From 3506f93c756895c78b4d3f6cf8596476e5b331d1 Mon Sep 17 00:00:00 2001 From: Simeon Widdis Date: Tue, 16 Apr 2024 12:32:20 -0700 Subject: [PATCH 1/2] Actually use workflow option in saved object bundle selection (#1704) Signed-off-by: Simeon Widdis --- server/adaptors/integrations/integrations_builder.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/adaptors/integrations/integrations_builder.ts b/server/adaptors/integrations/integrations_builder.ts index fab905d1bd..8a1e637769 100644 --- a/server/adaptors/integrations/integrations_builder.ts +++ b/server/adaptors/integrations/integrations_builder.ts @@ -41,7 +41,7 @@ export class IntegrationInstanceBuilder { if (!assets.ok) { return Promise.reject(assets.error); } - const remapped = this.remapIDs(this.getSavedObjectBundles(assets.value)); + const remapped = this.remapIDs(this.getSavedObjectBundles(assets.value, options.workflows)); const withDataSource = this.remapDataSource(remapped, options.dataSource); const refs = await this.postAssets(withDataSource); const builtInstance = await this.buildInstance(integration, refs, options); From bccdc31c9a4a2e2d433f3a68e41c0f7fe270af75 Mon Sep 17 00:00:00 2001 From: YANGDB Date: Tue, 16 Apr 2024 12:55:47 -0700 Subject: [PATCH 2/2] =?UTF-8?q?update=20cloud=20trail=20integration=20with?= =?UTF-8?q?=20flint-s3=20based=20DDL=20assets=20and=20das=E2=80=A6=20(#170?= =?UTF-8?q?1)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * update cloud trail integration with flint-s3 based DDL assets and dashboard Signed-off-by: YANGDB * update time field using CAST to TIMESTAMP Signed-off-by: YANGDB * update separate flint dashboard support and workflow Signed-off-by: YANGDB * update separate flint dashboard support and workflow Signed-off-by: YANGDB * update separate flint dashboard support and workflow Signed-off-by: YANGDB * update refresh sync rate Signed-off-by: YANGDB --------- Signed-off-by: YANGDB --- .../assets/aws_cloudtrail-flint-1.0.0.ndjson | 18 +++++ .../assets/create_mv_cloud-trail-1.0.0.sql | 54 +++++++++++++++ .../assets/create_table_cloud-trail-1.0.0.sql | 65 +++++++++++++++++++ .../aws_cloudtrail/aws_cloudtrail-1.0.0.json | 46 ++++++++++++- 4 files changed, 181 insertions(+), 2 deletions(-) create mode 100644 server/adaptors/integrations/__data__/repository/aws_cloudtrail/assets/aws_cloudtrail-flint-1.0.0.ndjson create mode 100644 server/adaptors/integrations/__data__/repository/aws_cloudtrail/assets/create_mv_cloud-trail-1.0.0.sql create mode 100644 server/adaptors/integrations/__data__/repository/aws_cloudtrail/assets/create_table_cloud-trail-1.0.0.sql diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/assets/aws_cloudtrail-flint-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/assets/aws_cloudtrail-flint-1.0.0.ndjson new file mode 100644 index 0000000000..bcb7136aa4 --- /dev/null +++ b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/assets/aws_cloudtrail-flint-1.0.0.ndjson @@ -0,0 +1,18 @@ +{"attributes":{"fields":"[{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"esTypes\":[\"_type\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"additionalEventData.AuthenticationMethod\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"additionalEventData.AuthenticationMethod.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"additionalEventData.AuthenticationMethod\"}}},{\"count\":0,\"name\":\"additionalEventData.CipherSuite\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"additionalEventData.CipherSuite.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"additionalEventData.CipherSuite\"}}},{\"count\":0,\"name\":\"additionalEventData.SSEApplied\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"additionalEventData.SSEApplied.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"additionalEventData.SSEApplied\"}}},{\"count\":0,\"name\":\"additionalEventData.SignatureVersion\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"additionalEventData.SignatureVersion.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"additionalEventData.SignatureVersion\"}}},{\"count\":0,\"name\":\"additionalEventData.bytesTransferredIn\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.bytesTransferredOut\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.x-amz-id-2\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"additionalEventData.x-amz-id-2.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"additionalEventData.x-amz-id-2\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.cloudtrail.awsRegion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":2,\"name\":\"errorCode\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"errorCode.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"errorCode\"}}},{\"count\":2,\"name\":\"errorMessage\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"errorMessage.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"errorMessage\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.eventCategory\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"eventID\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"eventID.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"eventID\"}}},{\"count\":2,\"name\":\"aws.cloudtrail.eventName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.cloudtrail.eventSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.eventTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.eventType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.eventVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"managementEvent\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"readOnly\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"recipientAccountId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"recipientAccountId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"recipientAccountId\"}}},{\"count\":0,\"name\":\"requestID\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"requestID.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"requestID\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameter.endTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameter.startTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.Host\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.Host.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.Host\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Event\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Event.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Event\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Name\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Value\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Value.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Value\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Id\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Queue\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Queue.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Queue\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.xmlns\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.xmlns.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.xmlns\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.aRN\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.aRN.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.aRN\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.accelerate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.accelerate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.accelerate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.acl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.acl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.acl\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.advancedOptions.indices.query.bool.max_clause_count\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.advancedOptions.indices.query.bool.max_clause_count.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.advancedOptions.indices.query.bool.max_clause_count\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.advancedSecurityOptions.masterUserOptions.masterUserARN\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.advancedSecurityOptions.masterUserOptions.masterUserARN.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.advancedSecurityOptions.masterUserOptions.masterUserARN\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.aggregateField\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.aggregateField.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.aggregateField\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.architectures\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.architectures.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.architectures\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.DelaySeconds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.DelaySeconds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.attribute.DelaySeconds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.MaximumMessageSize\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.MaximumMessageSize.