type": "fixed",
"size": 1,
"queue_size": 16
},
"searchable_snapshots_cache_prewarming": {
"type": "scaling",
"core": 0,
"max": 16,
"keep_alive": "30s",
"queue_size": -1
},
"ml_job_comms": {
"type": "scaling",
"core": 4,
"max": 2048,
"keep_alive": "1m",
"queue_size": -1
},
"snapshot": {
"type": "scaling",
"core": 1,
"max": 5,
"keep_alive": "5m",
"queue_size": -1
},
"search_throttled": {
"type": "fixed_auto_queue_size",
"size": 1,
"queue_size": 100
}
},
"transport": {
"bound_address": [
"10.163.204.193:9300"
],
"publish_address": "10.163.204.193:9300",
"profiles": {}
},
"http": {
"bound_address": [
"10.163.204.193:9200"
],
"publish_address": "10.163.204.193:9200",
"max_content_length_in_bytes": 104857600
},
"plugins": [],
"modules": [
{
"name": "aggs-matrix-stats",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Adds aggregations whose input are a list of numeric fields and output includes a matrix.",
"classname": "org.elasticsearch.search.aggregations.matrix.MatrixAggregationPlugin",
"extended_plugins": [],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "analysis-common",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Adds \"built in\" analyzers to Elasticsearch.",
"classname": "org.elasticsearch.analysis.common.CommonAnalysisPlugin",
"extended_plugins": [
"lang-painless"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "constant-keyword",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Module for the constant-keyword field type, which is a specialization of keyword for the case when all documents have the same value.",
"classname": "org.elasticsearch.xpack.constantkeyword.ConstantKeywordMapperPlugin",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "frozen-indices",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "A plugin for the frozen indices functionality",
"classname": "org.elasticsearch.xpack.frozen.FrozenIndices",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "ingest-common",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Module for ingest processors that do not require additional security permissions or have large dependencies and resources",
"classname": "org.elasticsearch.ingest.common.IngestCommonPlugin",
"extended_plugins": [
"lang-painless"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "ingest-geoip",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Ingest processor that uses looksup geo data based on ip adresses using the Maxmind geo database",
"classname": "org.elasticsearch.ingest.geoip.IngestGeoIpPlugin",
"extended_plugins": [],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "ingest-user-agent",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Ingest processor that extracts information from a user agent",
"classname": "org.elasticsearch.ingest.useragent.IngestUserAgentPlugin",
"extended_plugins": [],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "kibana",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Plugin exposing APIs for Kibana system indices",
"classname": "org.elasticsearch.kibana.KibanaPlugin",
"extended_plugins": [],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "lang-expression",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Lucene expressions integration for Elasticsearch",
"classname": "org.elasticsearch.script.expression.ExpressionPlugin",
"extended_plugins": [],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "lang-mustache",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Mustache scripting integration for Elasticsearch",
"classname": "org.elasticsearch.script.mustache.MustachePlugin",
"extended_plugins": [],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "lang-painless",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "An easy, safe and fast scripting language for Elasticsearch",
"classname": "org.elasticsearch.painless.PainlessPlugin",
"extended_plugins": [],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "mapper-extras",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Adds advanced field mappers",
"classname": "org.elasticsearch.index.mapper.MapperExtrasPlugin",
"extended_plugins": [],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "mapper-version",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "A plugin for a field type to store sofware versions",
"classname": "org.elasticsearch.xpack.versionfield.VersionFieldPlugin",
"extended_plugins": [
"x-pack-core",
"lang-painless"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "parent-join",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "This module adds the support parent-child queries and aggregations",
"classname": "org.elasticsearch.join.ParentJoinPlugin",
