diff --git a/cypress/integration/1_detectors.spec.js b/cypress/integration/1_detectors.spec.js index 252adbde2..77e910b71 100644 --- a/cypress/integration/1_detectors.spec.js +++ b/cypress/integration/1_detectors.spec.js @@ -210,8 +210,6 @@ describe('Detectors', () => { // Confirm detector active cy.contains(detectorName); cy.contains('Active'); - cy.contains('View Alerts'); - cy.contains('View Findings'); cy.contains('Actions'); cy.contains('Detector configuration'); cy.contains('Field mappings'); diff --git a/cypress/integration/5_integrations.spec.js b/cypress/integration/5_integrations.spec.js index a38ea3ecb..6aaef03a1 100644 --- a/cypress/integration/5_integrations.spec.js +++ b/cypress/integration/5_integrations.spec.js @@ -71,7 +71,7 @@ describe('Integration tests', () => { cy.waitForPageLoad('detectors', 'Threat detectors'); }); - it('...can navigate to findings page', () => { + xit('...can navigate to findings page', () => { cy.intercept({ method: 'GET', pathname: '/_plugins/_security_analytics/findings/_search', @@ -104,7 +104,7 @@ describe('Integration tests', () => { }); }); }); - it('...can navigate to alerts page', () => { + xit('...can navigate to alerts page', () => { cy.intercept({ method: 'GET', pathname: '/_plugins/_security_analytics/alerts', diff --git a/public/models/interfaces.ts b/public/models/interfaces.ts index 2cea676f1..4ce99e3a0 100644 --- a/public/models/interfaces.ts +++ b/public/models/interfaces.ts @@ -3,6 +3,7 @@ * SPDX-License-Identifier: Apache-2.0 */ +import { ISavedObjectsService } from '../../types'; import { DetectorsService, FindingsService, @@ -24,6 +25,7 @@ export interface BrowserServices { alertService: AlertsService; ruleService: RuleService; notificationsService: NotificationsService; + savedObjectsService: ISavedObjectsService; indexPatternsService: IndexPatternsService; } diff --git a/public/pages/CreateDetector/components/DefineDetector/containers/DefineDetector.tsx b/public/pages/CreateDetector/components/DefineDetector/containers/DefineDetector.tsx index 16e3e9bf1..381087615 100644 --- a/public/pages/CreateDetector/components/DefineDetector/containers/DefineDetector.tsx +++ b/public/pages/CreateDetector/components/DefineDetector/containers/DefineDetector.tsx @@ -5,7 +5,7 @@ import React, { Component } from 'react'; import { RouteComponentProps } from 'react-router-dom'; -import { EuiSpacer, EuiTitle, EuiText } from '@elastic/eui'; +import { EuiSpacer, EuiTitle, EuiText, EuiCallOut } from '@elastic/eui'; import { Detector, PeriodSchedule } from '../../../../../../models/interfaces'; import DetectorBasicDetailsForm from '../components/DetectorDetails'; import DetectorDataSource from '../components/DetectorDataSource'; @@ -219,6 +219,17 @@ export default class DefineDetector extends Component + +

+ A detector dashboard will be automatically created to provide insights for this + detector. +

+ + + + { + return this.props.services.savedObjectsService + .createSavedObject(detectorName, logType, detectorId, inputIndices) + .catch((error: any) => { + console.error(error); + }); + }; + onNextClick = () => { const { currentStep } = this.state; this.setState({ currentStep: currentStep + 1 }); diff --git a/public/pages/Detectors/components/DetectorBasicDetailsView/DetectorBasicDetailsView.tsx b/public/pages/Detectors/components/DetectorBasicDetailsView/DetectorBasicDetailsView.tsx index 380e77a84..dd8c84c36 100644 --- a/public/pages/Detectors/components/DetectorBasicDetailsView/DetectorBasicDetailsView.tsx +++ b/public/pages/Detectors/components/DetectorBasicDetailsView/DetectorBasicDetailsView.tsx @@ -3,7 +3,7 @@ * SPDX-License-Identifier: Apache-2.0 */ -import { EuiButton, EuiSpacer } from '@elastic/eui'; +import { EuiButton, EuiSpacer, EuiLink, EuiIcon } from '@elastic/eui'; import React from 'react'; import { ContentPanel } from '../../../../components/ContentPanel'; import { createTextDetailsGroup, parseSchedule } from '../../../../utils/helpers'; @@ -13,6 +13,7 @@ import { DEFAULT_EMPTY_DATA } from '../../../../utils/constants'; export interface DetectorBasicDetailsViewProps { detector: Detector; + dashboardId?: string; rulesCanFold?: boolean; enabled_time?: number; last_update_time?: number; @@ -25,6 +26,7 @@ export const DetectorBasicDetailsView: React.FC = last_update_time, rulesCanFold, children, + dashboardId, onEditClicked, }) => { const { name, detector_type, inputs, schedule } = detector; @@ -33,6 +35,22 @@ export const DetectorBasicDetailsView: React.FC = const lastUpdated = last_update_time ? moment(last_update_time).format('YYYY-MM-DDTHH:mm') : undefined; + const firstTextDetailsGroupEntries = [ + { label: 'Detector name', content: name }, + { label: 'Log type', content: detector_type.toLowerCase() }, + { label: 'Data source', content: inputs[0].detector_input.indices[0] }, + { + label: 'Detector dashboard', + content: (dashboardId ? ( + window.open(`dashboards#/view/${dashboardId}`, '_blank')}> + {`${name} summary`} + + + ) : ( + 'Not available for this log type' + )) as any, + }, + ]; return ( = ]} > - {createTextDetailsGroup( - [ - { label: 'Detector name', content: name }, - { label: 'Log type', content: detector_type.toLowerCase() }, - { label: 'Data source', content: inputs[0].detector_input.indices[0] }, - ], - 4 - )} + {createTextDetailsGroup(firstTextDetailsGroupEntries, 4)} {createTextDetailsGroup( [ { label: 'Description', content: inputs[0].detector_input.description }, diff --git a/public/pages/Detectors/components/DetectorBasicDetailsView/__snapshots__/DetectorBasicDetailsView.test.tsx.snap b/public/pages/Detectors/components/DetectorBasicDetailsView/__snapshots__/DetectorBasicDetailsView.test.tsx.snap index 33b749047..84a8d02af 100644 --- a/public/pages/Detectors/components/DetectorBasicDetailsView/__snapshots__/DetectorBasicDetailsView.test.tsx.snap +++ b/public/pages/Detectors/components/DetectorBasicDetailsView/__snapshots__/DetectorBasicDetailsView.test.tsx.snap @@ -179,6 +179,45 @@ Object { +
+
+
+ +
+
+
+ Not available for this log type +
+
+
+
+
+
+
+ +
+
+
+ Not available for this log type +
+
+
+
>>; + enabledRules?: RuleItem[]; + allRules?: RuleItem[]; + } > { detectorService: DetectorsService; notifications: NotificationsStart; + savedObjectsService: ISavedObjectsService; } export interface DetectorDetailsState { @@ -47,6 +60,7 @@ export interface DetectorDetailsState { detectorId: string; tabs: any[]; loading: boolean; + dashboardId?: string; } enum TabId { @@ -105,6 +119,7 @@ export class DetectorDetails extends React.Component @@ -152,6 +167,35 @@ export class DetectorDetails extends React.Component { + if (savedObject && savedObject.ok) { + this.setState({ dashboardId: savedObject.response.id }); + this.getTabs(); + } + delete pendingDashboardCreations[this.state.detectorId]; + }); + } else { + const dashboards = await this.props.savedObjectsService.getDashboards(); + let detectorDashboardId; + dashboards.some((dashboard) => { + if ( + dashboard.references.findIndex((reference) => reference.id === this.state.detectorId) > -1 + ) { + detectorDashboardId = dashboard.id; + return true; + } + + return false; + }); + + if (detectorDashboardId) { + this.setState({ dashboardId: detectorDashboardId }); + this.getTabs(); + } + } } getDetector = async () => { @@ -242,15 +286,8 @@ export class DetectorDetails extends React.Component ( - {action.name} - )), { - this.closeActionsPopover(); - this.onDelete(); - }} - data-test-subj={'editButton'} + onClick={this.onViewAlertsClick} + data-test-subj={'viewAlertsButton'} > - Delete + View Alerts , + + View Findings + , + <> + {this.state.dashboardId ? ( + + window.open(`dashboards#/view/${this.state.dashboardId}`, '_blank') + } + data-test-subj={'viewDashboard'} + > + View detector dashboard + + ) : null} + , + , {`${this.detectorHit._source.enabled ? 'Stop' : 'Start'} detector`} , + { + this.closeActionsPopover(); + this.onDelete(); + }} + data-test-subj={'editButton'} + > + Delete + , ]} /> , diff --git a/public/pages/Detectors/containers/Detector/__snapshots__/DetectorDetails.test.tsx.snap b/public/pages/Detectors/containers/Detector/__snapshots__/DetectorDetails.test.tsx.snap index ccb8ab9ab..3de85c0a3 100644 --- a/public/pages/Detectors/containers/Detector/__snapshots__/DetectorDetails.test.tsx.snap +++ b/public/pages/Detectors/containers/Detector/__snapshots__/DetectorDetails.test.tsx.snap @@ -220,6 +220,19 @@ exports[` spec renders the component 1`] = ` }, } } + savedObjectsService={ + SavedObjectService { + "getDashboards": [Function], + "indexService": undefined, + "savedObjectsClient": Object { + "delete": [MockFunction], + "get": [MockFunction], + "head": [MockFunction], + "post": [MockFunction], + "put": [MockFunction], + }, + } + } >