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.attribute.MaximumMessageSize\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.MessageRetentionPeriod\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.MessageRetentionPeriod.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.attribute.MessageRetentionPeriod\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.ReceiveMessageWaitTimeSeconds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.ReceiveMessageWaitTimeSeconds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.attribute.ReceiveMessageWaitTimeSeconds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.RedrivePolicy\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.RedrivePolicy.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.attribute.RedrivePolicy\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.VisibilityTimeout\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.VisibilityTimeout.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.attribute.VisibilityTimeout\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.bucketName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.bucketName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.bucketName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.code.s3Bucket\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.code.s3Bucket.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.code.s3Bucket\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.code.s3Key\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.code.s3Key.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.code.s3Key\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.constraints.encryptionContextEquals.aws:lambda:FunctionArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.constraints.encryptionContextEquals.aws:lambda:FunctionArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.constraints.encryptionContextEquals.aws:lambda:FunctionArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.constraints.encryptionContextSubset.domainARN\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.constraints.encryptionContextSubset.domainARN.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.constraints.encryptionContextSubset.domainARN\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.cors\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.cors.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.cors\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.description\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.documentName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.documentName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.documentName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.domainName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.domainName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.domainName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.domainNames\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.domainNames.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.domainNames\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.dryRun\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.durationSeconds\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryption\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryption.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryption\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionAlgorithm\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionAlgorithm.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryptionAlgorithm\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:cloudtrail:arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:cloudtrail:arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:cloudtrail:arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:kinesis:arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:kinesis:arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:kinesis:arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:lambda:FunctionArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:lambda:FunctionArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:lambda:FunctionArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:s3:arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:s3:arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:s3:arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.domainARN\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.domainARN.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryptionContext.domainARN\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.engineVersion\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.engineVersion.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.engineVersion\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.externalId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.externalId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.externalId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filter.eventStatusCodes\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filter.eventStatusCodes.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.filter.eventStatusCodes\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filter.startTimes.from\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filter.startTimes.from.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.filter.startTimes.from\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filterSet.items.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filterSet.items.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.filterSet.items.name\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filterSet.items.valueSet.items.value\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filterSet.items.valueSet.items.value.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.filterSet.items.valueSet.items.value\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filters.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filters.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.filters.name\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filters.values\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filters.values.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.filters.values\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.functionName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.functionName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.functionName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.granteePrincipal\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.granteePrincipal.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.granteePrincipal\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.groupSet.items.groupId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.groupSet.items.groupId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.groupSet.items.groupId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.handler\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.handler.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.handler\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.includeAllInstances\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.instanceType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.instanceType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.instanceType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.instancesSet.items.instanceId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.instancesSet.items.instanceId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.instancesSet.items.instanceId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.interactive\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.itemsPerPage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.key\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.key.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.key\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.keyId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.keyId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.keyId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.keySpec\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.keySpec.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.keySpec\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.layers\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.layers.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.layers\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.lifecycle\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.lifecycle.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.lifecycle\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.locale\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.locale.