"extended_plugins": [],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "percolator",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Percolator module adds capability to index queries and query these queries by specifying documents",
"classname": "org.elasticsearch.percolator.PercolatorPlugin",
"extended_plugins": [],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "rank-eval",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "The Rank Eval module adds APIs to evaluate ranking quality.",
"classname": "org.elasticsearch.index.rankeval.RankEvalPlugin",
"extended_plugins": [],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "reindex",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "The Reindex module adds APIs to reindex from one index to another or update documents in place.",
"classname": "org.elasticsearch.index.reindex.ReindexPlugin",
"extended_plugins": [],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "repositories-metering-api",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Repositories metering API",
"classname": "org.elasticsearch.xpack.repositories.metering.RepositoriesMeteringPlugin",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "repository-encrypted",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - client-side encrypted repositories.",
"classname": "org.elasticsearch.repositories.encrypted.EncryptedRepositoryPlugin",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "repository-url",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Module for URL repository",
"classname": "org.elasticsearch.plugin.repository.url.URLRepositoryPlugin",
"extended_plugins": [],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "runtime-fields-common",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Module for runtime fields features and extensions that have large dependencies",
"classname": "org.elasticsearch.runtimefields.RuntimeFieldsCommonPlugin",
"extended_plugins": [
"lang-painless"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "search-business-rules",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "A plugin for applying business rules to search result rankings",
"classname": "org.elasticsearch.xpack.searchbusinessrules.SearchBusinessRules",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "searchable-snapshots",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "A plugin for the searchable snapshots functionality",
"classname": "org.elasticsearch.xpack.searchablesnapshots.SearchableSnapshots",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "snapshot-repo-test-kit",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "A plugin for a test kit for snapshot repositories",
"classname": "org.elasticsearch.repositories.blobstore.testkit.SnapshotRepositoryTestKit",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "spatial",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "A plugin for Basic Spatial features",
"classname": "org.elasticsearch.xpack.spatial.SpatialPlugin",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "transform",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "A plugin to transform data",
"classname": "org.elasticsearch.xpack.transform.Transform",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "transport-netty4",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Netty 4 based transport implementation",
"classname": "org.elasticsearch.transport.Netty4Plugin",
"extended_plugins": [],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "unsigned-long",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Module for the unsigned long field type",
"classname": "org.elasticsearch.xpack.unsignedlong.UnsignedLongMapperPlugin",
"extended_plugins": [
"x-pack-core",
"lang-painless"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "vectors",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "A plugin for working with vectors",
"classname": "org.elasticsearch.xpack.vectors.Vectors",
"extended_plugins": [
"x-pack-core",
"lang-painless"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "wildcard",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "A plugin for a keyword field type with efficient wildcard search",
"classname": "org.elasticsearch.xpack.wildcard.Wildcard",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-aggregate-metric",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Module for the aggregate_metric field type, which allows pre-aggregated fields to be stored a single field.",
"classname": "org.elasticsearch.xpack.aggregatemetric.AggregateMetricMapperPlugin",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-analytics",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Analytics",