spec renders the component 1`] = ` -
- - - - - -
- - -
- - - - - -
- -
spec renders the component 1`] = ` }, } } + savedObjectsService={ + SavedObjectService { + "getDashboards": [Function], + "indexService": undefined, + "savedObjectsClient": Object { + "delete": [MockFunction], + "get": [MockFunction], + "head": [MockFunction], + "post": [MockFunction], + "put": [MockFunction], + }, + } + } > spec renders the component 1`] = ` } } onEditClicked={[Function]} + savedObjectsService={ + SavedObjectService { + "getDashboards": [Function], + "indexService": undefined, + "savedObjectsClient": Object { + "delete": [MockFunction], + "get": [MockFunction], + "head": [MockFunction], + "post": [MockFunction], + "put": [MockFunction], + }, + } + } > spec renders the component 1`] = `
+ +
+ + Detector dashboard + + } + labelType="label" + > +
+
+ + + +
+
+ +
+ Not available for this log type +
+ +
+
+ +
+
spec renders the component 1`] = ` } } onEditClicked={[Function]} + savedObjectsService={ + SavedObjectService { + "getDashboards": [Function], + "indexService": undefined, + "savedObjectsClient": Object { + "delete": [MockFunction], + "get": [MockFunction], + "head": [MockFunction], + "post": [MockFunction], + "put": [MockFunction], + }, + } + } > void; editDetectorRules: (enabledRules: RuleItem[], allRuleItems: RuleItem[]) => void; } @@ -33,6 +34,7 @@ export class DetectorDetailsView extends React.Component< enabled_time, last_update_time, rulesCanFold, + dashboardId, editBasicDetails, editDetectorRules, } = this.props; @@ -53,6 +55,7 @@ export class DetectorDetailsView extends React.Component< enabled_time={enabled_time} last_update_time={last_update_time} rulesCanFold={rulesCanFold} + dashboardId={dashboardId} onEditClicked={editBasicDetails} > {rulesCanFold ? detectorRules : null} diff --git a/public/pages/Detectors/containers/DetectorDetailsView/__snapshots__/DetectorDetailsView.test.tsx.snap b/public/pages/Detectors/containers/DetectorDetailsView/__snapshots__/DetectorDetailsView.test.tsx.snap index f3a9a2d7b..355e263f6 100644 --- a/public/pages/Detectors/containers/DetectorDetailsView/__snapshots__/DetectorDetailsView.test.tsx.snap +++ b/public/pages/Detectors/containers/DetectorDetailsView/__snapshots__/DetectorDetailsView.test.tsx.snap @@ -822,6 +822,100 @@ exports[` spec renders the component 1`] = `
+ +
+ + Detector dashboard + + } + labelType="label" + > +
+
+ + + +
+
+ +
+ Not available for this log type +
+ +
+
+ +
+ View surrounding documents + diff --git a/public/pages/Main/Main.tsx b/public/pages/Main/Main.tsx index 734240fe5..6029454de 100644 --- a/public/pages/Main/Main.tsx +++ b/public/pages/Main/Main.tsx @@ -363,6 +363,7 @@ export default class Main extends Component { render={(props: RouteComponentProps<{}, any, any>) => ( diff --git a/public/security_analytics_app.tsx b/public/security_analytics_app.tsx index bf8628e6c..b8747cd64 100644 --- a/public/security_analytics_app.tsx +++ b/public/security_analytics_app.tsx @@ -24,6 +24,7 @@ import OpenSearchService from './services/OpenSearchService'; import { BrowserServices } from './models/interfaces'; import FieldMappingService from './services/FieldMappingService'; import RuleService from './services/RuleService'; +import SavedObjectService from './services/SavedObjectService'; import { SecurityAnalyticsPluginStartDeps } from './plugin'; export function renderApp( @@ -42,6 +43,7 @@ export function renderApp( const alertsService = new AlertsService(http); const ruleService = new RuleService(http); const notificationsService = new NotificationsService(http); + const savedObjectsService = new SavedObjectService(savedObjects.client, indexService); const indexPatternsService = new IndexPatternsService(depsStart.data.indexPatterns); const services: BrowserServices = { @@ -53,6 +55,7 @@ export function renderApp( ruleService, alertService: alertsService, notificationsService, + savedObjectsService, indexPatternsService, }; diff --git a/public/services/IndexService.ts b/public/services/IndexService.ts index 77636b59f..abbfcb5b5 100644 --- a/public/services/IndexService.ts +++ b/public/services/IndexService.ts @@ -7,8 +7,9 @@ import { HttpSetup } from 'opensearch-dashboards/public'; import { ServerResponse } from '../../server/models/types'; import { GetIndicesResponse } from '../../server/models/interfaces'; import { API } from '../../server/utils/constants'; +import { IIndexService } from '../../types'; -export default class IndexService { +export default class IndexService implements IIndexService { httpClient: HttpSetup; constructor(httpClient: HttpSetup) { @@ -21,4 +22,13 @@ export default class IndexService { return response; }; + + updateAliases = async (actions: any): Promise> => { + const url = `..