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.locale\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.logGroupName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.logGroupName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.logGroupName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.logStreamName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.logStreamName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.logStreamName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.logging\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.logging.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.logging\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.maxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.memorySize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.notification\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.notification.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.notification\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.notificationFilter.domainName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.notificationFilter.domainName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.notificationFilter.domainName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.numberOfBytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.object-lock\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.object-lock.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.object-lock\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.operations\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.operations.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.operations\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.parameters.commands\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.parameters.commands.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.parameters.commands\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.policy\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.policy.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.policy\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.policyName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.policyName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.policyName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.publicAccessBlock\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.publicAccessBlock.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.publicAccessBlock\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.publish\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.queueName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.queueName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.queueName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.replication\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.replication.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.replication\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.requestPayer\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.requestPayer.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.requestPayer\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.requestPayment\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.requestPayment.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.requestPayment\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.retiringPrincipal\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.retiringPrincipal.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.retiringPrincipal\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.role\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.role.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.role\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.roleArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.roleArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.roleArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.roleName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.roleName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.roleName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.roleSessionName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.roleSessionName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.roleSessionName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.runtime\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.runtime.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.runtime\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.securityGroupIdSet.items.groupId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.securityGroupIdSet.items.groupId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.securityGroupIdSet.items.groupId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.stackName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.stackName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.stackName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.subnetId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.subnetId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.subnetId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.subnetSet.items.subnetId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.subnetSet.items.subnetId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.subnetSet.items.subnetId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tagging\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tagging.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.tagging\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:logical-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:logical-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:logical-id\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:stack-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:stack-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:stack-id\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:stack-name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:stack-name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:stack-name\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.targetGroupArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.targetGroupArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.targetGroupArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.timeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.uUID\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.uUID.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.uUID\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.versioning\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.versioning.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.versioning\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.vpcConfig.securityGroupIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.vpcConfig.securityGroupIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.vpcConfig.securityGroupIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.vpcConfig.subnetIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.vpcConfig.subnetIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.vpcConfig.subnetIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.vpcSet.items.vpcId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.vpcSet.items.vpcId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.vpcSet.items.vpcId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.website\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.website.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.website\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-acl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-acl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.x-amz-acl\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption-aws-kms-key-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption-aws-kms-key-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption-aws-kms-key-id\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption-context\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption-context.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption-context\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption\"}}},{\"count\":0,\"name\":\"resources.ARN\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resources.ARN.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resources.ARN\"}}},{\"count\":0,\"name\":\"resources.accountId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resources.accountId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resources.accountId\"}}},{\"count\":0,\"name\":\"resources.type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resources.type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resources.type\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.architectures\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.architectures.