"classname": "org.elasticsearch.xpack.analytics.AnalyticsPlugin",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-async",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "A module which handles common async operations",
"classname": "org.elasticsearch.xpack.async.AsyncResultsIndexPlugin",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-async-search",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "A module which allows to track the progress of a search asynchronously.",
"classname": "org.elasticsearch.xpack.search.AsyncSearch",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-autoscaling",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Autoscaling",
"classname": "org.elasticsearch.xpack.autoscaling.Autoscaling",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-ccr",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - CCR",
"classname": "org.elasticsearch.xpack.ccr.Ccr",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-core",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Core",
"classname": "org.elasticsearch.xpack.core.XPackPlugin",
"extended_plugins": [],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-data-streams",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Data Streams",
"classname": "org.elasticsearch.xpack.datastreams.DataStreamsPlugin",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-deprecation",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Deprecation",
"classname": "org.elasticsearch.xpack.deprecation.Deprecation",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-enrich",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Enrich",
"classname": "org.elasticsearch.xpack.enrich.EnrichPlugin",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-eql",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "The Elasticsearch plugin that powers EQL for Elasticsearch",
"classname": "org.elasticsearch.xpack.eql.plugin.EqlPlugin",
"extended_plugins": [
"x-pack-ql",
"lang-painless"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-fleet",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Plugin exposing APIs for Fleet system indices",
"classname": "org.elasticsearch.xpack.fleet.Fleet",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-graph",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Graph",
"classname": "org.elasticsearch.xpack.graph.Graph",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-identity-provider",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Identity Provider",
"classname": "org.elasticsearch.xpack.idp.IdentityProviderPlugin",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-ilm",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Index Lifecycle Management",
"classname": "org.elasticsearch.xpack.ilm.IndexLifecycle",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-logstash",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Logstash",
"classname": "org.elasticsearch.xpack.logstash.Logstash",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-ml",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Machine Learning",
"classname": "org.elasticsearch.xpack.ml.MachineLearning",
"extended_plugins": [
"x-pack-autoscaling",
"lang-painless"
],
"has_native_controller": true,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-monitoring",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Monitoring",
"classname": "org.elasticsearch.xpack.monitoring.Monitoring",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-ql",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch infrastructure plugin for EQL and SQL for Elasticsearch",
"classname": "org.elasticsearch.xpack.ql.plugin.QlPlugin",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-rollup",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Rollup",
"classname": "org.elasticsearch.xpack.rollup.Rollup",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-security",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Security",
"classname": "org.elasticsearch.xpack.security.Security",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-shutdown",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Shutdown",
"classname": "org.elasticsearch.xpack.shutdown.ShutdownPlugin",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-sql",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "The Elasticsearch plugin that powers SQL for Elasticsearch",
"classname": "org.elasticsearch.xpack.sql.plugin.SqlPlugin",
"extended_plugins": [
"x-pack-ql",
"lang-painless"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-stack",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Stack",
"classname": "org.elasticsearch.xpack.stack.StackPlugin",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-text-structure",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Text Structure",