${API.UPDATE_ALIASES}`; + const response = (await this.httpClient.post(url, { + body: JSON.stringify(actions), + })) as ServerResponse<{}>; + + return response; + }; } diff --git a/public/services/SavedObjectService.ts b/public/services/SavedObjectService.ts new file mode 100644 index 000000000..6dd6d91e9 --- /dev/null +++ b/public/services/SavedObjectService.ts @@ -0,0 +1,144 @@ +/* + * Copyright OpenSearch Contributors + * SPDX-License-Identifier: Apache-2.0 + */ + +import { + SavedObjectReference, + SavedObjectsClientContract, + SimpleSavedObject, +} from 'opensearch-dashboards/public'; +import { IIndexService, ISavedObjectsService, ServerResponse } from '../../types'; +import { getSavedObjectConfigs } from '../store/savedObjectsConfig'; +import { logTypesWithDashboards } from '../utils/constants'; + +export default class SavedObjectService implements ISavedObjectsService { + constructor( + private savedObjectsClient: SavedObjectsClientContract, + private readonly indexService: IIndexService + ) {} + + public async createSavedObject( + name: string, + logType: string, + detectorId: string, + inputIndices: string[] + ): Promise> { + if (logTypesWithDashboards.has(logType)) { + const savedObjectConfig = getSavedObjectConfigs(logType); + + if (savedObjectConfig) { + try { + // Determine the name to be used for the index pattern and if it already exists then use that id for visualizations + const aliasName = `${logType}-${detectorId}`; + const indexActions = inputIndices.map((index) => { + return { + add: { + index, + alias: aliasName, + }, + }; + }); + const createAliasRes = await this.indexService.updateAliases({ + actions: indexActions, + }); + + const indexPattern = await this.savedObjectsClient.create( + savedObjectConfig['index-pattern'].type, + { + ...savedObjectConfig['index-pattern'].attributes, + title: aliasName, + }, + { + ...savedObjectConfig['index-pattern'], + } + ); + + const visCreationPromises = savedObjectConfig.visualizations.map( + (visualizationConfig) => { + return this.savedObjectsClient.create( + visualizationConfig.type, + visualizationConfig.attributes, + { + ...visualizationConfig, + references: visualizationConfig.references.map((ref) => { + return { + ...ref, + id: indexPattern.id, + }; + }), + } + ); + } + ); + + const visCreationRes = await Promise.allSettled(visCreationPromises); + const dashboardReferences = savedObjectConfig.dashboard.references.map((ref, index) => { + const createdVisRes = visCreationRes[index]; + if (createdVisRes.status === 'fulfilled') { + return { + ...ref, + id: createdVisRes.value.id, + }; + } + + return ref; + }); + dashboardReferences.push({ + id: detectorId, + name: name, + type: 'detector-SA', + }); + + const dashboardCreationRes = await this.savedObjectsClient.create( + savedObjectConfig.dashboard.type, + { + ...savedObjectConfig.dashboard.attributes, + title: `${name} summary`, + description: `Analyze ${logType} log data in security detector ${name}`, + }, + { + ...savedObjectConfig.dashboard, + references: dashboardReferences, + } + ); + + return Promise.resolve({ + ok: true, + response: dashboardCreationRes, + }); + } catch (error: any) { + console.error('Failed to create dashboard for log type ' + logType); + } + } + } + + return Promise.reject('Log type not yet supported'); + } + + public getDashboards = async (): Promise< + SimpleSavedObject<{ references: SavedObjectReference[]; id?: string }>[] + > => { + const dashboards = await this.savedObjectsClient + .find<{ references: SavedObjectReference[]; id?: string }>({ + type: 'dashboard', + fields: ['references', 'id'], + perPage: 10000, + }) + .then((response) => response.savedObjects); + + return Promise.resolve(dashboards); + }; + + public async getIndexPatterns(): Promise[]> { + const indexPatterns = await this.savedObjectsClient + .find<{ title: string }>({ + type: 'index-pattern', + fields: ['title', 'type'], + perPage: 10000, + }) + .then((response) => response.savedObjects); + + return