{ "metadata": { "stored_scripts": { "ncutilization_resource_tmpl": { "lang": "mustache", "source": "\n\t\t {\n\t\t\t\"_source\": {\n\t\t\t\t\"includes\": [\n\t\t\t\t\t\"{{aggComponentName}}\",\n\t\t\t\t\t\"usage\"\n\t\t\t\t]\n\t\t\t},\n\t\t\t\"query\": {\n\t\t\t\t\"bool\": {\n\t\t\t\t\t\"must\": [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"range\": {\n\t\t\t\t\t\t\t\t\"timestamp\": {\n\t\t\t\t\t\t\t\t\t\"gte\": \"{{gte}}\",\n\t\t\t\t\t\t\t\t\t\"lte\": \"{{lte}}\",\n\t\t\t\t\t\t\t\t\t\"format\": \"epoch_millis\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_id.keyword\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_group_id.keyword\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkGroupId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{#componentName}},\n\t\t\t\t\t\t \n\t\t\t\t\t\t {\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"{{componentName}}\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{componentValue}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t \t\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/componentName}}\n\t\t\t\t\t\t,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"bool\": {\n\t\t\t\t\t\t\t\t\"should\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\t\t\t\"usage_type.keyword\": \"usage.ingress.tx\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\t\t\t\"usage_type.keyword\": \"usage.egress.tx\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t\"minimum_should_match\": 1\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t]\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"size\": \"{{size}}\",\n\t\t\t\"aggs\": {\n\t\t\t\t\"unique_items\": {\n\t\t\t\t\t\"terms\": {\n\t\t\t\t\t\t\"field\": \"{{aggComponentName}}\",\n\t\t\t\t\t\t\"size\": \"{{aggTermSize}}\",\n\t\t\t\t\t\t\"order\": {\n\t\t\t\t\t\t\t\"item_sum\": \"desc\"\n\t\t\t\t\t\t}\n\t\t\t\t\t},\n\t\t\t\t\t\"aggs\": {\n\t\t\t\t\t\t\"item_sum\": {\n\t\t\t\t\t\t\t\"sum\": {\n\t\t\t\t\t\t\t\t\"field\": \"usage\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\t" }, "ncserviceevents_health_tmpl": { "lang": "mustache", "source": "{\"_source\":{\"includes\":[\"nf_service_name.keyword\",\"event_type.keyword\",\"dial_failure_rate\",\"count\"]},\"query\":{\"bool\":{\"must\":[{\"range\":{\"timestamp\":{\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\"}}},{\"match_phrase\":{\"namespace\":{\"query\":\"service.events\"}}},{\"match_phrase\":{\"network_id.keyword\":{\"query\":\"{{networkId}}\"}}},{\"wildcard\":{\"event_type\":\"service.dial.*\"}}]}},\"size\":\"{{size}}\",\"aggs\":{\"group_by_service_name\":{\"terms\":{\"field\":\"nf_service_name.keyword\",\"size\":10},\"aggs\":{\"eventSuccess\":{\"filter\":{\"term\":{\"event_type.keyword\":\"service.dial.success\"}},\"aggs\":{\"sumSuccess\":{\"sum\":{\"field\":\"count\"}}}},\"eventFailure\":{\"filter\":{\"bool\":{\"must_not\":{\"term\":{\"event_type.keyword\":\"service.dial.success\"}}}},\"aggs\":{\"sumFailure\":{\"sum\":{\"field\":\"count\"}}}},\"dial_failure_rate\":{\"bucket_script\":{\"buckets_path\":{\"successCount\":\"eventSuccess>sumSuccess\",\"failureCount\":\"eventFailure>sumFailure\"},\"script\":\"1 - (params.failureCount / (params.successCount + params.failureCount))\"}},\"sorted_dial_failure_rate\":{\"bucket_sort\":{\"sort\":[{\"dial_failure_rate\":{\"order\":\"asc\"}}]}}}}}}", "options": { "content_type": "application/json; charset=UTF-8" } }, "ncfabriccircuits_service_dial_health_tmpl": { "lang": "mustache", "source": "{\"query\":{\"bool\":{\"must\":[],\"filter\":[{\"match_phrase\":{\"network_id\":{\"query\":\"{{networkId}}\"}}},{\"match_phrase\":{\"nf_service_id.keyword\":\"{{serviceId}}\"}},{\"range\":{\"timestamp\":{\"format\":\"strict_date_optional_time\",\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\"}}}]}},\"aggs\":{\"time_buckets\":{\"date_histogram\":{\"field\":\"timestamp\",\"fixed_interval\":\"{{aggInterval}}\",\"time_zone\":\"{{timeZone}}\",\"min_doc_count\":1},\"aggs\":{\"failure_causes\":{\"terms\":{\"field\":\"failure_cause.keyword\",\"order\":{\"_count\":\"desc\"},\"size\":\"{{aggTermSize}}\"}}}}},\"size\":\"{{size}}\"}", "options": { "content_type": "application/json; charset=UTF-8" } }, "ncctrllatency_filter_by_date_tmpl": { "lang": "mustache", "source": "{\"_source\":{\"excludes\":[]},\"stored_fields\":[\"*\"],\"script_fields\":{},\"docvalue_fields\":[{\"field\":\"@timestamp\",\"format\":\"date_time\"},{\"field\":\"timestamp\",\"format\":\"date_time\"}],\"query\":{\"bool\":{\"must\":[{\"match_all\":{}},{\"match_phrase\":{\"network_id\":{\"query\":\"{{networkId}}\"}}},{\"range\":{\"@timestamp\":{\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\",\"format\":\"yyyy-MM-dd\"}}}],\"filter\":[],\"should\":[],\"must_not\":[{\"match_phrase\":{\"max\":88888888888}}]}},\"aggs\":{\"time_buckets\":{\"date_histogram\":{\"field\":\"@timestamp\",\"fixed_interval\":\"{{aggInterval}}\",\"time_zone\":\"{{timeZone}}\",\"min_doc_count\":1},\"aggs\":{\"routers\":{\"terms\":{\"field\":\"router_id.keyword\",\"order\":{\"_key\":\"desc\"}},\"aggs\":{\"avg_of\":{\"avg\":{\"field\":\"{{latencyFilterType}}\"}}}}}}},\"size\":\"{{size}}\"}", "options": { "content_type": "application/json; charset=UTF-8" } }, "nclinklatency_timeouts_date_filter_tmpl": { "lang": "mustache", "source": "{\"query\":{\"bool\":{\"must\":[],\"filter\":[{\"range\":{\"timestamp\":{\"format\":\"strict_date_optional_time\",\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\"}}},{\"match_phrase\":{\"network_id\":{\"query\":\"{{networkId}}\"}}}],\"must_not\":[{\"match_phrase\":{\"max\":8888888888888}},{\"term\":{\"nf_source_edge_router_name.keyword\":\"\"}},{\"term\":{\"nf_destination_edge_router_name.keyword\":\"\"}}]}},\"aggs\":{\"time_buckets\":{\"date_histogram\":{\"field\":\"timestamp\",\"fixed_interval\":\"1h\",\"time_zone\":\"{{timeZone}}\",\"min_doc_count\":1},\"aggs\":{\"source_routers\":{\"terms\":{\"field\":\"nf_source_edge_router_name.keyword\",\"order\":{\"_key\":\"desc\"},\"size\":\"{{aggTermSize}}\"},\"aggs\":{\"destination_routers\":{\"terms\":{\"field\":\"nf_destination_edge_router_name.keyword\",\"order\":{\"_key\":\"desc\"},\"size\":\"{{aggTermSize}}\"},\"aggs\":{\"avg_of\":{\"avg\":{\"field\":\"max\"}}}}}}}}},\"size\":\"{{size}}\"}", "options": { "content_type": "application/json;charset=utf-8" } }, "ncctrllatency_controller_latency_v8_tmpl": { "lang": "mustache", "source": "{\"_source\":{\"excludes\":[]},\"stored_fields\":[\"*\"],\"script_fields\":{},\"docvalue_fields\":[{\"field\":\"timestamp\",\"format\":\"date_time\"}],\"query\":{\"bool\":{\"must\":[{\"match_phrase\":{\"network_group_id\":{\"query\":\"{{networkGroupId}}\"}}},{\"match_phrase\":{\"network_id\":{\"query\":\"{{networkId}}\"}}},{\"range\":{\"timestamp\":{\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\",\"format\":\"strict_date_optional_time\"}}}],\"must_not\":[{\"match_phrase\":{\"max\":88888888888}}]}},\"aggs\":{\"time_buckets\":{\"date_histogram\":{\"field\":\"timestamp\",\"fixed_interval\":\"{{interval}}\",\"min_doc_count\":1},\"aggs\":{\"routers\":{\"terms\":{\"field\":\"edge_router_name.keyword\",\"size\":2000,\"order\":{\"_key\":\"desc\"}},\"aggs\":{\"avg_of\":{\"avg\":{\"field\":\"{{latencyType}}\"}}}}}}},\"size\":0}", "options": { "content_type": "application/json; charset=UTF-8" } }, "ncutilization_rx_and_tx_tmpl": { "lang": "mustache", "source": "\n\t\t {\n\t\t\t\"_source\": {\n\t\t\t\t\"includes\": [\n\t\t\t\t\t\"usage_type.keyword\",\n\t\t\t\t\t\"usage\",\n\t\t\t\t\t\"timestamp\"\n\t\t\t\t]\n\t\t\t},\n\t\t\t\"query\": {\n\t\t\t\t\"bool\": {\n\t\t\t\t\t\"must\": [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_id\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_group_id\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkGroupId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"bool\": {\n\t\t\t\t\t\t\t\t\"should\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\t\t\t\"usage_type.keyword\": \"usage.ingress.tx\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\t\t\t\"usage_type.keyword\": \"usage.egress.tx\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t\"minimum_should_match\": 1\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"range\": {\n\t\t\t\t\t\t\t\t\"@timestamp\": {\n\t\t\t\t\t\t\t\t\t\"gte\": \"{{gte}}\",\n\t\t\t\t\t\t\t\t\t\"lte\": \"{{lte}}\",\n\t\t\t\t\t\t\t\t\t\"format\": \"epoch_millis\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#componentName}},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"{{componentName}}\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{componentValue}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/componentName}}\n\t\t\t\t\t],\n\t\t\t\t\t\"filter\": {\n\t\t\t\t\t\t\"bool\": {\n\t\t\t\t\t\t\t\"must\": [\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"match_all\": {}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t {{#attributes}},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"terms\": {\n\t\t\t\t\t\t\t\t\t\"attributes.keyword\": {{#toJson}}attributes{{/toJson}}\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t {{/attributes}}\n\t\t\t\t\t\t\t]\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"size\": \"{{size}}\",\n\t\t\t\"aggs\": {\n\t\t\t\t\"timebuckets\": {\n\t\t\t\t\t\"date_histogram\": {\n\t\t\t\t\t\t\"field\": \"timestamp\",\n\t\t\t\t\t\t\"fixed_interval\": \"{{interval}}\",\n\t\t\t\t\t\t\"time_zone\": \"{{timeZone}}\",\n\t\t\t\t\t\t\"min_doc_count\": 1\n\t\t\t\t\t},\n\t\t\t\t\t\"aggs\": {\n\t\t\t\t\t\t\"usage_sums\": {\n\t\t\t\t\t\t\t\"terms\": {\n\t\t\t\t\t\t\t\t\"field\": \"usage_type.keyword\",\n\t\t\t\t\t\t\t\t\"size\": 2,\n\t\t\t\t\t\t\t\t\"order\": {\n\t\t\t\t\t\t\t\t\t\"usage_bytes\": \"desc\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\"aggs\": {\n\t\t\t\t\t\t\t\t\"usage_bytes\": {\n\t\t\t\t\t\t\t\t\t\"sum\": {\n\t\t\t\t\t\t\t\t\t\t\"field\": \"usage\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\t" }, "ncfabriccircuits_service_endpoint_dial_logs_v8_tmpl": { "lang": "mustache", "source": "\n\t\t{\n\t\t\t\"track_total_hits\": true,\n\t\t\t\"sort\": [\n\t\t\t\t{\n\t\t\t\t\t\"timestamp\": {\n\t\t\t\t\t\t\"order\": \"desc\",\n\t\t\t\t\t\t\"unmapped_type\": \"boolean\"\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t],\n\t\t\t\"size\": \"{{size}}\",\n\t\t\t\"query\": {\n\t\t\t\t\"bool\": {\n\t\t\t\t\t\"must\": [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"range\": {\n\t\t\t\t\t\t\t\t\"timestamp\": {\n\t\t\t\t\t\t\t\t\t\"gte\": \"{{gte}}\",\n\t\t\t\t\t\t\t\t\t\"lte\": \"{{lte}}\",\n\t\t\t\t\t\t\t\t\t\"format\": \"epoch_millis\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{#endpointId}},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"identity_id.keyword\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{endpointId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/endpointId}}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#serviceName}},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"service_name.keyword\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{serviceName}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/serviceName}}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#endpointName}},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"identity_name.keyword\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{endpointName}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/endpointName}}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#serviceId}},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"service_id.keyword\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{serviceId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/serviceId}}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#networkEventType}},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"event_type\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkEventType}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/networkEventType}}\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t],\n\t\t\t\t\t\"filter\": [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_group_id\": \"{{networkGroupId}}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_id\": \"{{networkId}}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t]\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\t" }, "nclinklatency_fabric_latency_v8_tmpl": { "lang": "mustache", "source": "{\"query\":{\"bool\":{\"must\":[{\"match\":{\"metric\":\"link.latency\"}},{\"match_phrase\":{\"network_group_id\":{\"query\":\"{{networkGroupId}}\"}}},{\"match\":{\"network_id\":\"{{networkId}}\"}}],\"should\":[{\"match\":{\"source_edge_router_id\":\"{{resourceId}}\"}},{\"match\":{\"destination_edge_router_id\":\"{{resourceId}}\"}}],\"minimum_should_match\":1,\"must_not\":[{\"term\":{\"source_edge_router_name.keyword\":\"\"}},{\"term\":{\"destination_edge_router_name.keyword\":\"\"}}],\"filter\":[{\"script\":{\"script\":\"doc['source_edge_router_name.keyword'].value != doc['destination_edge_router_name.keyword'].value\"}},{\"match_phrase\":{\"network_id\":\"{{networkId}}\"}},{\"range\":{\"timestamp\":{\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\",\"format\":\"strict_date_optional_time\"}}}]}},\"aggs\":{\"links\":{\"terms\":{\"field\":\"link_id.keyword\",\"size\":\"{{aggTermSize}}\",\"order\":{\"_key\":\"desc\"},\"min_doc_count\":1},\"aggs\":{\"source_routers\":{\"terms\":{\"field\":\"source_edge_router_name.keyword\",\"size\":100,\"order\":{\"_key\":\"desc\"},\"min_doc_count\":1},\"aggs\":{\"destination_routers\":{\"terms\":{\"field\":\"destination_edge_router_name.keyword\",\"size\":100,\"order\":{\"_key\":\"desc\"},\"min_doc_count\":1},\"aggs\":{\"intervals\":{\"date_histogram\":{\"field\":\"timestamp\",\"min_doc_count\":0,\"extended_bounds\":{\"min\":\"{{dayFilterMin}}\",\"max\":\"{{dayFilterMax}}\"},\"format\":\"strict_date_optional_time\",\"fixed_interval\":\"{{interval}}\"},\"aggs\":{\"latency\":{\"max\":{\"field\":\"{{latencyType}}\"}}}}}}}}}}},\"size\":0}", "options": { "content_type": "application/json; charset=UTF-8" } }, "ncutilization_usage_summary_tmpl": { "lang": "mustache", "source": "{\"aggs\":{\"usage_sums\":{\"terms\":{\"field\":\"usage_type.keyword\",\"size\":\"{{aggTermSize}}\",\"order\":{\"usage_bytes\":\"desc\"}},\"aggs\":{\"usage_bytes\":{\"sum\":{\"field\":\"usage\"}}}}},\"size\":\"{{size}}\",\"query\":{\"bool\":{\"must\":[{\"range\":{\"@timestamp\":{\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\",\"format\":\"epoch_millis\"}}},{\"match_phrase\":{\"network_id\":{\"query\":\"{{networkId}}\"}}},{\"match_phrase\":{\"network_group_id\":{\"query\":\"{{networkGroupId}}\"}}},{\"bool\":{\"should\":[{\"match_phrase\":{\"usage_type.keyword\":\"usage.ingress.tx\"}},{\"match_phrase\":{\"usage_type.keyword\":\"usage.egress.tx\"}}],\"minimum_should_match\":1}}]}}}", "options": { "content_type": "application/json; charset=UTF-8" } }, "ncfabriccircuits_identity_traffic_analysis_v8_tmpl": { "lang": "mustache", "source": "{\n \"track_total_hits\": false,\n \"aggs\": {\n \"initiator\": {\n \"terms\": {\n \"field\": \"initiator_remote_ip.keyword\",\n \"order\": {\n \"_count\": \"desc\"\n },\n \"size\": 100\n },\n \"aggs\": {\n \"ingress_entity\": {\n \"terms\": {\n \"field\": \"identity_name.keyword\",\n \"order\": {\n \"_count\": \"desc\"\n },\n \"size\": 100\n },\n \"aggs\": {\n \"service_name\": {\n \"terms\": {\n \"field\": \"service_name.keyword\",\n \"order\": {\n \"_count\": \"desc\"\n },\n \"size\": 100\n },\n \"aggs\": {\n \"hosting_entity\": {\n \"terms\": {\n \"field\": \"host_name.keyword\",\n \"order\": {\n \"_count\": \"desc\"\n },\n \"size\": 100\n },\n \"aggs\": {\n \"terminator_remote\": {\n \"terms\": {\n \"field\": \"path.terminator_remote_addr.keyword\",\n \"order\": {\n \"_count\": \"desc\"\n },\n \"size\": 100\n }\n }\n }\n }\n }\n }\n }\n }\n }\n }\n },\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"must\": [],\n \"filter\": [\n \n {\n \"match_phrase\": {\n \"network_id.keyword\": \"{{networkId}}\"\n }\n },\n {\n \"match_phrase\": {\n \"network_group_id.keyword\": \"{{networkGroupId}}\"\n }\n },\n {\n \"range\": {\n \"timestamp\": {\n \"format\": \"strict_date_optional_time\",\n \"gte\": \"{{gte}}\",\n \"lte\": \"{{lte}}\"\n }\n }\n }\n {{#endpointId}},\n{\n \"match_phrase\": {\n \"identity_id.keyword\": \"{{endpointId}}\"\n }\n }\n\n {{/endpointId}}\n\n {{#serviceId}},\n{\n \"match_phrase\": {\n \"service_id.keyword\": \"{{serviceId}}\"\n }\n }\n {{/serviceId}}\n\n {{#serviceName}},\n{\n \"match_phrase\": {\n \"service_name.keyword\": \"{{serviceName}}\"\n }\n }\n {{/serviceName}}\n\n {{#hostName}},\n{\n \"match_phrase\": {\n \"host_name.keyword\": \"{{hostName}}\"\n }\n }\n {{/hostName}}\n\n {{#terminatorRemoteIp}},\n{\n \"terms\": {\n \"terminator_remote_ip.keyword\": {{#toJson}}terminatorRemoteIp{{/toJson}}\n }\n }\n {{/terminatorRemoteIp}}\n\n\t\t {{#terminatorRemotePort}},\n{\n \"terms\": {\n \"terminator_remote_port.keyword\": {{#toJson}}terminatorRemotePort{{/toJson}}\n }\n }\n {{/terminatorRemotePort}}\n\n {{#initiatorRemoteIp}},\n{\n \"terms\": {\n \"initiator_remote_ip.keyword\": {{#toJson}}initiatorRemoteIp{{/toJson}}\n }\n }\n {{/initiatorRemoteIp}}\n\n \n ]\n }\n }\n}\n" }, "ncserviceevents_health_count_tmpl": { "lang": "mustache", "source": "{\"_source\":{\"includes\":[\"event_type.keyword\",\"count\"]},\"query\":{\"bool\":{\"must\":[{\"range\":{\"@timestamp\":{\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\",\"format\":\"epoch_millis\"}}},{\"match_phrase\":{\"network_id\":{\"query\":\"{{networkId}}\"}}},{\"match_phrase\":{\"network_group_id\":{\"query\":\"{{networkGroupId}}\"}}},{\"match_phrase\":{\"nf_service_id\":{\"query\":\"{{serviceId}}\"}}}]}},\"size\":\"{{size}}\",\"aggs\":{\"event_types\":{\"terms\":{\"field\":\"event_type.keyword\",\"size\":\"{{aggTermSize}}\"},\"aggs\":{\"sum\":{\"sum\":{\"field\":\"count\"}}}}}}", "options": { "content_type": "application/json; charset=UTF-8" } }, "nclinklatency_fabric_latency_by_date_filter_tmpl": { "lang": "mustache", "source": "{\"_source\":{\"excludes\":[]},\"query\":{\"bool\":{\"must\":[{\"range\":{\"timestamp\":{\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\",\"format\":\"yyyy-MM-dd\"}}},{\"match_phrase\":{\"network_id.keyword\":{\"query\":\"{{networkId}}\"}}}],\"must_not\":[{\"match_phrase\":{\"max\":88888888888}},{\"term\":{\"nf_source_edge_router_name.keyword\":\"\"}},{\"term\":{\"nf_destination_edge_router_name.keyword\":\"\"}}]}},\"size\":\"{{size}}\",\"aggs\":{\"time_buckets\":{\"date_histogram\":{\"field\":\"timestamp\",\"fixed_interval\":\"{{aggInterval}}\",\"time_zone\":\"{{timeZone}}\",\"min_doc_count\":1},\"aggs\":{\"source_routers\":{\"terms\":{\"field\":\"nf_source_edge_router_name.keyword\",\"size\":\"{{sourceEdgeRouterSize}}\"},\"aggs\":{\"avg_of\":{\"avg\":{\"field\":\"{{latencyFilterType}}\"}},\"destination_routers\":{\"terms\":{\"field\":\"nf_destination_edge_router_name.keyword\",\"size\":\"{{destinationEdgeRouterSize}}\"},\"aggs\":{\"avg_of\":{\"avg\":{\"field\":\"{{latencyFilterType}}\"}}}}}}}}}}", "options": { "content_type": "application/json; charset=UTF-8" } }, "ncserviceevents_health_tmpl_v8": { "lang": "mustache", "source": "{\"_source\":{\"includes\":[\"service_name.keyword\",\"event_type.keyword\",\"dial_failure_rate\",\"count\"]},\"query\":{\"bool\":{\"must\":[{\"range\":{\"timestamp\":{\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\"}}},{\"match_phrase\":{\"namespace\":{\"query\":\"service.events\"}}},{\"match_phrase\":{\"network_id.keyword\":{\"query\":\"{{networkId}}\"}}},{\"wildcard\":{\"event_type\":\"service.dial.