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.architectures\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.assumedRoleUser.arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.assumedRoleUser.arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.assumedRoleUser.arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.assumedRoleUser.assumedRoleId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.assumedRoleUser.assumedRoleId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.assumedRoleUser.assumedRoleId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.certificateSummaryList.certificateArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.certificateSummaryList.certificateArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.certificateSummaryList.certificateArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.certificateSummaryList.domainName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.certificateSummaryList.domainName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.certificateSummaryList.domainName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.codeSha256\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.codeSha256.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.codeSha256\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.codeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.cloudWatchOutputConfig.cloudWatchLogGroupName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.cloudWatchOutputConfig.cloudWatchLogGroupName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.cloudWatchOutputConfig.cloudWatchLogGroupName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.cloudWatchOutputConfig.cloudWatchOutputEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.commandId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.commandId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.commandId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.comment\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.comment.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.comment\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.completedCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.deliveryTimedOutCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.documentName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.documentName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.documentName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.documentVersion\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.documentVersion.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.documentVersion\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.errorCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.expiresAfter\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.expiresAfter.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.expiresAfter\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.interactive\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.maxConcurrency\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.maxConcurrency.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.maxConcurrency\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.maxErrors\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.maxErrors.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.maxErrors\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.notificationConfig.notificationArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.notificationConfig.notificationArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.notificationConfig.notificationArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.notificationConfig.notificationType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.notificationConfig.notificationType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.notificationConfig.notificationType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.outputS3BucketName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.outputS3BucketName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.outputS3BucketName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.outputS3KeyPrefix\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.outputS3KeyPrefix.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.outputS3KeyPrefix\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.outputS3Region\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.outputS3Region.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.outputS3Region\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.parameters.commands\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.parameters.commands.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.parameters.commands\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.requestedDateTime\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.requestedDateTime.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.requestedDateTime\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.serviceRole\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.serviceRole.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.serviceRole\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.status\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.status.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.status\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.statusDetails\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.statusDetails.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.statusDetails\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.targetCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.timeoutSeconds\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.credentials.accessKeyId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.credentials.accessKeyId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.credentials.accessKeyId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.credentials.expiration\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.credentials.expiration.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.credentials.expiration\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.credentials.sessionToken\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.credentials.sessionToken.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.credentials.sessionToken\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.description\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.options\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.options.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.options\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.indices.fielddata.cache.size\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.indices.fielddata.cache.size.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.indices.fielddata.cache.size\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.indices.query.bool.max_clause_count\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.indices.query.bool.max_clause_count.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.indices.query.bool.max_clause_count\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.override_main_response_version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.override_main_response_version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.override_main_response_version\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.options.anonymousAuthEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.options.internalUserDatabaseEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.options.desiredState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.options.desiredState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.options.desiredState\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.options.rollbackOnDisable\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.options.rollbackOnDisable.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.options.rollbackOnDisable\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.coldStorageOptions.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.dedicatedMasterEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.instanceCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.instanceType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.instanceType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.instanceType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.warmEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.zoneAwarenessEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.options.customEndpointEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.options.enforceHTTPS\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.options.tLSSecurityPolicy\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.options.tLSSecurityPolicy.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.options.tLSSecurityPolicy\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.options.eBSEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.options.volumeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.options.volumeType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.options.volumeType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.options.volumeType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.options.kmsKeyId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.options.kmsKeyId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.options.kmsKeyId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.options\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.options.