Promise.resolve(indexPatterns); + } +} diff --git a/public/services/index.ts b/public/services/index.ts index 9964f84a5..5f9119ca9 100644 --- a/public/services/index.ts +++ b/public/services/index.ts @@ -13,6 +13,7 @@ import RuleService from './RuleService'; import IndexService from './IndexService'; import NotificationsService from './NotificationsService'; import IndexPatternsService from './IndexPatternsService'; +import SavedObjectService from './SavedObjectService'; export { ServicesConsumer, @@ -26,4 +27,5 @@ export { IndexService, NotificationsService, IndexPatternsService, + SavedObjectService, }; diff --git a/public/store/config/savedObjects/cloudtrail.ts b/public/store/config/savedObjects/cloudtrail.ts new file mode 100644 index 000000000..dae46dc8b --- /dev/null +++ b/public/store/config/savedObjects/cloudtrail.ts @@ -0,0 +1,805 @@ +/* + * Copyright OpenSearch Contributors + * SPDX-License-Identifier: Apache-2.0 + */ + +import { + DashboardSavedObjectCreationConfig, + IndexPatternSavedObjectCreationConfig, + VisualizationSavedObjectCreationConfig, +} from '../../../../types'; + +export const cloudtrailDashboardConfig: DashboardSavedObjectCreationConfig = { + attributes: { + description: '', + hits: 0, + kibanaSavedObjectMeta: { + searchSourceJSON: '{"query":{"language":"kuery","query":""},"filter":[]}', + }, + optionsJSON: '{"hidePanelTitles":false,"useMargins":true}', + panelsJSON: + '[{"version":"1.3.2","gridData":{"x":0,"y":0,"w":24,"h":7,"i":"ef1c8093-d864-4d8b-88bd-d3d635d90819"},"panelIndex":"ef1c8093-d864-4d8b-88bd-d3d635d90819","embeddableConfig":{},"panelRefName":"panel_0"},{"version":"1.3.2","gridData":{"x":24,"y":0,"w":24,"h":7,"i":"458220d0-a1bd-4ff4-887c-ddd1174ad52a"},"panelIndex":"458220d0-a1bd-4ff4-887c-ddd1174ad52a","embeddableConfig":{},"panelRefName":"panel_1"},{"version":"1.3.2","gridData":{"x":0,"y":7,"w":11,"h":7,"i":"8d6c2abf-e123-41cc-9428-c814a8c3851f"},"panelIndex":"8d6c2abf-e123-41cc-9428-c814a8c3851f","embeddableConfig":{},"panelRefName":"panel_2"},{"version":"1.3.2","gridData":{"x":11,"y":7,"w":10,"h":15,"i":"387068a2-b2d7-449a-93c6-92ded89cc535"},"panelIndex":"387068a2-b2d7-449a-93c6-92ded89cc535","embeddableConfig":{},"panelRefName":"panel_3"},{"version":"1.3.2","gridData":{"x":21,"y":7,"w":27,"h":15,"i":"06dacfb3-5be8-48da-be91-a33a0fdedd6f"},"panelIndex":"06dacfb3-5be8-48da-be91-a33a0fdedd6f","embeddableConfig":{"mapCenter":null,"mapZoom":null},"panelRefName":"panel_4"},{"version":"1.3.2","gridData":{"x":0,"y":14,"w":11,"h":8,"i":"59c704d2-da17-4437-aaa6-72e7f7899be0"},"panelIndex":"59c704d2-da17-4437-aaa6-72e7f7899be0","embeddableConfig":{},"panelRefName":"panel_5"},{"version":"1.3.2","gridData":{"x":0,"y":22,"w":7,"h":8,"i":"89480c31-3cce-4327-b171-362cbb13d75f"},"panelIndex":"89480c31-3cce-4327-b171-362cbb13d75f","embeddableConfig":{"title":""},"panelRefName":"panel_6"},{"version":"1.3.2","gridData":{"x":7,"y":22,"w":7,"h":8,"i":"ff379b16-9bab-47ff-ba35-5979c2837bac"},"panelIndex":"ff379b16-9bab-47ff-ba35-5979c2837bac","embeddableConfig":{"title":""},"panelRefName":"panel_7"},{"version":"1.3.2","gridData":{"x":14,"y":22,"w":7,"h":8,"i":"fcee65f0-5867-4e06-abba-84c666bd3d7d"},"panelIndex":"fcee65f0-5867-4e06-abba-84c666bd3d7d","embeddableConfig":{"title":""},"panelRefName":"panel_8"},{"version":"1.3.2","gridData":{"x":21,"y":22,"w":27,"h":8,"i":"ebfcdb58-d9a8-491b-a4b0-be9334715165"},"panelIndex":"ebfcdb58-d9a8-491b-a4b0-be9334715165","embeddableConfig":{},"panelRefName":"panel_9"},{"version":"1.3.2","gridData":{"x":0,"y":30,"w":7,"h":8,"i":"71ca93b1-de52-4d12-a337-3638c7896850"},"panelIndex":"71ca93b1-de52-4d12-a337-3638c7896850","embeddableConfig":{"title":""},"panelRefName":"panel_10"},{"version":"1.3.2","gridData":{"x":7,"y":30,"w":7,"h":8,"i":"a17dbd0a-15fc-43d9-9a9e-c5ad1516d22a"},"panelIndex":"a17dbd0a-15fc-43d9-9a9e-c5ad1516d22a","embeddableConfig":{"title":""},"panelRefName":"panel_11"},{"version":"1.3.2","gridData":{"x":14,"y":30,"w":7,"h":8,"i":"1abc07f4-c21f-4562-9bb1-0eb8903d4aa0"},"panelIndex":"1abc07f4-c21f-4562-9bb1-0eb8903d4aa0","embeddableConfig":{"title":""},"panelRefName":"panel_12"},{"version":"1.3.2","gridData":{"x":21,"y":30,"w":7,"h":8,"i":"7731f303-8d34-460a-906e-927e638cfa0f"},"panelIndex":"7731f303-8d34-460a-906e-927e638cfa0f","embeddableConfig":{"title":""},"panelRefName":"panel_13"},{"version":"1.3.2","