*\"}}]}},\"size\":\"{{size}}\",\"aggs\":{\"group_by_service_name\":{\"terms\":{\"field\":\"service_name.keyword\",\"size\":10},\"aggs\":{\"eventSuccess\":{\"filter\":{\"term\":{\"event_type.keyword\":\"service.dial.success\"}},\"aggs\":{\"sumSuccess\":{\"sum\":{\"field\":\"count\"}}}},\"eventFailure\":{\"filter\":{\"bool\":{\"must_not\":{\"term\":{\"event_type.keyword\":\"service.dial.success\"}}}},\"aggs\":{\"sumFailure\":{\"sum\":{\"field\":\"count\"}}}},\"dial_failure_rate\":{\"bucket_script\":{\"buckets_path\":{\"successCount\":\"eventSuccess>sumSuccess\",\"failureCount\":\"eventFailure>sumFailure\"},\"script\":\"1 - (params.failureCount / (params.successCount + params.failureCount))\"}},\"sorted_dial_failure_rate\":{\"bucket_sort\":{\"sort\":[{\"dial_failure_rate\":{\"order\":\"asc\"}}]}}}}}}", "options": { "content_type": "application/json; charset=UTF-8" } }, "nclinklatency_timeouts_daily_interval_tmpl": { "lang": "mustache", "source": "{\"_source\":{\"includes\":[\"timestamp\"]},\"query\":{\"bool\":{\"must\":[{\"term\":{\"network_id.keyword\":\"{{networkId}}\"}}],\"should\":[],\"must_not\":[{\"match_phrase\":{\"nf_source_edge_router_name.keyword\":\"\"}},{\"match_phrase\":{\"nf_destination_edge_router_name.keyword\":\"\"}},{\"match_phrase\":{\"nf_destination_edge_router_name.keyword\":\"nf_destination_edge_router_name.keyword\"}}]}},\"size\":\"{{size}}\",\"script_fields\":{},\"stored_fields\":[\"*\"],\"runtime_mappings\":{},\"aggs\":{\"time_buckets\":{\"date_histogram\":{\"field\":\"timestamp\",\"calendar_interval\":\"{{calenderInterval}}\",\"time_zone\":\"{{timeZone}}\",\"min_doc_count\":1,\"order\":{\"_key\":\"asc\"}}}}}", "options": { "content_type": "application/json; charset=UTF-8" } }, "ncutilization_top_components_tmpl": { "lang": "mustache", "source": "{\"_source\":{\"includes\":[\"{{aggComponentName}}\",\"usage\"]},\"query\":{\"bool\":{\"must\":[{\"range\":{\"timestamp\":{\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\",\"format\":\"epoch_millis\"}}},{\"match_phrase\":{\"network_id.keyword\":{\"query\":\"{{networkId}}\"}}},{\"match_phrase\":{\"network_group_id.keyword\":{\"query\":\"{{networkGroupId}}\"}}},{\"bool\":{\"should\":[{\"match_phrase\":{\"usage_type.keyword\":\"usage.ingress.tx\"}},{\"match_phrase\":{\"usage_type.keyword\":\"usage.egress.tx\"}}],\"minimum_should_match\":1}}]}},\"size\":\"{{size}}\",\"aggs\":{\"unique_items\":{\"terms\":{\"field\":\"{{aggComponentName}}\",\"size\":\"{{aggTermSize}}\",\"order\":{\"item_sum\":\"desc\"}},\"aggs\":{\"item_sum\":{\"sum\":{\"field\":\"usage\"}}}}}}", "options": { "content_type": "application/json; charset=UTF-8" } }, "ncserviceevents_health_time_series_tmpl_v8": { "lang": "mustache", "source": "{\"_source\":{\"includes\":[\"event_type.keyword\",\"count\"]},\"query\":{\"bool\":{\"must\":[{\"range\":{\"@timestamp\":{\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\",\"format\":\"epoch_millis\"}}},{\"match_phrase\":{\"network_id\":{\"query\":\"{{networkId}}\"}}},{\"match_phrase\":{\"network_group_id\":{\"query\":\"{{networkGroupId}}\"}}},{\"match_phrase\":{\"service_id\":{\"query\":\"{{serviceId}}\"}}}]}},\"size\":\"{{size}}\",\"aggs\":{\"items\":{\"date_histogram\":{\"field\":\"timestamp\",\"fixed_interval\":\"{{aggInterval}}\",\"time_zone\":\"{{timeZone}}\",\"min_doc_count\":1},\"aggs\":{\"event_types\":{\"terms\":{\"field\":\"event_type.keyword\",\"size\":\"{{aggTermSize}}\"},\"aggs\":{\"sum\":{\"sum\":{\"field\":\"count\"}}}}}}}}", "options": { "content_type": "application/json; charset=UTF-8" } }, "ncfabriccircuits_service_endpoint_dial_logs_tmpl": { "lang": "mustache", "source": "\n\t\t{\n\t\t\t\"track_total_hits\": true,\n\t\t\t\"sort\": [\n\t\t\t\t{\n\t\t\t\t\t\"@timestamp\": {\n\t\t\t\t\t\t\"order\": \"desc\",\n\t\t\t\t\t\t\"unmapped_type\": \"boolean\"\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t],\n\t\t\t\"size\": \"{{size}}\",\n\t\t\t\"query\": {\n\t\t\t\t\"bool\": {\n\t\t\t\t\t\"must\": [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"range\": {\n\t\t\t\t\t\t\t\t\"@timestamp\": {\n\t\t\t\t\t\t\t\t\t\"gte\": \"{{gte}}\",\n\t\t\t\t\t\t\t\t\t\"lte\": \"{{lte}}\",\n\t\t\t\t\t\t\t\t\t\"format\": \"epoch_millis\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{#endpointId}},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"nf_endpoint_id\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{endpointId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/endpointId}}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#serviceName}},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"nf_service_name\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{serviceName}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/serviceName}}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#endpointName}},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"nf_endpoint_name\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{endpointName}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/endpointName}}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#serviceId}},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"nf_service_id\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{serviceId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/serviceId}}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#networkEventType}},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"event_type\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkEventType}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/networkEventType}}\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t],\n\t\t\t\t\t\"filter\": [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_group_id\": \"{{networkGroupId}}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_id\": \"{{networkId}}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t]\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\t" }, "ncutilization_metrics_usage_sum_by_component_v8_tmpl": { "lang": "mustache", "source": "\n\t\t{\n\t\t\t\"_source\": {},\n\t\t\t\"query\": {\n\t\t\t\t\"bool\": {\n\t\t\t\t\t\"must\": [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_id.keyword\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_group_id.keyword\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkGroupId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"range\": {\n\t\t\t\t\t\t\t\t\"timestamp\": {\n\t\t\t\t\t\t\t\t\t\"gte\": \"{{gte}}\",\n\t\t\t\t\t\t\t\t\t\"lte\": \"{{lte}}\",\n\t\t\t\t\t\t\t\t\t\"format\": \"epoch_millis\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#componentName}},\n\t\t\t\t\t\t \n\t\t\t\t\t\t {\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"{{componentName}}\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{componentValue}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t \t\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/componentName}}\n\t\t\t\t\t\t\n\t\t\t\t\t],\n\t\t\t\t\t\"filter\": {\n\t\t\t\t\t\t\"bool\": {\n\t\t\t\t\t\t\t\"must\": [\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"match_all\": {}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t{{#attributes}},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"terms\": {\n\t\t\t\t\t\t\t\t\t\"attributes.keyword\": {{#toJson}}attributes{{/toJson}}\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t {{/attributes}}\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t]\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"size\": \"{{size}}\",\n\t\t\t\"aggs\": {\n \"Top10Services\": {\n \"terms\": {\n \"field\": \"{{aggComponentName}}\",\n \"order\": {\n \"tx\": \"desc\"\n },\n \"size\": 10\n },\n \"aggs\": {\n \"tx\": {\n \"sum\": {\n \"field\": \"usage.egress.tx\"\n }\n },\n \"rx\": {\n \"sum\": {\n \"field\": \"usage.ingress.tx\"\n }\n },\n \"total_sum\": {\n \"bucket_script\": {\n \"buckets_path\": {\n \"sumtx\": \"tx\",\n \"sumrx\": \"rx\"\n },\n \"script\": \"params.sumtx + params.sumrx\"\n }\n },\n \"sort_by_total_sum\": {\n \"bucket_sort\": {\n \"sort\": [\n {\n \"total_sum\": {\n \"order\": \"desc\"\n }\n }\n ]\n }\n }\n }\n }\n }\n\t\t}\n\t\t" }, "ncutilization_endpoint_visualization_tmpl": { "lang": "mustache", "source": "{\"_source\":{\"includes\":[\"usage_type.keyword\",\"nf_endpoint_name.keyword\",\"nf_service_name.keyword\",\"nf_host_name.keyword\",\"nf_edge_router_name.keyword\",\"usage\"]},\"size\":\"{{size}}\",\"aggs\":{\"endpoint_bucket\":{\"terms\":{\"field\":\"nf_endpoint_name.keyword\",\"order\":{\"1\":\"desc\"},\"size\":\"{{aggTermSize}}\"},\"aggs\":{\"1\":{\"sum\":{\"field\":\"usage\"}},\"services_bucket\":{\"terms\":{\"field\":\"nf_service_name.keyword\",\"order\":{\"1\":\"desc\"},\"size\":500},\"aggs\":{\"1\":{\"sum\":{\"field\":\"usage\"}},\"hosts_bucket\":{\"terms\":{\"field\":\"nf_host_name.keyword\",\"order\":{\"1\":\"desc\"},\"size\":500},\"aggs\":{\"1\":{\"sum\":{\"field\":\"usage\"}},\"routers_bucket\":{\"terms\":{\"field\":\"nf_edge_router_name.keyword\",\"order\":{\"1\":\"desc\"},\"size\":500},\"aggs\":{\"1\":{\"sum\":{\"field\":\"usage\"}},\"usage_type_bucket\":{\"terms\":{\"field\":\"usage_type.keyword\",\"order\":{\"1\":\"desc\"},\"size\":5},\"aggs\":{\"1\":{\"sum\":{\"field\":\"usage\"}}}}}}}}}}}}},\"script_fields\":{},\"stored_fields\":[\"*\"],\"runtime_mappings\":{},\"query\":{\"bool\":{\"must\":[{\"match_phrase\":{\"network_id.keyword\":\"{{networkId}}\"}},{\"match_phrase\":{\"nf_endpoint_id.keyword\":\"{{endpointId}}\"}},{\"match_phrase\":{\"nf_service_name.keyword\":\"{{serviceName}}\"}}],\"filter\":[{\"range\":{\"timestamp\":{\"format\":\"epoch_millis\",\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\"}}}],\"should\":[],\"must_not\":[{\"match_phrase\":{\"usage_type.keyword\":\"usage.egress.rx\"}},{\"match_phrase\":{\"usage_type.keyword\":\"usage.ingress.rx\"}}]}}}", "options": { "content_type": "application/json; charset=UTF-8" } }, "ncentityevent_dashboard_events_tmpl": { "lang": "mustache", "source": "\n\t\t {\n \"query\": {\n \"bool\": {\n \"must\": [\n {\n \"query_string\": {\n \"query\": \"*\",\n \"analyze_wildcard\": true\n }\n },\n {\n \"match_phrase\": {\n \"tags.keyword\": {\n \"query\": \"customer\"\n }\n }\n },\n {\n \"range\": {\n \"@timestamp\": {\n \"gte\": \"{{gte}}\",\n \"lte\": \"{{lte}}\",\n \"format\": \"epoch_millis\"\n }\n }\n },\n {\n \"match_phrase\": {\n \"networkGroupId\": {\n \"query\": \"{{networkGroupId}}\"\n }\n }\n },\n {\n \"match_phrase\": {\n \"networkId\": \"{{networkId}}\"\n }\n }\n {{#queryString}},\n {\n \"query_string\": {\n \"query\": \"{{queryString}}\",\n \"analyze_wildcard\": true\n }\n }\n {{/queryString}}\n \n {{#edgeRouterId}},\n {\n \"match_phrase\": {\n \"resourceId\": {\n \"query\": \"{{edgeRouterId}}\"\n }\n }\n }\n {{/edgeRouterId}}\n \n {{#endpointId}},\n {\n \"match_phrase\": {\n \"resourceId\": {\n \"query\": \"{{endpointId}}\"\n }\n }\n }\n {{/endpointId}}\n \n {{#endpointName}},\n {\n \"match_phrase\": {\n \"commonName.keyword\": {\n \"query\": \"{{endpointName}}\"\n }\n }\n }\n {{/endpointName}}\n \t\n {{#resourceId}},\n {\n \"match_phrase\": {\n \"resourceId\": {\n \"query\": \"{{resourceId}}\"\n }\n }\n }\n {{/resourceId}}\n \n {{#componentId}},\n {\n \"match_phrase\": {\n \"resourceId\": {\n \"query\": \"{{componentId}}\"\n }\n }\n }\n {{/componentId}}\n ],\n \"must_not\": [\n {\n \"match_phrase\": {\n \"changeType\": {\n \"query\": \"soft\"\n }\n }\n }\n ]\n }\n },\n \"size\": \"{{size}}\",\n \"sort\": [\n {\n \"@timestamp\": {\n \"order\": \"desc\",\n \"unmapped_type\": \"boolean\"\n }\n }\n ],\n \"_source\": {\n \"excludes\": []\n }\n }\n" }, "nclinklatency_fabric_latency_tmpl": { "lang": "mustache", "source": "{\"query\":{\"bool\":{\"must\":[{\"match\":{\"metric\":\"link.latency\"}},{\"match_phrase\":{\"network_group_id\":{\"query\":\"{{networkGroupId}}\"}}},{\"match\":{\"network_id\":\"{{networkId}}\"}}],\"should\":[{\"match\":{\"source_edge_router_id\":\"{{resourceId}}\"}},{\"match\":{\"destination_edge_router_id\":\"{{resourceId}}\"}}],\"minimum_should_match\":1,\"must_not\":[{\"term\":{\"nf_source_edge_router_name.keyword\":\"\"}},{\"term\":{\"nf_destination_edge_router_name.keyword\":\"\"}}],\"filter\":[{\"script\":{\"script\":\"doc['nf_source_edge_router_name.keyword'].value != doc['nf_destination_edge_router_name.keyword'].value\"}},{\"match_phrase\":{\"network_id\":\"{{networkId}}\"}},{\"range\":{\"timestamp\":{\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\",\"format\":\"strict_date_optional_time\"}}}]}},\"aggs\":{\"links\":{\"terms\":{\"field\":\"link_id.keyword\",\"size\":\"{{aggTermSize}}\",\"order\":{\"_key\":\"desc\"},\"min_doc_count\":1},\"aggs\":{\"source_routers\":{\"terms\":{\"field\":\"nf_source_edge_router_name.keyword\",\"size\":100,\"order\":{\"_key\":\"desc\"},\"min_doc_count\":1},\"aggs\":{\"destination_routers\":{\"terms\":{\"field\":\"nf_destination_edge_router_name.keyword\",\"size\":100,\"order\":{\"_key\":\"desc\"},\"min_doc_count\":1},\"aggs\":{\"intervals\":{\"date_histogram\":{\"field\":\"timestamp\",\"min_doc_count\":0,\"extended_bounds\":{\"min\":\"{{dayFilterMin}}\",\"max\":\"{{dayFilterMax}}\"},\"format\":\"strict_date_optional_time\",\"fixed_interval\":\"{{interval}}\"},\"aggs\":{\"latency\":{\"max\":{\"field\":\"{{latencyType}}\"}}}}}}}}}}},\"size\":0}", "options": { "content_type": "application/json; charset=UTF-8" } }, "nf_component_usage_tmpl": { "lang": "mustache", "source": " {\n \"size\": 100,\n \"query\": {\n \"bool\": {\n \"must\": [\n {\n \"bool\": {\n \"should\": [\n {\n \"terms\": {\n \"networkID.keyword\":{{#toJson}}network_List{{/toJson}}\n }\n }\n ],\n \"adjust_pure_negative\": true,\n \"minimum_should_match\": \"1\",\n \"boost\": 1.0\n }\n },\n {\n \"match_phrase\": {\n \"componentGroup\": {\n \"query\": \"ZT_EDGE_IDENTITIES\",\n \"slop\": 0,\n \"zero_terms_query\": \"NONE\",\n \"boost\": 1.0\n }\n }\n },\n {\n \"range\": {\n \"@timestamp\": {\n \"gte\": \"{{gte}}\",\n \"lte\": \"{{lte}}\"\n }\n }\n }\n ],\n \"adjust_pure_negative\": true,\n \"boost\": 1.0\n }\n },\n \"aggregations\": {\n \"group_by_networkid\": {\n \"terms\": {\n \"field\": \"networkID.keyword\",\n \"size\": 10,\n \"min_doc_count\": 1,\n \"shard_min_doc_count\": 0,\n \"show_term_doc_count_error\": false,\n \"order\": [\n {\n \"_count\": \"desc\"\n },\n {\n \"_key\": \"asc\"\n }\n ]\n },\n \"aggregations\": {\n \"average_endpoints_used\": {\n \"avg\": {\n \"field\": \"endpointQuantity\"\n }\n },\n \"average_registered_endpoints_used\": {\n \"avg\": {\n \"field\": \"registeredEndpointQuantity\"\n }\n },\n \"average_routers_used\": {\n \"avg\": {\n \"field\": \"routerQuantity\"\n }\n },\n \"average_registered_routers_used\": {\n \"avg\": {\n \"field\": \"registeredRouterQuantity\"\n }\n },\n \"average_registered_private_routers_used\": {\n \"avg\": {\n \"field\": \"registeredPrivateRouterQuantity\"\n }\n },\n \"average_registered_cloud_routers_used\": {\n \"avg\": {\n \"field\": \"registeredCloudRouterQuantity\"\n }\n }\n }\n }\n }\n }\n}\n" }, "ncutilization_metrics_usage_bytes_by_component_tmpl": { "lang": "mustache", "source": "\n\t\t{\n\t\t\t\"_source\": {\n\t\t\t\t\"includes\": [\n\t\t\t\t\t\"{{aggComponentName}}\",\n\t\t\t\t\t\"usage\"\n\t\t\t\t]\n\t\t\t},\n\t\t\t\"query\": {\n\t\t\t\t\"bool\": {\n\t\t\t\t\t\"must\": [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_id\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_group_id\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkGroupId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"bool\": {\n\t\t\t\t\t\t\t\t\"should\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\t\t\t\"usage_type.keyword\": \"usage.ingress.tx\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\t\t\t\"usage_type.keyword\": \"usage.egress.tx\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t\"minimum_should_match\": 1\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"range\": {\n\t\t\t\t\t\t\t\t\"@timestamp\": {\n\t\t\t\t\t\t\t\t\t\"gte\": \"{{gte}}\",\n\t\t\t\t\t\t\t\t\t\"lte\": \"{{lte}}\",\n\t\t\t\t\t\t\t\t\t\"format\": \"epoch_millis\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#componentName}},\n\t\t\t\t\t\t \n\t\t\t\t\t\t {\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"{{componentName}}\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{componentValue}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t \t\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/componentName}}\n\t\t\t\t\t\t\n\t\t\t\t\t],\n\t\t\t\t\t\"filter\": {\n\t\t\t\t\t\t\"bool\": {\n\t\t\t\t\t\t\t\"must\": [\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"match_all\": {}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t{{#attributes}},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"terms\": {\n\t\t\t\t\t\t\t\t\t\"attributes.keyword\": {{#toJson}}attributes{{/toJson}}\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t {{/attributes}}\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t]\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"size\": \"{{size}}\",\n\t\t\t\"aggs\": {\n\t\t\t\t\"items\": {\n\t\t\t\t\t\"terms\": {\n\t\t\t\t\t\t\"field\": \"{{aggComponentName}}\",\n\t\t\t\t\t\t\"size\": \"{{aggTermSize}}\",\n\t\t\t\t\t\t\"order\": {\n\t\t\t\t\t\t\t\"usage_bytes\": \"desc\"\n\t\t\t\t\t\t}\n\t\t\t\t\t},\n\t\t\t\t\t\"aggs\": {\n\t\t\t\t\t\t\"usage_bytes\": {\n\t\t\t\t\t\t\t\"sum\": {\n\t\t\t\t\t\t\t\t\"field\": \"usage\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"timebuckets\": {\n\t\t\t\t\t\t\t\"date_histogram\": {\n\t\t\t\t\t\t\t\t\"field\": \"timestamp\",\n\t\t\t\t\t\t\t\t\"fixed_interval\": \"{{interval}}\",\n\t\t\t\t\t\t\t\t\"time_zone\": \"{{timeZone}}\",\n\t\t\t\t\t\t\t\t\"min_doc_count\": 