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.options\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.options.automatedSnapshotStartHour\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.availabilityZones\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.availabilityZones.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.availabilityZones\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.securityGroupIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.securityGroupIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.securityGroupIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.subnetIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.subnetIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.subnetIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.vPCId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.vPCId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.vPCId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.options\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.options.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.options\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.indices.fielddata.cache.size\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.indices.fielddata.cache.size.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.indices.fielddata.cache.size\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.indices.query.bool.max_clause_count\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.indices.query.bool.max_clause_count.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.indices.query.bool.max_clause_count\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.override_main_response_version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.override_main_response_version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.override_main_response_version\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.options.anonymousAuthEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.options.internalUserDatabaseEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.options.desiredState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.options.desiredState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.options.desiredState\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.options.rollbackOnDisable\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.options.rollbackOnDisable.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.options.rollbackOnDisable\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.options.customEndpointEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.options.enforceHTTPS\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.options.tLSSecurityPolicy\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.options.tLSSecurityPolicy.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.options.tLSSecurityPolicy\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.options.eBSEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.options.volumeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.options.volumeType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.options.volumeType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.options.volumeType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.coldStorageOptions.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.dedicatedMasterEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.instanceCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.instanceType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.instanceType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.instanceType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.warmEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.zoneAwarenessEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.options\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.options.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.options\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.options.kmsKeyId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.options.kmsKeyId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.options.kmsKeyId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.AUDIT_LOGS.cloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.AUDIT_LOGS.cloudWatchLogsLogGroupArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.AUDIT_LOGS.cloudWatchLogsLogGroupArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.AUDIT_LOGS.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.ES_APPLICATION_LOGS.cloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.ES_APPLICATION_LOGS.cloudWatchLogsLogGroupArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.ES_APPLICATION_LOGS.cloudWatchLogsLogGroupArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.ES_APPLICATION_LOGS.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.options.automatedSnapshotStartHour\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.availabilityZones\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.availabilityZones.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.availabilityZones\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.securityGroupIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.securityGroupIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.securityGroupIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.subnetIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.subnetIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.subnetIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.vPCId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.vPCId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.vPCId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.functionArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.functionArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.functionArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.functionName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.functionName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.functionName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.grantId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.grantId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.grantId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.handler\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.handler.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.handler\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.isOpenSearchDomain\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.lastModified\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.layers.arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.layers.arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.layers.arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.layers.codeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.layers.uncompressedCodeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.memorySize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.notificationFilter.domainName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.notificationFilter.domainName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.notificationFilter.domainName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.packageType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.packageType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.packageType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.queueUrl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.queueUrl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.queueUrl\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.revisionId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.revisionId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.revisionId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.role\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.role.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.role\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.runtime\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.runtime.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.runtime\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.stateReason\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.stateReason.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.stateReason\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.stateReasonCode\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.stateReasonCode.