dsaas-PayloadLog.json

{
    "template": "dsaas-log-payloadlog-*",
    "mappings": {
        "PayloadLog": {
            "properties": {
                "@timestamp": {
                    "type": "date"
                },
                "Action": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "ActionString": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "ApplicationType": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "DataIndex": {
                    "type": "long"
                },
                "DestinationIP": {
                    "type": "ip"
                },
                "DestinationMAC": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "DestinationPort": {
                    "type": "long"
                },
                "Direction": {
                    "type": "long"
                },
                "DirectionString": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "DriverTime": {
                    "type": "long"
                },
                "EventID": {
                    "type": "integer"
                },
                "EventType": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 128
                        }
                    }
                },
                "Flags": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "Flow": {
                    "type": "long"
                },
                "FlowString": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "Frame": {
                    "type": "long"
                },
                "FrameString": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "HostAgentVersion": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "HostAssetValue": {
                    "type": "long"
                },
                "HostCloudType": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "HostGroupID": {
                    "type": "long"
                },
                "HostGroupName": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "HostID": {
                    "type": "long"
                },
                "HostInstanceID": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "HostOS": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "HostOwnerID": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "HostSecurityPolicyID": {
                    "type": "long"
                },
                "HostSecurityPolicyName": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "Hostname": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "IPDatagramLength": {
                    "type": "long"
                },
                "Interface": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "LogDate": {
                    "type": "date"
                },
                "Origin": {
                    "type": "short"
                },
                "OriginString": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 128
                        }
                    }
                },
                "PacketData": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "PayloadFlags": {
                    "type": "long"
                },
                "PosInBuffer": {
                    "type": "long"
                },
                "PosInStream": {
                    "type": "long"
                },
                "Protocol": {
                    "type": "short"
                },
                "ProtocolString": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "Rank": {
                    "type": "long"
                },
                "Reason": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "RepeatCount": {
                    "type": "long"
                },
                "Severity": {
                    "type": "short"
                },
                "SeverityString": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "SourceIP": {
                    "type": "ip"
                },
                "SourceMAC": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "SourcePort": {
                    "type": "integer"
                },
                "Status": {
                    "type": "integer"
                },
                "Tags": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                        }
                    }
                },
                "TenantID": {
                    "type": "integer"
                },
                "TenantName": {
                    "type": "text",
                    "fields": {
                        "keyword": {
                            "type": "keyword",
                            "ignore_above": 128
                        }
                    }
                }
            }
        }
    } 
}