0\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\"aggs\": {\n\t\t\t\t\t\t\t\t\"usage_bytes\": {\n\t\t\t\t\t\t\t\t\t\"sum\": {\n\t\t\t\t\t\t\t\t\t\t\"field\": \"usage\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\t" }, "ncutilization_metrics_usage_bytes_by_component_v8_tmpl": { "lang": "mustache", "source": "\n\t\t{\n\t\t\t\"_source\": {\n\t\t\t},\n\t\t\t\"query\": {\n\t\t\t\t\"bool\": {\n\t\t\t\t\t\"must\": [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_id\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_group_id\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkGroupId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"range\": {\n\t\t\t\t\t\t\t\t\"timestamp\": {\n\t\t\t\t\t\t\t\t\t\"gte\": \"{{gte}}\",\n\t\t\t\t\t\t\t\t\t\"lte\": \"{{lte}}\",\n\t\t\t\t\t\t\t\t\t\"format\": \"epoch_millis\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#componentName}},\n\t\t\t\t\t\t \n\t\t\t\t\t\t {\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"{{componentName}}\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{componentValue}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t \t\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/componentName}}\n\t\t\t\t\t\t\n\t\t\t\t\t],\n\t\t\t\t\t\"filter\": {\n\t\t\t\t\t\t\"bool\": {\n\t\t\t\t\t\t\t\"must\": [\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"match_all\": {}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t{{#attributes}},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"terms\": {\n\t\t\t\t\t\t\t\t\t\"attributes.keyword\": {{#toJson}}attributes{{/toJson}}\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t {{/attributes}}\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t]\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"size\": \"{{size}}\",\n\t\t\t\"aggs\": {\n \"top10Services\": {\n \"terms\": {\n \"field\": \"{{aggComponentName}}\",\n \"order\": {\n \"_key\": \"desc\"\n },\n \"size\": 10\n },\n \"aggs\": {\n \"time_buckets\": {\n \"date_histogram\": {\n \"field\": \"timestamp\",\n \"fixed_interval\": \"{{interval}}\",\n \"time_zone\": \"{{timeZone}}\",\n \"min_doc_count\": 1\n },\n \"aggs\": {\n \"tx\": {\n \"sum\": {\n \"field\": \"usage.egress.tx\"\n }\n },\n \"rx\": {\n \"sum\": {\n \"field\": \"usage.ingress.tx\"\n }\n },\n \"total_sum\": {\n \"bucket_script\": {\n \"buckets_path\": {\n \"sumtx\": \"tx\",\n \"sumrx\": \"rx\"\n },\n \"script\": \"params.sumtx + params.sumrx\"\n }\n }\n }\n }\n }\n }\n }\n\t\t}\n\t\t" }, "ncutilization_active_endpoints_tmpl": { "lang": "mustache", "source": "{\"_source\":{\"includes\":[\"identity_id.keyword\"]},\"query\":{\"bool\":{\"must\":[{\"range\":{\"timestamp\":{\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\",\"format\":\"epoch_millis\"}}},{\"match_phrase\":{\"network_id.keyword\":{\"query\":\"{{networkId}}\"}}},{\"match_phrase\":{\"network_group_id.keyword\":{\"query\":\"{{networkGroupId}}\"}}}]}},\"size\":\"{{size}}\",\"aggs\":{\"date_buckets\":{\"date_histogram\":{\"field\":\"timestamp\",\"fixed_interval\":\"{{interval}}\",\"time_zone\":\"{{timeZone}}\",\"min_doc_count\":1},\"aggs\":{\"unique_identities\":{\"cardinality\":{\"field\":\"identity_id.keyword\"}}}}}}", "options": { "content_type": "application/json; charset=UTF-8" } }, "ncevents_all_tmpl": { "lang": "mustache", "source": "{\"query\":{\"bool\":{\"must\":[{\"match_phrase\":{\"network_group_id\":{\"query\":\"{{networkGroupId}}\"}}},{\"match_phrase\":{\"network_id\":{\"query\":\"{{networkId}}\"}}}]}},\"size\":\"{{size}}\"}", "options": { "content_type": "application/json; charset=UTF-8" } }, "ncevents_endpoint_last_seen_tmpl": { "lang": "mustache", "source": "{\"_source\":\"timestamp\",\"query\":{\"bool\":{\"must\":[{\"match_all\":{}},{\"match_phrase\":{\"event_type\":{\"query\":\"deleted\"}}},{\"match_phrase\":{\"nf_endpoint_id\":{\"query\":\"{{endpointId}}\"}}},{\"match_phrase\":{\"network_id\":{\"query\":\"{{networkId}}\"}}},{\"range\":{\"timestamp\":{\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\",\"format\":\"epoch_millis\"}}}]}},\"size\":\"{{size}}\",\"sort\":[{\"@timestamp\":{\"order\":\"desc\"}}],\"aggs\":{\"last_hit\":{\"top_hits\":{\"_source\":\"timestamp\",\"size\":1,\"sort\":[{\"@timestamp\":{\"order\":\"desc\"}}]}}}}", "options": { "content_type": "application/json; charset=UTF-8" } }, "ncevents_filter_criteria_tmpl": { "lang": "mustache", "source": "\n\t\t {\n\t\t\t\"query\": {\n\t\t\t\t\"bool\": {\n\t\t\t\t\t\"must\": [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_group_id\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkGroupId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_id\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"range\": {\n\t\t\t\t\t\t\t\t\"timestamp\": {\n\t\t\t\t\t\t\t\t\t\"gte\": \"{{gte}}\",\n\t\t\t\t\t\t\t\t\t\"lte\": \"{{lte}}\",\n\t\t\t\t\t\t\t\t\t\"format\": \"epoch_millis\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#eventName}},\n\t\t\t\t\t\t\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"query_string\": {\n\t\t\t\t\t\t\t\t\"query\": \"{{eventName}}\",\n\t\t\t\t\t\t\t\t\"analyze_wildcard\": true\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/eventName}}\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#eventResourceType}},\n\t\t\t\t\t\t\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"exists\": {\n\t\t\t\t\t\t\t\t\"field\": \"{{eventResourceType}}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{/eventResourceType}}\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#eventType}},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"event_type\": \"{{eventType}}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/eventType}}\n\t\t\t\t\t]\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"size\": \"{{size}}\"\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#eventSort}},\n\t\t\t\t\t\t\n\t\t\t\t\t\t\"sort\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"@timestamp\": {\n\t\t\t\t\t\t\t\t\t\"order\": \"{{eventSort}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{/eventSort}}\n\t\t}\n\t\t" }, "ncutilization_usage_report_tmpl": { "lang": "mustache", "source": "\n {\n \"size\": 1,\n \"query\": {\n \"bool\": {\n \"must\": [\n {\n \"bool\": {\n \"should\": [\n {\n \"terms\": {\n \"network_group_id.keyword\": {{#toJson}}network_group_list{{/toJson}}\n }\n }\n ],\n \"adjust_pure_negative\": true,\n \"minimum_should_match\": \"1\",\n \"boost\": 1.0\n }\n },\n {\n \"bool\": {\n \"should\": [\n {\n \"match_phrase\": {\n \"usage_type\": {\n \"query\": \"usage.egress.tx\",\n \"slop\": 0,\n \"zero_terms_query\": \"NONE\",\n \"boost\": 1.0\n }\n }\n },\n {\n \"match_phrase\": {\n \"usage_type\": {\n \"query\": \"usage.ingress.tx\",\n \"slop\": 0,\n \"zero_terms_query\": \"NONE\",\n \"boost\": 1.0\n }\n }\n }\n ],\n \"adjust_pure_negative\": true,\n \"minimum_should_match\": \"1\",\n \"boost\": 1.0\n }\n },\n {\n \"range\": {\n \"@timestamp\": {\n \"gte\": \"{{gte}}\",\n \"lte\": \"{{lte}}\"\n }\n }\n }\n ],\n \"adjust_pure_negative\": true,\n \"boost\": 1.0\n }\n },\n \"aggregations\": {\n \"group_by_networkid\": {\n \"terms\": {\n \"field\": \"network_id.keyword\",\n \"size\": 10,\n \"min_doc_count\": 1,\n \"shard_min_doc_count\": 0,\n \"show_term_doc_count_error\": false,\n \"order\": [\n {\n \"_count\": \"desc\"\n },\n {\n \"_key\": \"asc\"\n }\n ]\n },\n \"aggregations\": {\n \"sum_data_usage\": {\n \"sum\": {\n \"field\": \"usage\"\n }\n }\n }\n }\n }\n}\n " }, "nclinklatency_timeouts_data_query_tmpl": { "lang": "mustache", "source": "{\"query\":{\"bool\":{\"must\":[],\"filter\":[{\"range\":{\"timestamp\":{\"format\":\"strict_date_optional_time\",\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\"}}},{\"match_phrase\":{\"max\":8888888888888}},{\"match_phrase\":{\"network_id\":\"{{networkId}}\"}}],\"should\":[],\"must_not\":[{\"match_phrase\":{\"nf_destination_edge_router_name\":\"\"}},{\"match_phrase\":{\"nf_source_edge_router_name\":\"\"}}]}},\"track_total_hits\":false,\"sort\":[{\"nf_source_edge_router_name.keyword\":{\"order\":\"desc\"}},{\"nf_destination_edge_router_name.keyword\":{\"order\":\"desc\"}},{\"timestamp\":{\"order\":\"desc\",\"unmapped_type\":\"boolean\"}}],\"fields\":[{\"field\":\"nf_source_edge_router_name\"},{\"field\":\"nf_destination_edge_router_name\"},{\"field\":\"timestamp\"},{\"field\":\"max\"}],\"size\":\"{{size}}\",\"version\":true,\"script_fields\":{},\"stored_fields\":[\"*\"],\"runtime_mappings\":{},\"_source\":false}", "options": { "content_type": "application/json;charset=utf-8" } }, "ncctrllatency_controller_latency_tmpl": { "lang": "mustache", "source": "{\"_source\":{\"excludes\":[]},\"stored_fields\":[\"*\"],\"script_fields\":{},\"docvalue_fields\":[{\"field\":\"timestamp\",\"format\":\"date_time\"}],\"query\":{\"bool\":{\"must\":[{\"match_phrase\":{\"network_group_id\":{\"query\":\"{{networkGroupId}}\"}}},{\"match