gridData":{"x":28,"y":30,"w":7,"h":8,"i":"e92cccc6-c5ab-4afa-a189-ce326de4030a"},"panelIndex":"e92cccc6-c5ab-4afa-a189-ce326de4030a","embeddableConfig":{"title":""},"panelRefName":"panel_14"},{"version":"1.3.2","gridData":{"x":35,"y":30,"w":7,"h":8,"i":"1882d098-45d1-401e-8c15-222fb85c0b58"},"panelIndex":"1882d098-45d1-401e-8c15-222fb85c0b58","embeddableConfig":{"title":""},"panelRefName":"panel_15"},{"version":"1.3.2","gridData":{"x":0,"y":38,"w":15,"h":9,"i":"6d592a68-5658-4af3-8db5-bce9e2357c36"},"panelIndex":"6d592a68-5658-4af3-8db5-bce9e2357c36","embeddableConfig":{},"panelRefName":"panel_16"},{"version":"1.3.2","gridData":{"x":42,"y":30,"w":6,"h":8,"i":"f65af854-bcb0-4904-b9c2-a869c8bf2423"},"panelIndex":"f65af854-bcb0-4904-b9c2-a869c8bf2423","embeddableConfig":{"hidePanelTitles":true},"panelRefName":"panel_17"},{"version":"1.3.2","gridData":{"x":15,"y":38,"w":33,"h":9,"i":"2d43cb78-cdf8-4f6f-83b2-e724f1880c4b"},"panelIndex":"2d43cb78-cdf8-4f6f-83b2-e724f1880c4b","embeddableConfig":{},"panelRefName":"panel_18"},{"version":"1.3.2","gridData":{"x":0,"y":47,"w":15,"h":9,"i":"c1ef693d-637a-4d2d-8267-3191015f0df8"},"panelIndex":"c1ef693d-637a-4d2d-8267-3191015f0df8","embeddableConfig":{},"panelRefName":"panel_19"},{"version":"1.3.2","gridData":{"x":15,"y":47,"w":33,"h":9,"i":"9a6adcb9-bce1-44c4-bab8-fe086aaf741d"},"panelIndex":"9a6adcb9-bce1-44c4-bab8-fe086aaf741d","embeddableConfig":{},"panelRefName":"panel_20"},{"version":"1.3.2","gridData":{"x":0,"y":56,"w":15,"h":9,"i":"1a85d715-d1ba-4d65-8da7-ab061fb5b20a"},"panelIndex":"1a85d715-d1ba-4d65-8da7-ab061fb5b20a","embeddableConfig":{},"panelRefName":"panel_21"},{"version":"1.3.2","gridData":{"x":15,"y":56,"w":33,"h":9,"i":"3438d081-b021-41dd-a94d-0b2fc4e41c55"},"panelIndex":"3438d081-b021-41dd-a94d-0b2fc4e41c55","embeddableConfig":{},"panelRefName":"panel_22"},{"version":"1.3.2","gridData":{"x":0,"y":65,"w":15,"h":9,"i":"ca007fbb-a1e3-4c8c-80ee-b20394c82353"},"panelIndex":"ca007fbb-a1e3-4c8c-80ee-b20394c82353","embeddableConfig":{},"panelRefName":"panel_23"},{"version":"1.3.2","gridData":{"x":15,"y":65,"w":33,"h":9,"i":"aa79b7c7-2617-4cdf-959b-225d20b8960f"},"panelIndex":"aa79b7c7-2617-4cdf-959b-225d20b8960f","embeddableConfig":{},"panelRefName":"panel_24"},{"version":"1.3.2","gridData":{"x":0,"y":74,"w":13,"h":12,"i":"3d5b3e0b-b438-4eb2-b9b2-8599b6095e5d"},"panelIndex":"3d5b3e0b-b438-4eb2-b9b2-8599b6095e5d","embeddableConfig":{},"panelRefName":"panel_25"},{"version":"1.3.2","gridData":{"x":13,"y":74,"w":13,"h":12,"i":"c2b7419d-5a81-4ab1-b793-e884b3b82765"},"panelIndex":"c2b7419d-5a81-4ab1-b793-e884b3b82765","embeddableConfig":{},"panelRefName":"panel_26"},{"version":"1.3.2","gridData":{"x":26,"y":74,"w":22,"h":12,"i":"2b4f1b7f-05b1-4956-92a3-7134c2afed52"},"panelIndex":"2b4f1b7f-05b1-4956-92a3-7134c2afed52","embeddableConfig":{},"panelRefName":"panel_27"}]', + timeRestore: false, + title: 'CloudTrail Summary', + version: 1, + }, + id: '02ca2d20-8245-11ea-8450-d1d13849d130', + migrationVersion: { + dashboard: '7.9.3', + }, + references: [ + { + id: '38b0cd00-8609-11ea-8ea1-d5ea957d0a7d', + name: 'panel_0', + type: 'visualization', + }, + { + id: '70cd1ea0-8609-11ea-8ea1-d5ea957d0a7d', + name: 'panel_1', + type: 'visualization', + }, + { + id: '5fdde8a0-87cf-11ea-b9a0-7b688d6c40a7', + name: 'panel_2', + type: 'visualization', + }, + { + id: '8e9a0fb0-87d0-11ea-84c8-631650cae227', + name: 'panel_3', + type: 'visualization', + }, + { + id: '86029e40-87cf-11ea-b9a0-7b688d6c40a7', + name: 'panel_4', + type: 'visualization', + }, + { + id: 'd51c8ea0-87cf-11ea-b9a0-7b688d6c40a7', + name: 'panel_5', + type: 'visualization', + }, + { + id: '37a2aab0-87b1-11ea-b9a0-7b688d6c40a7', + name: 'panel_6', + type: 'visualization', + }, + { + id: '964e0eb0-87c0-11ea-84c8-631650cae227', + name: 'panel_7', + type: 'visualization', + }, + { + id: 'f53ad890-87bb-11ea-b9a0-7b688d6c40a7', + name: 'panel_8', + type: 'visualization', + }, + { + id: '8485ad20-87cd-11ea-84c8-631650cae227', + name: 'panel_9', + type: 'visualization', + }, + { + id: 'fd2b26d0-87b7-11ea-84c8-631650cae227', + name: 'panel_10', + type: 'visualization', + }, + { + id: '12949b90-87b9-11ea-b9a0-7b688d6c40a7', + name: 'panel_11', + type: 'visualization', + }, + { + id: '0d6fd0c0-87ba-11ea-84c8-631650cae227', + name: 'panel_12', + type: 'visualization', + }, + { + id: '7a295f60-87ba-11ea-b9a0-7b688d6c40a7', + name: 'panel_13', + type: 'visualization', + }, + { + id: '42efd730-87bb-11ea-84c8-631650cae227', + name: 'panel_14', + type: 'visualization', + }, + { + id: '2172d050-87be-11ea-84c8-631650cae227', + name: 'panel_15', + type: 'visualization', + }, + { + id: 'ff879d20-87a6-11ea-8ea1-d5ea957d0a7d', + name: 'panel_16', + type: 'visualization', + }, + { + id: '8dd04d40-1e02-11ed-aa58-67d455528b1d', + name: 'panel_17', + type: 'visualization', + }, + { + id: '5b808920-87a7-11ea-8ea1-d5ea957d0a7d', + name: 'panel_18', + type: 'visualization', + }, + { + id: '750fd9d0-87a8-11ea-8ea1-d5ea957d0a7d', + name: 'panel_19', + type: 'visualization', + }, + { + id: 'a9aacce0-87a8-11ea-8ea1-d5ea957d0a7d', + name: 'panel_20', + type: 'visualization', + }, + { + id: '1e2f98c0-87a9-11ea-8ea1-d5ea957d0a7d', + name: 'panel_21', + type: 'visualization', + }, + { + id: '71b1ec50-87a9-11ea-8ea1-d5ea957d0a7d', + name: 'panel_22', + type: 'visualization', + }, + { + id: 'db266210-87a9-11ea-8ea1-d5ea957d0a7d', + name: 'panel_23', + type: 'visualization', + }, + { + id: 'e062c4d0-87ae-11ea-b9a0-7b688d6c40a7', + name: 'panel_24', + type: 'visualization', + }, + { + id: '31ea73f0-1d19-11ed-94f7-6342b0f7ff8e', + name: 'panel_25', + type: 'visualization', + }, + { + id: '2a1575e0-1d1d-11ed-aa58-67d455528b1d', + name: 'panel_26', + type: 'visualization', + }, + { + id: '3dd3f380-1dff-11ed-aa58-67d455528b1d', + name: 'panel_27', + type: 'visualization', + }, + ], + type: 'dashboard', +}; + +export const cloudtrailVisualizationConfigs: VisualizationSavedObjectCreationConfig[] = [ + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'CloudTrail - AWS Account(Bar)', + uiStateJSON: '{}', + version: 1, + visState: + '{"type":"histogram","aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"3","enabled":true,"type":"terms","schema":"segment","params":{"field":"cloud.account.id","orderBy":"1","order":"desc","size":10,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}},{"id":"4","enabled":true,"type":"terms","schema":"group","params":{"field":"cloud.account.id","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}}],"params":{"type":"histogram","grid":{"categoryLines":false},"categoryAxes":[{"id":"CategoryAxis-1","type":"category","position":"bottom","show":false,"style":{},"scale":{"type":"linear"},"labels":{"show":true,"filter":true,"truncate":100},"title":{}}],"valueAxes":[{"id":"ValueAxis-1","name":"LeftAxis-1","type":"value","position":"left","show":true,"style":{},"scale":{"type":"linear","mode":"normal"},"labels":{"show":true,"rotate":0,"filter":false,"truncate":100},"title":{"text":"Count"}}],"seriesParams":[{"show":"true","type":"histogram","mode":"stacked","data":{"label":"Count","id":"1"},"valueAxis":"ValueAxis-1","drawLinesBetweenPoints":true,"showCircles":true}],"addTooltip":true,"addLegend":true,"legendPosition":"right","times":[],"addTimeMarker":false,"labels":{"show":false},"thresholdLine":{"show":false,"value":10,"width":1,"style":"full","color":"#34130C"},"dimensions":{"x":{"accessor":0,"format":{"id":"terms","params":{"id":"string","otherBucketLabel":"Other","missingBucketLabel":"Missing"}},"params":{},"aggType":"terms"},"y":[{"accessor":1,"format":{"id":"number"},"params":{},"aggType":"count"}]}},"title":"CloudTrail - AWS Account(Bar)"}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - Region(Bar)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - Region(Bar)","type":"histogram","params":{"type":"histogram","grid":{"categoryLines":false},"categoryAxes":[{"id":"CategoryAxis-1","type":"category","position":"bottom","show":false,"style":{},"scale":{"type":"linear"},"labels":{"show":true,"filter":true,"truncate":100},"title":{}}],"valueAxes":[{"id":"ValueAxis-1","name":"LeftAxis-1","type":"value","position":"left","show":true,"style":{},"scale":{"type":"linear","mode":"normal"},"labels":{"show":true,"rotate":0,"filter":false,"truncate":100},"title":{"text":"Count"}}],"seriesParams":[{"show":"true","type":"histogram","mode":"stacked","data":{"label":"Count","id":"1"},"valueAxis":"ValueAxis-1","drawLinesBetweenPoints":true,"showCircles":true}],"addTooltip":true,"addLegend":true,"legendPosition":"right","times":[],"addTimeMarker":false,"labels":{"show":false},"thresholdLine":{"show":false,"value":10,"width":1,"style":"full","color":"#34130C"},"dimensions":{"x":{"accessor":0,