"classname": "org.elasticsearch.xpack.textstructure.TextStructurePlugin",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-voting-only-node",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Voting-only node",
"classname": "org.elasticsearch.cluster.coordination.VotingOnlyNodePlugin",
"extended_plugins": [
"x-pack-core"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
},
{
"name": "x-pack-watcher",
"version": "7.13.4",
"elasticsearch_version": "7.13.4",
"java_version": "1.8",
"description": "Elasticsearch Expanded Pack Plugin - Watcher",
"classname": "org.elasticsearch.xpack.watcher.Watcher",
"extended_plugins": [
"x-pack-core",
"lang-painless"
],
"has_native_controller": false,
"licensed": false,
"type": "isolated"
}
],
"ingest": {
"processors": [
{
"type": "append"
},
{
"type": "bytes"
},
{
"type": "circle"
},
{
"type": "community_id"
},
{
"type": "convert"
},
{
"type": "csv"
},
{
"type": "date"
},
{
"type": "date_index_name"
},
{
"type": "dissect"
},
{
"type": "dot_expander"
},
{
"type": "drop"
},
{
"type": "enrich"
},
{
"type": "fail"
},
{
"type": "fingerprint"
},
{
"type": "foreach"
},
{
"type": "geoip"
},
{
"type": "grok"
},
{
"type": "gsub"
},
{
"type": "html_strip"
},
{
"type": "inference"
},
{
"type": "join"
},
{
"type": "json"
},
{
"type": "kv"
},
{
"type": "lowercase"
},
{
"type": "network_direction"
},
{
"type": "pipeline"
},
{
"type": "registered_domain"
},
{
"type": "remove"
},
{
"type": "rename"
},
{
"type": "script"
},
{
"type": "set"
},
{
"type": "set_security_user"
},
{
"type": "sort"
},
{
"type": "split"
},
{
"type": "trim"
},
{
"type": "uppercase"
},
{
"type": "uri_parts"
},
{
"type": "urldecode"
},
{
"type": "user_agent"
}
]
},
"aggregations": {
"adjacency_matrix": {
"types": [
"other"
]
},
"auto_date_histogram": {
"types": [
"boolean",
"date",
"numeric"
]
},
"avg": {
"types": [
"aggregate_metric",
"boolean",
"date",
"histogram",
"numeric"
]
},
"boxplot": {
"types": [
"histogram",
"numeric"
]
},
"cardinality": {
"types": [
"boolean",
"date",
"geopoint",
"geoshape",
"ip",
"keyword",
"numeric",
"range"
]
},
"children": {
"types": [
"other"
]
},
"composite": {
"types": [
"other"
]
},
"date_histogram": {
"types": [
"boolean",
"date",
"numeric",
"range"
]
},
"date_range": {
"types": [
"boolean",
"date",
"numeric"
]
},
"diversified_sampler": {
"types": [
"boolean",
"date",
"keyword",
"numeric"
]
},
"extended_stats": {
"types": [
"boolean",
"date",
"numeric"
]
},
"filter": {
"types": [
"other"
]
},
"filters": {
"types": [
"other"
]
},
"geo_bounds": {
"types": [
"geopoint",
"geoshape"
]
},
"geo_centroid": {
"types": [
"geopoint",
"geoshape"
]
},
"geo_distance": {
"types": [
"geopoint"
]
},
"geo_line": {
"types": [
"geopoint"
]
},
"geohash_grid": {
"types": [
"geopoint",
"geoshape"
]
},
"geotile_grid": {
"types": [
"geopoint",
"geoshape"
]
},
"global": {
"types": [
"other"
]
},
"histogram": {
"types": [
"boolean",
"date",
"histogram",
"numeric",
"range"
]
},
"ip_range": {
"types": [
"ip"
]
},
"matrix_stats": {
"types": [
"other"
]
},
"max": {
"types": [
"aggregate_metric",
"boolean",
"date",
"histogram",
"numeric"
]
},
"median_absolute_deviation": {
"types": [
"numeric"
]
},
"min": {
"types": [
"aggregate_metric",
"boolean",
"date",
"histogram",
"numeric"
]
},
"missing": {
"types": [
"boolean",
"date",
"geopoint",
"ip",
"keyword",
"numeric",
"range"
]
},
"multi_terms": {
"types": [
"other"
]
},
"nested": {
"types": [
"other"
]
},
"parent": {
"types": [
"other"
]
},
"percentile_ranks": {
"types": [
"boolean",
"date",
"histogram",
"numeric"
]
},
"percentiles": {
"types": [
"boolean",
"date",
"histogram",
"numeric"
]
},
"range": {
"types": [
"boolean",
"date",
"numeric"
]
},
"rare_terms": {
"types": [
"boolean",
"date",
"ip",
"keyword",
"numeric"
]
},
"rate": {
"types": [
"histogram",
"numeric"
]
},
"reverse_nested": {
"types": [
"other"
]
},
"sampler": {
"types": [
"other"
]
},
"scripted_metric": {
"types": [
"other"
]
},
"significant_terms": {
"types": [
"boolean",
"date",
"ip",
"keyword",
"numeric"
]
},
"significant_text": {
"types": [
"other"
]
},
"stats": {
"types": [
"boolean",
"date",
"numeric"
]
},
"string_stats": {
"types": [
"keyword"
]
},
"sum": {
"types": [
"aggregate_metric",
"boolean",
"date",
"histogram",
"numeric"
]
},
"t_test": {
"types": [
"numeric"
]
},
"terms": {
"types": [
"boolean",
"date",
"ip",
"keyword",
"numeric"
]
},
"top_hits": {
"types": [
"other"
]
},
"top_metrics": {
"types": [
"other"
]
},
"value_count": {
"types": [
"aggregate_metric",
"boolean",
"date",
"geopoint",
"geoshape",
"histogram",
"ip",
"keyword",
"numeric",
"range"
]
},
"variable_width_histogram": {
"types": [
"numeric"
]
},
"weighted_avg": {
"types": [
"numeric"
]
}
}
}
}
}