_phrase\":{\"network_id\":{\"query\":\"{{networkId}}\"}}},{\"range\":{\"timestamp\":{\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\",\"format\":\"strict_date_optional_time\"}}}],\"must_not\":[{\"match_phrase\":{\"max\":88888888888}}]}},\"aggs\":{\"time_buckets\":{\"date_histogram\":{\"field\":\"timestamp\",\"fixed_interval\":\"{{interval}}\",\"min_doc_count\":1},\"aggs\":{\"routers\":{\"terms\":{\"field\":\"nf_edge_router_name.keyword\",\"size\":2000,\"order\":{\"_key\":\"desc\"}},\"aggs\":{\"avg_of\":{\"avg\":{\"field\":\"{{latencyType}}\"}}}}}}},\"size\":0}", "options": { "content_type": "application/json; charset=UTF-8" } }, "ncutilization_metrics_usage_sum_by_component_tmpl": { "lang": "mustache", "source": "\n\t\t{\n\t\t\t\"_source\": {\n\t\t\t\t\"includes\": [\n\t\t\t\t\t\"{{aggComponentName}}\",\n\t\t\t\t\t\"usage\"\n\t\t\t\t]\n\t\t\t},\n\t\t\t\"query\": {\n\t\t\t\t\"bool\": {\n\t\t\t\t\t\"must\": [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_id.keyword\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_group_id.keyword\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkGroupId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"bool\": {\n\t\t\t\t\t\t\t\t\"should\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\t\t\t\"usage_type.keyword\": \"usage.ingress.tx\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\t\t\t\"usage_type.keyword\": \"usage.egress.tx\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t\"minimum_should_match\": 1\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"range\": {\n\t\t\t\t\t\t\t\t\"@timestamp\": {\n\t\t\t\t\t\t\t\t\t\"gte\": \"{{gte}}\",\n\t\t\t\t\t\t\t\t\t\"lte\": \"{{lte}}\",\n\t\t\t\t\t\t\t\t\t\"format\": \"epoch_millis\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#componentName}},\n\t\t\t\t\t\t \n\t\t\t\t\t\t {\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"{{componentName}}\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{componentValue}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t \t\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/componentName}}\n\t\t\t\t\t\t\n\t\t\t\t\t],\n\t\t\t\t\t\"filter\": {\n\t\t\t\t\t\t\"bool\": {\n\t\t\t\t\t\t\t\"must\": [\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"match_all\": {}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t{{#attributes}},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"terms\": {\n\t\t\t\t\t\t\t\t\t\"attributes.keyword\": {{#toJson}}attributes{{/toJson}}\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t {{/attributes}}\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t]\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"size\": \"{{size}}\",\n\t\t\t\"aggs\": {\n\t\t\t\t\"items\": {\n\t\t\t\t\t\"terms\": {\n\t\t\t\t\t\t\"field\": \"{{aggComponentName}}\",\n\t\t\t\t\t\t\"size\": \"{{aggTermSize}}\",\n\t\t\t\t\t\t\"order\": {\n\t\t\t\t\t\t\t\"item_sum\": \"desc\"\n\t\t\t\t\t\t}\n\t\t\t\t\t},\n\t\t\t\t\t\"aggs\": {\n\t\t\t\t\t\t\"item_sum\": {\n\t\t\t\t\t\t\t\"sum\": {\n\t\t\t\t\t\t\t\t\"field\": \"usage\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\t" }, "ncutilization_usage_summary_v8_tmpl": { "lang": "mustache", "source": "{\"aggs\":{\"tx\":{\"sum\":{\"field\":\"usage.egress.tx\"}},\"rx\":{\"sum\":{\"field\":\"usage.ingress.tx\"}}},\"size\":0,\"query\":{\"bool\":{\"filter\":[{\"match_phrase\":{\"network_id.keyword\":\"{{networkId}}\"}},{\"match_phrase\":{\"network_group_id.keyword\":\"{{networkGroupId}}\"}},{\"range\":{\"timestamp\":{\"format\":\"strict_date_optional_time\",\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\"}}}]}}}", "options": { "content_type": "application/json; charset=UTF-8" } }, "nclinklatency_fabric_weekly_hourly_tmpl": { "lang": "mustache", "source": "{\"_source\":{\"excludes\":[]},\"script_fields\":{},\"docvalue_fields\":[{\"field\":\"@timestamp\",\"format\":\"date_time\"},{\"field\":\"timestamp\",\"format\":\"date_time\"}],\"query\":{\"bool\":{\"must\":[{\"match_all\":{}},{\"match_all\":{}},{\"match_phrase\":{\"network_id\":{\"query\":\"{{networkId}}\"}}},{\"range\":{\"@timestamp\":{\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\",\"format\":\"yyyy-MM-dd\"}}},{\"match_phrase\":{\"network_id\":{\"query\":\"{{networkId}}\"}}}],\"filter\":[],\"should\":[],\"must_not\":[{\"match_phrase\":{\"max\":88888888888}},{\"term\":{\"nf_source_edge_router_name.keyword\":\"\"}},{\"term\":{\"nf_destination_edge_router_name.keyword\":\"\"}}]}},\"size\":\"{{size}}\",\"aggs\":{\"source_bucket\":{\"terms\":{\"field\":\"nf_source_edge_router_name.keyword\",\"size\":\"{{sourceEdgeRouterSize}}\",\"order\":{\"_key\":\"desc\"}},\"aggs\":{\"destination_bucket\":{\"terms\":{\"field\":\"nf_destination_edge_router_name.keyword\",\"size\":\"{{destinationEdgeRouterSize}}\",\"order\":{\"_key\":\"desc\"}},\"aggs\":{\"date_bucket\":{\"date_histogram\":{\"field\":\"timestamp\",\"fixed_interval\":\"1d\",\"time_zone\":\"Asia/Kolkata\",\"min_doc_count\":1},\"aggs\":{\"hourly_bucket\":{\"date_histogram\":{\"field\":\"timestamp\",\"fixed_interval\":\"1h\",\"time_zone\":\"Asia/Kolkata\",\"min_doc_count\":1},\"aggs\":{\"avg_max\":{\"avg\":{\"field\":\"max\"}},\"avg_mean\":{\"avg\":{\"field\":\"mean\"}},\"avg_p99\":{\"avg\":{\"field\":\"p99\"}}}}}}}}}}}}", "options": { "content_type": "application/json; charset=UTF-8" } }, "ncentityevent_events_tmpl": { "lang": "mustache", "source": "\n\t\t{\n\t\t\t\"query\": {\n\t\t\t\t\"bool\": {\n\t\t\t\t\t\"must\": [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"networkGroupId\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkGroupId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"networkId\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"range\": {\n\t\t\t\t\t\t\t\t\"@timestamp\": {\n\t\t\t\t\t\t\t\t\t\"format\": \"epoch_millis\",\n\t\t\t\t\t\t\t\t\t\"gte\": \"{{gte}}\",\n\t\t\t\t\t\t\t\t\t\"lte\": \"{{lte}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#networkEventResourceType}},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"resourceType\": \"{{networkEventResourceType}}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{/networkEventResourceType}}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#networkEventType}},\n\t\t\t\t\t\t\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"eventType\": \"{{networkEventType}}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/networkEventType}}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#networkEvent}},\n\t\t\t\t\t\t\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"query_string\": {\n\t\t\t\t\t\t\t\t\"query\": \"{{networkEvent}}\",\n\t\t\t\t\t\t\t\t\"analyze_wildcard\": true\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/networkEvent}}\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t],\n\t\t\t\t\t\"must_not\": [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"changeType\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"soft\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t]\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"size\": \"{{size}}\"\n\t\t\t\t{{#networkEventSort}},\n\t\t\t\t\t\t\"sort\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"@timestamp\": {\n\t\t\t\t\t\t\t\t\t\"order\": \"{{networkEventSort}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t\t\n\t\t {{/networkEventSort}}\n\t\t}\n\t\t" }, "ncutilization_top_components_v8_tmpl": { "lang": "mustache", "source": "\n {\n \"query\": {\n \"bool\": {\n\"must\": [\n {\n \"range\": {\n \"timestamp\": {\n \"gte\": \"{{gte}}\",\n \"lte\": \"{{lte}}\",\n \"format\": \"epoch_millis\"\n }\n }\n },\n {\n \"match_phrase\": {\n \"network_id.keyword\": {\n \"query\": \"{{networkId}}\"\n }\n }\n },\n {\n \"match_phrase\": {\n \"network_group_id.keyword\": {\n \"query\": \"{{networkGroupId}}\"\n }\n }\n }\n]\n }\n },\n \"size\": \"{{size}}\",\n \"aggs\": {\n \"Top10Services\": {\n\"terms\": {\n \"field\": \"{{aggComponentName}}\",\n \"order\": {\n \"tx\": \"desc\"\n },\n \"size\": {{component_size}}{{^component_size}}10{{/component_size}}\n},\n\"aggs\": {\n \"tx\": {\n \"sum\": {\n \"field\": \"usage.egress.tx\"\n }\n },\n \"rx\": {\n \"sum\": {\n \"field\": \"usage.ingress.tx\"\n }\n },\n \"total_sum\": {\n \"bucket_script\": {\n \"buckets_path\": {\n \"sumtx\": \"tx\",\n \"sumrx\": \"rx\"\n },\n \"script\": \"params.sumtx + params.sumrx\"\n }\n },\n \"sort_by_total_sum\": {\n \"bucket_sort\": {\n \"sort\": [\n {\n \"total_sum\": {\n \"order\": \"desc\"\n }\n }\n ]\n }\n }\n}\n }\n }\n }\n" }, "nf_component_usage_report_tmpl": { "lang": "mustache", "source": "\n {\n \"size\": 100,\n \"query\": {\n \"bool\": {\n \"filter\": [\n {\n \"range\": {\n \"@timestamp\": {\n \"gte\": \"{{gte}}\",\n \"lte\": \"{{lte}}\"\n }\n }\n },\n {\n \"match_phrase\": {\n \"componentGroup\": {\n \"query\": \"ZT_EDGE_IDENTITIES\",\n \"slop\": 0,\n \"zero_terms_query\": \"NONE\",\n \"boost\": 1.0\n }\n }\n },\n {\n \"terms\": {\n \"networkGroupID.keyword\": {{#toJson}}network_group_list{{/toJson}}\n }\n }\n ]\n }\n },\n \"aggregations\": {\n \"group_by_network_groupid\": {\n \"terms\": {\n \"field\": \"networkGroupID.keyword\",\n \"size\": 100,\n \"min_doc_count\": 1,\n \"shard_min_doc_count\": 0,\n \"show_term_doc_count_error\": false,\n \"order\": [\n {\n \"_count\": \"desc\"\n },\n {\n \"_key\": \"asc\"\n }\n ]\n },\n \"aggregations\": {\n \"group_by_networkid\": {\n \"terms\": {\n \"field\": \"networkID.keyword\",\n \"size\": 100,\n \"min_doc_count\": 1,\n \"shard_min_doc_count\": 0,\n \"show_term_doc_count_error\": false,\n \"order\": [\n {\n \"_count\": \"desc\"\n },\n {\n \"_key\": \"asc\"\n }\n ]\n },\n \"aggregations\": {\n \"average_endpoints_used\": {\n \"avg\": {\n \"field\": \"endpointQuantity\"\n }\n },\n \"average_registered_endpoints_used\": {\n \"avg\": {\n \"field\": \"registeredEndpointQuantity\"\n }\n },\n \"average_routers_used\": {\n \"avg\": {\n \"field\": \"routerQuantity\"\n }\n },\n \"average_registered_routers_used\": {\n \"avg\": {\n \"field\": \"registeredRouterQuantity\"\n }\n },\n \"average_registered_private_routers_used\": {\n \"avg\": {\n \"field\": \"registeredPrivateRouterQuantity\"\n }\n },\n \"average_registered_cloud_routers_used\": {\n \"avg\": {\n \"field\": \"registeredCloudRouterQuantity\"\n }\n }\n }\n }\n }\n }\n }\n}\n " }, "ncentityevent_all_events_tmpl": { "lang": "mustache", "source": "\n\t\t\n\t\t {\n\t\t\t\"query\": {\n\t\t\t\t\"bool\": {\n\t\t\t\t\t\"must\": [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"query_string\": {\n\t\t\t\t\t\t\t\t\"analyze_wildcard\": true,\n\t\t\t\t\t\t\t\t\"query\": \"*\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"networkGroupId\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkGroupId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"tags.keyword\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"customer\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"networkId\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"range\": {\n\t\t\t\t\t\t\t\t\"@timestamp\": {\n\t\t\t\t\t\t\t\t\t\"format\": \"epoch_millis\",\n\t\t\t\t\t\t\t\t\t\"gte\": \"{{gte}}\",\n\t\t\t\t\t\t\t\t\t\"lte\":\"{{lte}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#networkEventResourceType}},\n\t\t\t\t\t\t\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"resourceType\": \"{{networkEventResourceType}}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{/networkEventResourceType}}\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#networkEventType}},\n\t\t\t\t\t\t\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"eventType\": \"{{networkEventType}}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/networkEventType}}\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t],\n\t\t\t\t\t\"must_not\": [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"changeType\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"soft\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t]\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"size\": \"{{size}}\"\n {{#networkEventSort}},\n\t\t\t\t\t\t\n\t\t\t\t\t\t\"sort\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"@timestamp\": {\n\t\t\t\t\t\t\t\t\t\"order\": \"{{networkEventSort}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t\t\n\t\t {{/networkEventSort}}\n\t\t\n\t\t }\n " }, "ncctrllatency_weekly_hourly_tmpl": { "lang": "mustache", "source": "{\"_source\":{\"excludes\":[]},\"stored_fields\":[\"*\"],\"script_fields\":{},\"docvalue_fields\":[{\"field\":\"@timestamp\",\"format\":\"date_time\"},{\"field\":\"timestamp\",\"format\":\"date_time\"}],\"query\":{\"bool\":{\"must\":[{\"match_all\":{}},{\"match_all\":{}},{\"match_phrase\":{\"networkId\":{\"query\":\"{{networkId}}\"}}},{\"range\":{\"@timestamp\":{\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\",\"format\":\"yyyy-MM-dd\"}}},{\"match_phrase\":{\"networkId\":{\"query\":\"{{networkId}}\"}}}],\"filter\":[],\"should\":[],\"must_not\":[{\"match_phrase\":{\"max\":88888888888}}]}},\"size\":\"{{size}}\",\"aggs\":{\"routers_bucket\":{\"terms\":{\"field\":\"router_id.keyword\",\"size\":50,\"order\":{\"_key\":\"desc\"}},\"aggs\":{\"days_bucket\":{\"date_histogram\":{\"field\":\"@timestamp\",\"fixed_interval\":\"1d\",\"time_zone\":\"UTC\",\"min_doc_count\":1},\"aggs\":{\"hourly_bucket\":{\"date_histogram\":{\"field\":\"@timestamp\",\"fixed_interval\":\"1h\",\"time_zone\":\"UTC\",\"min_doc_count\":1},\"aggs\":{\"avg_max\":{\"avg\":{\"field\":\"max\"}},\"avg_mean\":{\"avg\":{\"field\":\"mean\"}},\"avg_p99\":{\"avg\":{\"field\":\"p99\"}}}}}}}}}}", "options": { "content_type": "application/json; charset=UTF-8" } }, "ncevents_fabric_router_tmpl": { "lang": "mustache", "source": "{\"_source\":{\"includes\":[]},\"query\":{\"bool\":{\"must\":[{\"match_all\":{}},{\"match_phrase\":{\"namespace\":{\"query\":\"fabric.routers\"}}},{\"match_phrase\":{\"network_id\":{\"query\":\"{{networkId}}\"}}},{\"match_phrase\":{\"network_group_id\":{\"query\":\"{{networkGroupId}}\"}}},{\"range\":{\"timestamp\":{\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\",\"format\":\"epoch_millis\"}}}]}},\"size\":\"{{size}}\",\"sort\":[{\"@timestamp\":{\"order\":\"desc\",\"unmapped_type\":\"boolean\"}}]}", "options": { "content_type": "application/json; charset=UTF-8" } }, "ncutilization_rx_and_tx_dashboard_v8_tmpl": { "lang": "mustache", "source": "\n\t\t {\n\t\t\t\"_source\": {\n\t\t\t\t\"includes\": [\n\t\t\t\t\t\"usage_type.keyword\",\n\t\t\t\t\t\"usage\",\n\t\t\t\t\t\"timestamp\"\n\t\t\t\t]\n\t\t\t},\n\t\t\t\"query\": {\n\t\t\t\t\"bool\": {\n\t\t\t\t\t\"must\": [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_id\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_group_id\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkGroupId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"range\": {\n\t\t\t\t\t\t\t\t\"timestamp\": {\n\t\t\t\t\t\t\t\t\t\"gte\": \"{{gte}}\",\n\t\t\t\t\t\t\t\t\t\"lte\": \"{{lte}}\",\n\t\t\t\t\t\t\t\t\t\"format\": \"epoch_millis\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#componentName}},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"{{componentName}}\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{componentValue}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/componentName}}\n\t\t\t\t\t],\n\t\t\t\t\t\"filter\": {\n\t\t\t\t\t\t\"bool\": {\n\t\t\t\t\t\t\t\"must\": [\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"match_all\": {}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t {{#attributes}},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"terms\": {\n\t\t\t\t\t\t\t\t\t\"attributes.keyword\": {{#toJson}}attributes{{/toJson}}\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t {{/attributes}}\n\t\t\t\t\t\t\t]\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"size\": \"{{size}}\",\n\t\t\t\"aggs\": {\n\t\t\t\t\"time_buckets\": {\n\t\t\t\t\t\"date_histogram\": {\n\t\t\t\t\t\t\"field\": \"timestamp\",\n\t\t\t\t\t\t\"calendar_interval\": \"{{calendar_interval}}\",\n\t\t\t\t\t\t\"time_zone\": \"{{timeZone}}\",\n\t\t\t\t\t\t\"min_doc_count\": 1\n\t\t\t\t\t},\n\t\t\t\t\t\"aggs\": {\n\t\t\t\t\t\t\"tx\": {\n\t\t\t\t\t\t\t\"sum\": {\n\t\t\t\t\t\t\t\t\"field\": \"usage.egress.tx\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"rx\": {\n\t\t\t\t\t\t\t\"sum\": {\n\t\t\t\t\t\t\t\t\"field\": \"usage.ingress.tx\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\t" }, "ncserviceevents_health_time_series_tmpl": { "lang": "mustache", "source": "{\"_source\":{\"includes\":[\"event_type.keyword\",\"count\"]},\"query\":{\"bool\":{\"must\":[{\"range\":{\"@timestamp\":{\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\",\"format\":\"epoch_millis\"}}},{\"match_phrase\":{\"network_id\":{\"query\":\"{{networkId}}\"}}},{\"match_phrase\":{\"network_group_id\":{\"query\":\"{{networkGroupId}}\"}}},{\"match_phrase\":{\"nf_service_id\":{\"query\":\"{{serviceId}}\"}}}]}},\"size\":\"{{size}}\",\"aggs\":{\"items\":{\"date_histogram\":{\"field\":\"timestamp\",\"fixed_interval\":\"{{aggInterval}}\",\"time_zone\":\"{{timeZone}}\",\"min_doc_count\":1},\"aggs\":{\"event_types\":{\"terms\":{\"field\":\"event_type.keyword\",\"size\":\"{{aggTermSize}}\"},\"aggs\":{\"sum\":{\"sum\":{\"field\":\"count\"}}}}}}}}", "options": { "content_type": "application/json; charset=UTF-8" } }, "nc_utilization_tmpl": { "lang": "mustache", "source": " {\n \"size\": 1,\n \"query\": {\n \"bool\": {\n \"must\": [\n {\n \"bool\": {\n \"should\": [\n {\n \"terms\": {\n \"network_id.keyword\": {{#toJson}}network_List{{/toJson}}\n }\n }\n ],\n \"adjust_pure_negative\": true,\n \"minimum_should_match\": \"1\",\n \"boost\": 1.0\n }\n },\n {\n \"bool\": {\n \"should\": [\n {\n \"match_phrase\": {\n \"usage_type\": {\n \"query\": \"usage.egress.tx\",\n \"slop\": 0,\n \"zero_terms_query\": \"NONE\",\n \"boost\": 1.0\n }\n }\n },\n {\n \"match_phrase\": {\n \"usage_type\": {\n \"query\": \"usage.ingress.tx\",\n \"slop\": 0,\n \"zero_terms_query\": \"NONE\",\n \"boost\": 1.0\n }\n }\n }\n ],\n \"adjust_pure_negative\": true,\n \"minimum_should_match\": \"1\",\n \"boost\": 1.0\n }\n },\n {\n \"range\": {\n \"@timestamp\": {\n \"gte\": \"{{gte}}\",\n \"lte\": \"{{lte}}\"\n }\n }\n }\n ],\n \"adjust_pure_negative\": true,\n \"boost\": 1.0\n }\n },\n \"aggregations\": {\n \"group_by_networkid\": {\n \"terms\": {\n \"field\": \"network_id.keyword\",\n \"size\": 10,\n \"min_doc_count\": 1,\n \"shard_min_doc_count\": 0,\n \"show_term_doc_count_error\": false,\n \"order\": [\n {\n \"_count\": \"desc\"\n },\n {\n \"_key\": \"asc\"\n }\n ]\n },\n \"aggregations\": {\n \"sum_data_usage\": {\n \"sum\": {\n \"field\": \"usage\"\n }\n }\n }\n }\n }\n}\n" }, "ncutilization_component_usage_tmpl": { "lang": "mustache", "source": "\n \n\t\t {\n\t\t\t\"query\": {\n\t\t\t \"bool\": {\n\t\t\t\t\t\"must\": [\n\t\t\t\t\t \t{\n\t\t\t\t\t\t\t\"bool\": {\n\t\t\t\t\t\t\t\t\"should\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\t\t\t\"usage_type.keyword\": \"usage.ingress.tx\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\t\t\t\"usage_type.keyword\": \"usage.egress.tx\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t\"minimum_should_match\": 1\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t \n\t\t\t\t\t ],\n\t\t\t\t\t\"filter\": [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_id.keyword\": \"{{networkId}}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_group_id.keyword\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkGroupId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t\t{{#aggFieldName}},\n\t\t\t\t\t\t \n\t\t\t\t\t\t {\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t \"{{aggFieldName}}\": \"{{aggFieldValue}}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t \t\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/aggFieldName}},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"range\": {\n\t\t\t\t\t\t\t\t\"timestamp\": {\n\t\t\t\t\t\t\t\t\t\"format\": \"strict_date_optional_time\",\n\t\t\t\t\t\t\t\t\t\"gte\": \"{{gte}}\",\n\t\t\t\t\t\t\t\t\t\"lte\": \"{{lte}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t]\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"size\": \"{{size}}\",\n\t\t\t\"aggs\": {\n\t\t\t\t\"MinuteBucket\": {\n\t\t\t\t\t\t\"date_histogram\": {\n\t\t\t\t\t\t\t\"field\": \"@timestamp\",\n\t\t\t\t\t\t\t\"calendar_interval\": \"{{interval}}\",\n\t\t\t\t\t\t\t\"time_zone\": \"{{timeZone}}\",\n\t\t\t\t\t\t\t\"min_doc_count\": 1\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"aggs\": {\n\t\t\t\t\t\t\t\"totalusage\": {\n\t\t\t\t\t\t\t\t\"sum\": {\n\t\t\t\t\t\t\t\t\t\"field\": \"usage\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t}\n\t\t" }, "ncfabriccircuits_identity_traffic_analysis_tmpl_test": { "lang": "mustache", "source": "\n \n{\n \"track_total_hits\": false,\n \"aggs\": {\n \"initiator\": {\n \"terms\": {\n \"field\": \"initiator_remote_ip.keyword\",\n \"order\": {\n \"_count\": \"desc\"\n },\n \"size\": 100\n },\n \"aggs\": {\n \"ingress_entity\": {\n \"terms\": {\n \"field\": \"nf_endpoint_name.keyword\",\n \"order\": {\n \"_count\": \"desc\"\n },\n \"size\": 100\n },\n \"aggs\": {\n \"service_name\": {\n \"terms\": {\n \"field\": \"nf_service_name.keyword\",\n \"order\": {\n \"_count\": \"desc\"\n },\n \"size\": 100\n },\n \"aggs\": {\n \"hosting_entity\": {\n \"terms\": {\n \"field\": \"nf_host_name.keyword\",\n \"order\": {\n \"_count\": \"desc\"\n },\n \"size\": 100\n },\n \"aggs\": {\n \"terminator_remote\": {\n \"terms\": {\n \"field\": \"path.terminator_remote_addr.keyword\",\n \"order\": {\n \"_count\": \"desc\"\n },\n \"size\": 100\n }\n }\n }\n }\n }\n }\n }\n }\n }\n }\n },\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"must\": [],\n \"filter\": [\n \n {\n \"match_phrase\": {\n \"network_id.keyword\": \"{{networkId}}\"\n }\n },\n {\n \"match_phrase\": {\n \"network_group_id.keyword\": \"{{networkGroupId}}\"\n }\n },\n {\n \"range\": {\n \"timestamp\": {\n \"format\": \"strict_date_optional_time\",\n \"gte\": \"{{gte}}\",\n \"lte\": \"{{lte}}\"\n }\n }\n }\n {{#endpointId}},\n{\n \"match_phrase\": {\n \"nf_endpoint_id.keyword\": \"{{endpointId}}\"\n }\n }\n\n {{/endpointId}}\n\n {{#serviceId}},\n{\n \"match_phrase\": {\n \"nf_service_id.keyword\": \"{{serviceId}}\"\n }\n }\n {{/serviceId}}\n\n {{#serviceName}},\n{\n \"match_phrase\": {\n \"nf_service_name.keyword\": \"{{serviceName}}\"\n }\n }\n {{/serviceName}}\n\n {{#hostName}},\n{\n \"match_phrase\": {\n \"nf_host_name.keyword\": \"{{hostName}}\"\n }\n }\n {{/hostName}}\n\n {{#terminatorRemoteIp}},\n{\n \"terms\": {\n \"terminator_remote_ip.keyword\": {{#toJson}}terminatorRemoteIp{{/toJson}}\n }\n }\n {{/terminatorRemoteIp}}\n\n\t\t {{#terminatorRemotePort}},\n{\n \"terms\": {\n \"terminator_remote_port.keyword\": {{#toJson}}terminatorRemotePort{{/toJson}}\n }\n }\n {{/terminatorRemotePort}}\n\n {{#initiatorRemoteIp}},\n{\n \"terms\": {\n \"initiator_remote_ip.keyword\": {{#toJson}}initiatorRemoteIp{{/toJson}}\n }\n }\n {{/initiatorRemoteIp}}\n\n \n ]\n }\n }\n}\n}\n\t\t \n\t\t" }, "ncevents_date_time_range_tmpl": { "lang": "mustache", "source": "\n\t\t {\n\t\t\t\"_source\": {\n\t\t\t\t\"excludes\": [\n\t\t\t\t\t\"geo\",\n\t\t\t\t\t\"tags\"\n\t\t\t\t]\n\t\t\t},\n\t\t\t\"query\": {\n\t\t\t\t\"bool\": {\n\t\t\t\t\t\"must\": [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_group_id\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkGroupId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"network_id\": {\n\t\t\t\t\t\t\t\t\t\"query\": \"{{networkId}}\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\"range\": {\n\t\t\t\t\t\t\t\t\"timestamp\": {\n\t\t\t\t\t\t\t\t\t\"gte\": \"{{gte}}\",\n\t\t\t\t\t\t\t\t\t\"lte\": \"{{lte}}\",\n\t\t\t\t\t\t\t\t\t\"format\": \"epoch_millis\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t\n\t\t\t\t\t\t{{#componentName}},\n\t\t\t\t\t\t \n\t\t\t\t\t\t {\n\t\t\t\t\t\t\t\"match_phrase\": {\n\t\t\t\t\t\t\t\t\"{{componentName}}\": \"{{componentValue}}\"\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t}\n\t\t\t\t\t \t\n\t\t\t\t\t\t}\n\t\t\t\t\t\t{{/componentName}}\n\n\t\t\t\t\t\t{{#namespace}},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"terms\": {\n\t\t\t\t\t\t\t\t\t\"namespace.keyword\": {{#toJson}}namespace{{/toJson}}\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t {{/namespace}}\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t]\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"size\": \"{{size}}\",\n\t\t\t\"sort\": [\n\t\t\t\t{\n\t\t\t\t\t\"@timestamp\": {\n\t\t\t\t\t\t\"order\": \"desc\",\n\t\t\t\t\t\t\"unmapped_type\": \"boolean\"\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t]\n\t\t}\n\t\t" }, "ncserviceevents_health_count_tmpl_v8": { "lang": "mustache", "source": "{\"_source\":{\"includes\":[\"event_type.keyword\",\"count\"]},\"query\":{\"bool\":{\"must\":[{\"range\":{\"@timestamp\":{\"gte\":\"{{gte}}\",\"lte\":\"{{lte}}\",\"format\":\"epoch_millis\"}}},{\"match_phrase\":{\"network_id\":{\"query\":\"{{networkId}}\"}}},{\"match_phrase\":{\"network_group_id\":{\"query\":\"{{networkGroupId}}\"}}},{\"match_phrase\":{\"service_id\":{\"query\":\"{{serviceId}}\"}}}]}},\"size\":\"{{size}}\",\"aggs\":{\"event_types\":{\"terms\":{\"field\":\"event_type.keyword\",\"size\":\"{{aggTermSize}}\"},\"aggs\":{\"sum\":{\"sum\":{\"field\":\"count\"}}}}}}", "options": { "content_type": "application/json; charset=UTF-8" } }, "ncfabriccircuits_identity_traffic_analysis_tmpl": { "lang": "mustache", "source": "{\n \"track_total_hits\": false,\n \"aggs\": {\n \"initiator\": {\n \"terms\": {\n \"field\": \"initiator_remote_ip.keyword\",\n \"order\": {\n \"_count\": \"desc\"\n },\n \"size\": 100\n },\n \"aggs\": {\n \"ingress_entity\": {\n \"terms\": {\n \"field\": \"nf_endpoint_name.keyword\",\n \"order\": {\n \"_count\": \"desc\"\n },\n \"size\": 100\n },\n \"aggs\": {\n \"service_name\": {\n \"terms\": {\n \"field\": \"nf_service_name.keyword\",\n \"order\": {\n \"_count\": \"desc\"\n },\n \"size\": 100\n },\n \"aggs\": {\n \"hosting_entity\": {\n \"terms\": {\n \"field\": \"nf_host_name.keyword\",\n \"order\": {\n \"_count\": \"desc\"\n },\n \"size\": 100\n },\n \"aggs\": {\n \"terminator_remote\": {\n \"terms\": {\n \"field\": \"path.terminator_remote_addr.keyword\",\n \"order\": {\n \"_count\": \"desc\"\n },\n \"size\": 100\n }\n }\n }\n }\n }\n }\n }\n }\n }\n }\n },\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"must\": [],\n \"filter\": [\n \n {\n \"match_phrase\": {\n \"network_id.keyword\": \"{{networkId}}\"\n }\n },\n {\n \"match_phrase\": {\n \"network_group_id.keyword\": \"{{networkGroupId}}\"\n }\n },\n {\n \"range\": {\n \"timestamp\": {\n \"format\": \"strict_date_optional_time\",\n \"gte\": \"{{gte}}\",\n \"lte\": \"{{lte}}\"\n }\n }\n }\n {{#endpointId}},\n{\n \"match_phrase\": {\n \"nf_endpoint_id.keyword\": \"{{endpointId}}\"\n }\n }\n\n {{/endpointId}}\n\n {{#serviceId}},\n{\n \"match_phrase\": {\n \"nf_service_id.keyword\": \"{{serviceId}}\"\n }\n }\n {{/serviceId}}\n\n {{#serviceName}},\n{\n \"match_phrase\": {\n \"nf_service_name.keyword\": \"{{serviceName}}\"\n }\n }\n {{/serviceName}}\n\n {{#hostName}},\n{\n \"match_phrase\": {\n \"nf_host_name.keyword\": \"{{hostName}}\"\n }\n }\n {{/hostName}}\n\n {{#terminatorRemoteIp}},\n{\n \"terms\": {\n \"terminator_remote_ip.keyword\": {{#toJson}}terminatorRemoteIp{{/toJson}}\n }\n }\n {{/terminatorRemoteIp}}\n\n\t\t {{#terminatorRemotePort}},\n{\n \"terms\": {\n \"terminator_remote_port.keyword\": {{#toJson}}terminatorRemotePort{{/toJson}}\n }\n }\n {{/terminatorRemotePort}}\n\n {{#initiatorRemoteIp}},\n{\n \"terms\": {\n \"initiator_remote_ip.keyword\": {{#toJson}}initiatorRemoteIp{{/toJson}}\n }\n }\n {{/initiatorRemoteIp}}\n\n \n ]\n }\n }\n}\n" } } } }