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.stateReasonCode\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.timeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.tracingConfig.mode\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.tracingConfig.mode.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.tracingConfig.mode\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.vpcConfig.securityGroupIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.vpcConfig.securityGroupIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.vpcConfig.securityGroupIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.vpcConfig.subnetIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.vpcConfig.subnetIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.vpcConfig.subnetIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.vpcConfig.vpcId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.vpcConfig.vpcId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.vpcConfig.vpcId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption-aws-kms-key-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption-aws-kms-key-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption-aws-kms-key-id\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption-context\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption-context.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption-context\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption\"}}},{\"count\":0,\"name\":\"sessionCredentialFromConsole\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"sessionCredentialFromConsole.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"sessionCredentialFromConsole\"}}},{\"count\":0,\"name\":\"sharedEventID\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"sharedEventID.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"sharedEventID\"}}},{\"count\":1,\"name\":\"aws.cloudtrail.sourceIPAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tlsDetails.cipherSuite\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"tlsDetails.cipherSuite.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"tlsDetails.cipherSuite\"}}},{\"count\":0,\"name\":\"tlsDetails.clientProvidedHostHeader\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"tlsDetails.clientProvidedHostHeader.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"tlsDetails.clientProvidedHostHeader\"}}},{\"count\":0,\"name\":\"tlsDetails.tlsVersion\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"tlsDetails.tlsVersion.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"tlsDetails.tlsVersion\"}}},{\"count\":1,\"name\":\"userAgent\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"userAgent.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"userAgent\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.accessKeyId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.accessKeyId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.accessKeyId\"}}},{\"count\":1,\"name\":\"aws.cloudtrail.userIdentity.accountId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.accountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.accountId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.invokedBy\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.invokedBy\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.invokedBy\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.principalId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.accountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.principalId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.attributes.creationDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.attributes.mfaAuthenticated\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.attributes.mfaAuthenticated\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.sessionContext.attributes.mfaAuthenticated\"}}},{\"count\":1,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.accountId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.accountId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.accountId\"}}},{\"count\":1,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.arn\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.principalId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.principalId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.principalId\"}}},{\"count\":1,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.type\"}}},{\"count\":1,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.userName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.userName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.userName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.type\"}}},{\"count\":0,\"name\":\"vpcEndpointId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"vpcEndpointId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"vpcEndpointId\"}}}]","timeFieldName":"@timestamp","title":"flint_mys3_default_cloudtrail_mview7"},"id":"3cdd8cd4-5113-4706-913d-0634a76c3092","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2024-04-16T17:22:27.719Z","version":"WzI3MjYsMV0="} +{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"logs-cloudtrail-Global Control","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Global Control\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1637912766383\",\"fieldName\":\"aws.cloudtrail.awsRegion\",\"parent\":\"\",\"label\":\"Region\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"}],\"updateFiltersOnChange\":false,\"useTimeFilter\":false,\"pinFilters\":false}}"},"id":"e61107ab-83be-4cd2-b4ea-ebeeb828f08f","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3cdd8cd4-5113-4706-913d-0634a76c3092","name":"control_0_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2024-04-16T17:22:27.719Z","version":"WzI3MjcsMV0="} +{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Event History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Event History\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-15d\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"cdd3f173-1420-471b-9231-ffb5f98658c6","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3cdd8cd4-5113-4706-913d-0634a76c3092","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-04-16T17:22:27.719Z","version":"WzI3MjgsMV0="} +{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Event by Account ID","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Event by Account ID\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.userIdentity.accountId\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"585d0a6b-7ab7-4d85-8288-9569ce009c90","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3cdd8cd4-5113-4706-913d-0634a76c3092","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-04-16T17:22:27.719Z","version":"WzI3MjksMV0="} +{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Total Event Count","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Total Event Count\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Event Count\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"269d3145-1572-44f0-942a-4e149a7af942","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3cdd8cd4-5113-4706-913d-0634a76c3092","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-04-16T17:22:27.719Z","version":"WzI3MzAsMV0="} +{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Top Event Names","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Top Event Names\",\"type\":\"horizontal_bar\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.eventName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Event Name\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":200},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":75,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":true},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"474e4340-55dd-42db-93f5-b1965ecfa7ed","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3cdd8cd4-5113-4706-913d-0634a76c3092","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-04-16T17:22:27.719Z","version":"WzI3MzEsMV0="} +{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Top Event Sources","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Top Event Sources\",\"type\":\"horizontal_bar\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.eventSource\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Event Source\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":200},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":75,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":true},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"468dd8cb-f7a5-4de8-ae50-4226f1879130","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3cdd8cd4-5113-4706-913d-0634a76c3092","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-04-16T17:22:27.719Z","version":"WzI3MzIsMV0="} +{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Event Category","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Event Category\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.eventCategory\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"945b30a0-a58f-453e-9873-be43f03d149c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3cdd8cd4-5113-4706-913d-0634a76c3092","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-04-16T17:22:27.719Z","version":"WzI3MzMsMV0="} +{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Event By Region","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Event By Region\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.awsRegion\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"c9e463e4-a260-49c9-80b1-d7b92874bca0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3cdd8cd4-5113-4706-913d-0634a76c3092","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-04-16T17:22:27.719Z","version":"WzI3MzQsMV0="} +{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Top Users","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Top Users\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.userName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"User Name\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":false,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.arn\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.userIdentity.accountId\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Account Id\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.type\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Type\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"13306aeb-5518-4221-a808-78e42223cfb3","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3cdd8cd4-5113-4706-913d-0634a76c3092","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-04-16T17:22:27.719Z","version":"WzI3MzUsMV0="} +{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"not aws.cloudtrail.sourceIPAddress:*.amazon*.com* AWS*\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Top Source IPs","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Top Source IPs\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.sourceIPAddress\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source IP\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"a22bfb77-df20-4573-af83-a99e9546d11f","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"3cdd8cd4-5113-4706-913d-0634a76c3092","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2024-04-16T17:22:27.719Z","version":"WzI3MzYsMV0="} +{"attributes":{"columns":["_source"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"not (aws.cloudtrail.eventName: Get* Describe* List* Head*)\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"logs-cloudtrail-Change Events","version":1},"id":"28881df5-87e8-414d-899c-23650c78897d","migrationVersion":{"search":"7.9.3"},"references":[{"id":"3cdd8cd4-5113-4706-913d-0634a76c3092","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2024-04-16T17:22:27.719Z","version":"WzI3MzgsMV0="} +{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"aws.cloudtrail.eventSource: ec2* and aws.cloudtrail.eventName: (RunInstances or TerminateInstances or RunInstances or StopInstances)\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-cloudtrail-EC2 Instance Changes","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-EC2 Instance Changes\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.eventName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"e953d901-7ec7-4751-92e8-bdaf60cefe3f","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"28881df5-87e8-414d-899c-23650c78897d","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2024-04-16T17:22:27.719Z","version":"WzI3NDAsMV0="} +{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"aws.cloudtrail.eventSource: ec2*\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-cloudtrail-EC2 Changed By","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-EC2 Changed By\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.userName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"4bc4a220-a77a-4b00-8bae-cdda13b7f5a3","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"28881df5-87e8-414d-899c-23650c78897d","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2024-04-16T17:22:27.719Z","version":"WzI3NDEsMV0="} +{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"aws.cloudtrail.eventSource:ec2*\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-cloudtrail-Top EC2 Change Events","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Top EC2 Change Events\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.eventName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"be9f9af3-f8fe-4bc5-9a04-6d461bcb2cf2","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"28881df5-87e8-414d-899c-23650c78897d","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2024-04-16T17:22:27.719Z","version":"WzI3NDQsMV0="} +{"attributes":{"columns":["errorCode","errorMessage","aws.cloudtrail.eventName","aws.cloudtrail.eventSource","aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.userName","aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.accountId","aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.arn","aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.type","aws.cloudtrail.awsRegion","aws.cloudtrail.sourceIPAddress","userAgent","aws.cloudtrail.userIdentity.accountId"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"errorCode:*\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"logs-cloudtrail-Error Events","version":1},"id":"2cd5af97-4163-4f22-9faa-cfdff3ca3fae","migrationVersion":{"search":"7.9.3"},"references":[{"id":"3cdd8cd4-5113-4706-913d-0634a76c3092","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2024-04-16T17:22:27.719Z","version":"WzI3NDIsMV0="} +{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"controlledBy\":\"1637912766383\",\"disabled\":false,\"key\":\"aws.cloudtrail.awsRegion\",\"negate\":false,\"params\":{\"query\":\"us-west-2\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"aws.cloudtrail.awsRegion\":\"us-west-2\"}}}]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":7,\"i\":\"f41fba39-1664-460f-9b7f-2da72a45eea9\",\"w\":12,\"x\":0,\"y\":0},\"panelIndex\":\"f41fba39-1664-460f-9b7f-2da72a45eea9\",\"title\":\"Global Control\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":16,\"i\":\"f00cf363-a72e-4ef7-9e87-527d86ae8be2\",\"w\":24,\"x\":12,\"y\":0},\"panelIndex\":\"f00cf363-a72e-4ef7-9e87-527d86ae8be2\",\"title\":\"Event History\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":16,\"i\":\"19a014c4-0fec-40bc-914d-b985b2b84c1b\",\"w\":12,\"x\":36,\"y\":0},\"panelIndex\":\"19a014c4-0fec-40bc-914d-b985b2b84c1b\",\"title\":\"Event by Account ID\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":9,\"i\":\"ef438b13-4c77-48b9-8ae0-c28ae717e0ac\",\"w\":12,\"x\":0,\"y\":7},\"panelIndex\":\"ef438b13-4c77-48b9-8ae0-c28ae717e0ac\",\"title\":\"Total Event Count\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":18,\"i\":\"22948727-ec80-4cd2-9bae-c76889332504\",\"w\":12,\"x\":0,\"y\":16},\"panelIndex\":\"22948727-ec80-4cd2-9bae-c76889332504\",\"title\":\"Top Event Names\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":18,\"i\":\"f9525bf2-311b-4767-8d84-67fa5c7bdaf3\",\"w\":12,\"x\":12,\"y\":16},\"panelIndex\":\"f9525bf2-311b-4767-8d84-67fa5c7bdaf3\",\"title\":\"Top Event Sources\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":18,\"i\":\"b580d134-a5e0-4550-9aeb-c6f4fab07ae9\",\"w\":12,\"x\":24,\"y\":16},\"panelIndex\":\"b580d134-a5e0-4550-9aeb-c6f4fab07ae9\",\"title\":\"Event Category\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_6\"},{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":18,\"i\":\"d097c4dc-bd4f-4789-a18e-93fcf034a73e\",\"w\":12,\"x\":36,\"y\":16},\"panelIndex\":\"d097c4dc-bd4f-4789-a18e-93fcf034a73e\",\"title\":\"Event By Region\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_7\"},{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":15,\"i\":\"2a5da7e5-6536-4f01-8110-a20829ac0409\",\"w\":24,\"x\":0,\"y\":34},\"panelIndex\":\"2a5da7e5-6536-4f01-8110-a20829ac0409\",\"title\":\"Top Users\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_8\"},{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":15,\"i\":\"22ca4fe6-c0f7-4206-8b90-44b9bccf2623\",\"w\":24,\"x\":24,\"y\":34},\"panelIndex\":\"22ca4fe6-c0f7-4206-8b90-44b9bccf2623\",\"title\":\"Top Source IPs\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_9\"},{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":15,\"i\":\"782dc2e3-49c6-43a6-b384-38cd38d0af52\",\"w\":12,\"x\":0,\"y\":49},\"panelIndex\":\"782dc2e3-49c6-43a6-b384-38cd38d0af52\",\"title\":\"EC2 Change Event Count\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_10\"},{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":15,\"i\":\"d3ee49b2-4822-4c29-95cf-34c2d895d0f8\",\"w\":12,\"x\":12,\"y\":49},\"panelIndex\":\"d3ee49b2-4822-4c29-95cf-34c2d895d0f8\",\"title\":\"EC2 Changed By\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_11\"},{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":15,\"i\":\"8220a178-d566-425d-a7bf-7b0a6e510ad7\",\"w\":24,\"x\":24,\"y\":49},\"panelIndex\":\"8220a178-d566-425d-a7bf-7b0a6e510ad7\",\"title\":\"Top EC2 Change Events\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_12\"},{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":17,\"i\":\"03cd460b-e704-493b-b593-e17bc5acc00d\",\"w\":48,\"x\":0,\"y\":64},\"panelIndex\":\"03cd460b-e704-493b-b593-e17bc5acc00d\",\"title\":\"Error Events\",\"version\":\"2.13.0\",\"panelRefName\":\"panel_13\"}]","timeRestore":false,"title":"logs-cloudtrail-dashboard Flint","version":1},"id":"a300a524-bb91-4a03-b0b1-5ddfd61e5154","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"3cdd8cd4-5113-4706-913d-0634a76c3092","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"e61107ab-83be-4cd2-b4ea-ebeeb828f08f","name":"panel_0","type":"visualization"},{"id":"cdd3f173-1420-471b-9231-ffb5f98658c6","name":"panel_1","type":"visualization"},{"id":"585d0a6b-7ab7-4d85-8288-9569ce009c90","name":"panel_2","type":"visualization"},{"id":"269d3145-1572-44f0-942a-4e149a7af942","name":"panel_3","type":"visualization"},{"id":"474e4340-55dd-42db-93f5-b1965ecfa7ed","name":"panel_4","type":"visualization"},{"id":"468dd8cb-f7a5-4de8-ae50-4226f1879130","name":"panel_5","type":"visualization"},{"id":"945b30a0-a58f-453e-9873-be43f03d149c","name":"panel_6","type":"visualization"},{"id":"c9e463e4-a260-49c9-80b1-d7b92874bca0","name":"panel_7","type":"visualization"},{"id":"13306aeb-5518-4221-a808-78e42223cfb3","name":"panel_8","type":"visualization"},{"id":"a22bfb77-df20-4573-af83-a99e9546d11f","name":"panel_9","type":"visualization"},{"id":"e953d901-7ec7-4751-92e8-bdaf60cefe3f","name":"panel_10","type":"visualization"},{"id":"4bc4a220-a77a-4b00-8bae-cdda13b7f5a3","name":"panel_11","type":"visualization"},{"id":"be9f9af3-f8fe-4bc5-9a04-6d461bcb2cf2","name":"panel_12","type":"visualization"},{"id":"2cd5af97-4163-4f22-9faa-cfdff3ca3fae","name":"panel_13","type":"search"}],"type":"dashboard","updated_at":"2024-04-16T17:29:51.221Z","version":"WzI3NDYsMV0="} +{"exportedCount":17,"missingRefCount":0,"missingReferences":[]} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/assets/create_mv_cloud-trail-1.0.0.sql b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/assets/create_mv_cloud-trail-1.0.0.sql new file mode 100644 index 0000000000..1ecdb85b20 --- /dev/null +++ b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/assets/create_mv_cloud-trail-1.0.0.sql @@ -0,0 +1,54 @@ +CREATE MATERIALIZED VIEW {table_name}_mview AS +SELECT + rec.userIdentity.type AS `aws.cloudtrail.userIdentity.type`, + rec.userIdentity.principalId AS `aws.cloudtrail.userIdentity.principalId`, + rec.userIdentity.arn AS `aws.cloudtrail.userIdentity.arn`, + rec.userIdentity.accountId AS `aws.cloudtrail.userIdentity.accountId`, + rec.userIdentity.invokedBy AS `aws.cloudtrail.userIdentity.invokedBy`, + rec.userIdentity.accessKeyId AS `aws.cloudtrail.userIdentity.accessKeyId`, + rec.userIdentity.userName AS `aws.cloudtrail.userIdentity.userName`, + rec.userIdentity.sessionContext.attributes.mfaAuthenticated AS `aws.cloudtrail.userIdentity.sessionContext.attributes.mfaAuthenticated`, + CAST(rec.userIdentity.sessionContext.attributes.creationDate AS TIMESTAMP) AS `aws.cloudtrail.userIdentity.sessionContext.attributes.creationDate`, + rec.userIdentity.sessionContext.sessionIssuer.type AS `aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.type`, + rec.userIdentity.sessionContext.sessionIssuer.principalId AS `aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.principalId`, + rec.userIdentity.sessionContext.sessionIssuer.arn AS `aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.arn`, + rec.userIdentity.sessionContext.sessionIssuer.accountId AS `aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.accountId`, + rec.userIdentity.sessionContext.sessionIssuer.userName AS `aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.userName`, + rec.userIdentity.sessionContext.ec2RoleDelivery AS `aws.cloudtrail.userIdentity.sessionContext.ec2RoleDelivery`, + + rec.eventVersion AS `aws.cloudtrail.eventVersion`, + CAST(rec.eventTime AS TIMESTAMP) AS `@timestamp`, + rec.eventSource AS `aws.cloudtrail.eventSource`, + rec.eventName AS `aws.cloudtrail.eventName`, + rec.eventCategory AS `aws.cloudtrail.eventCategory`, + rec.eventType AS `aws.cloudtrail.eventType`, + rec.eventId AS `aws.cloudtrail.eventId`, + + rec.awsRegion AS `aws.cloudtrail.awsRegion`, + rec.sourceIPAddress AS `aws.cloudtrail.sourceIPAddress`, + rec.userAgent AS `aws.cloudtrail.userAgent`, + rec.errorCode AS `errorCode`, + rec.errorMessage AS `errorMessage`, + rec.requestParameters AS `aws.cloudtrail.requestParameter`, + rec.responseElements AS `aws.cloudtrail.responseElements`, + rec.additionalEventData AS `aws.cloudtrail.additionalEventData`, + rec.requestId AS `aws.cloudtrail.requestId`, + rec.resources AS `aws.cloudtrail.resources`, + rec.apiVersion AS `aws.cloudtrail.apiVersion`, + rec.readOnly AS `aws.cloudtrail.readOnly`, + rec.recipientAccountId AS `aws.cloudtrail.recipientAccountId`, + rec.serviceEventDetails AS `aws.cloudtrail.serviceEventDetails`, + rec.sharedEventId AS `aws.cloudtrail.sharedEventId`, + rec.vpcEndpointId AS `aws.cloudtrail.vpcEndpointId`, + rec.tlsDetails.tlsVersion AS `aws.cloudtrail.tlsDetails.tls_version`, + rec.tlsDetails.cipherSuite AS `aws.cloudtrail.tlsDetailscipher_suite`, + rec.tlsDetails.clientProvidedHostHeader AS `aws.cloudtrail.tlsDetailsclient_provided_host_header` +FROM + {table_name} + LATERAL VIEW explode(Records) myTable AS rec +WITH ( + auto_refresh = true, + checkpoint_location = '{s3_checkpoint_location}', + watermark_delay = '1 min', + extra_options = '{ "{table_name}": { "maxFilesPerTrigger": "10" }}' +) diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/assets/create_table_cloud-trail-1.0.0.sql b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/assets/create_table_cloud-trail-1.0.0.sql new file mode 100644 index 0000000000..fb17187a81 --- /dev/null +++ b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/assets/create_table_cloud-trail-1.0.0.sql @@ -0,0 +1,65 @@ +CREATE EXTERNAL TABLE IF NOT EXISTS {table_name} ( + Records ARRAY, + sessionIssuer:STRUCT< + type:STRING, + principalId:STRING, + arn:STRING, + accountId:STRING, + userName:STRING + >, + ec2RoleDelivery:STRING, + webIdFederationData:MAP + > + >, + eventTime STRING, + eventSource STRING, + eventName STRING, + awsRegion STRING, + sourceIPAddress STRING, + userAgent STRING, + errorCode STRING, + errorMessage STRING, + requestParameters STRING, + responseElements STRING, + additionalEventData STRING, + requestId STRING, + eventId STRING, + resources ARRAY>, + eventType STRING, + apiVersion STRING, + readOnly STRING, + recipientAccountId STRING, + serviceEventDetails STRING, + sharedEventId STRING, + vpcEndpointId STRING, + eventCategory STRING, + tlsDetails STRUCT< + tlsVersion:STRING, + cipherSuite:STRING, + clientProvidedHostHeader:STRING + > + >> +) USING json +LOCATION '{s3_bucket_location}' +OPTIONS ( + compression='gzip', + recursivefilelookup='true' +); diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/aws_cloudtrail-1.0.0.json b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/aws_cloudtrail-1.0.0.json index 83cf64e280..98a19ea973 100644 --- a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/aws_cloudtrail-1.0.0.json +++ b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/aws_cloudtrail-1.0.0.json @@ -5,9 +5,29 @@ "description": "Analyze CloudTrail events.", "license": "Apache-2.0", "type": "logs-aws_cloudtrail", - "labels": ["Observability", "Logs", "AWS", "Cloud"], + "labels": ["Observability", "Logs", "AWS", "Cloud", "Flint S3"], "author": "OpenSearch", "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/aws_cloudtrail/info", + "workflows": [ + { + "name": "queries", + "label": "Queries (recommended)", + "description": "Tables and pre-written queries for quickly getting insights on your data.", + "enabled_by_default": true + }, + { + "name": "dashboards", + "label": "Dashboards & Visualizations", + "description": "Dashboards and indices that enable you to easily visualize important metrics.", + "enabled_by_default": false + }, + { + "name": "dashboards-flint", + "label": "Dashboards & Visualizations adapted to Flint", + "description": "Dashboards and visualizations adapted to Flint S3 datasource that enable you to easily visualize data residing on S3", + "enabled_by_default": false + } + ], "statics": { "logo": { "annotation": "CloudTrail Logo", @@ -43,7 +63,29 @@ "name": "aws_cloudtrail", "version": "1.0.0", "extension": "ndjson", - "type": "savedObjectBundle" + "type": "savedObjectBundle", + "workflows": ["dashboards"] + }, + { + "name": "aws_cloudtrail-flint", + "version": "1.0.0", + "extension": "ndjson", + "type": "savedObjectBundle", + "workflows": ["dashboards-flint"] + }, + { + "name": "create_table_cloud-trail", + "version": "1.0.0", + "extension": "sql", + "type": "query", + "workflows": ["dashboards-flint"] + }, + { + "name": "create_mv_cloud-trail", + "version": "1.0.0", + "extension": "sql", + "type": "query", + "workflows": ["dashboards-flint"] } ], "sampleData": {