"format":{"id":"terms","params":{"id":"string","otherBucketLabel":"Other","missingBucketLabel":"Missing"}},"params":{},"aggType":"terms"},"y":[{"accessor":2,"format":{"id":"number"},"params":{},"aggType":"count"}],"series":[{"accessor":1,"format":{"id":"terms","params":{"id":"string","otherBucketLabel":"Other","missingBucketLabel":"Missing"}},"params":{},"aggType":"terms"}]}},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"3","enabled":true,"type":"terms","schema":"segment","params":{"field":"cloud.region","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}},{"id":"4","enabled":true,"type":"terms","schema":"group","params":{"field":"cloud.region","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'CloudTrail - Source Countries', + uiStateJSON: '{}', + version: 1, + visState: + '{"type":"pie","aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"terms","schema":"segment","params":{"field":"source.geo.country_name","orderBy":"1","order":"desc","size":10,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}}],"params":{"type":"pie","addTooltip":true,"addLegend":true,"legendPosition":"right","isDonut":true,"labels":{"show":false,"values":true,"last_level":true,"truncate":100},"dimensions":{"metric":{"accessor":1,"format":{"id":"number"},"params":{},"aggType":"count"},"buckets":[{"accessor":0,"format":{"id":"terms","params":{"id":"string","otherBucketLabel":"Other","missingBucketLabel":"Missing"}},"params":{},"aggType":"terms"}]}},"title":"CloudTrail - Source Countries"}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - Source IP', + uiStateJSON: '{"vis":{"params":{"sort":{"columnIndex":null,"direction":null}}}}', + version: 1, + visState: + '{"title":"CloudTrail - Source IP","type":"table","params":{"perPage":10,"showPartialRows":false,"showMetricsAtAllLevels":false,"sort":{"columnIndex":null,"direction":null},"showTotal":false,"totalFunc":"sum","percentageCol":"","dimensions":{"metrics":[{"accessor":1,"format":{"id":"number"},"params":{},"aggType":"count"}],"buckets":[{"accessor":0,"format":{"id":"terms","params":{"id":"ip","otherBucketLabel":"Other","missingBucketLabel":"Missing"}},"params":{},"aggType":"terms"}]}},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"terms","schema":"bucket","params":{"field":"source.ip","orderBy":"1","order":"desc","size":10,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing","customLabel":"Source"}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'CloudTrail - Source Countries(Geo)', + uiStateJSON: '{"mapZoom":2,"mapCenter":[21.453068633086783,26.3558692421991]}', + version: 1, + visState: + '{"type":"region_map","aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"terms","schema":"segment","params":{"field":"source.geo.country_iso_code","orderBy":"1","order":"desc","size":100,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}}],"params":{"addTooltip":true,"colorSchema":"Yellow to Red","emsHotLink":"https://maps.elastic.co/v7.7?locale=en#file/world_countries","isDisplayWarning":true,"legendPosition":"bottomright","mapCenter":[0,0],"mapZoom":2,"outlineWeight":1,"selectedJoinField":{"description":"ISO 3166-1 alpha-2 Code","name":"iso2","type":"id"},"selectedLayer":{"attribution":"Made with NaturalEarth","created_at":"2017-04-26T17:12:15.978370","fields":[{"description":"ISO 3166-1 alpha-2 Code","name":"iso2","type":"id"},{"description":"ISO 3166-1 alpha-3 Code","name":"iso3","type":"id"},{"description":"Name","name":"name","type":"name"}],"format":{"type":"geojson"},"id":"world_countries","isEMS":true,"layerId":"elastic_maps_service.World Countries","name":"World Countries","origin":"elastic_maps_service"},"showAllShapes":true,"wms":{"enabled":false,"options":{"format":"image/png","transparent":true},"selectedTmsLayer":{"attribution":"Map data © OpenStreetMap contributors","id":"road_map","maxZoom":10,"minZoom":0,"origin":"elastic_maps_service"}}},"title":"CloudTrail - Source Countries(Geo)"}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - Source AS', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - Source AS","type":"pie","params":{"type":"pie","addTooltip":true,"addLegend":true,"legendPosition":"right","isDonut":true,"labels":{"show":false,"values":true,"last_level":true,"truncate":100},"dimensions":{"metric":{"accessor":1,"format":{"id":"number"},"params":{},"aggType":"count"},"buckets":[{"accessor":0,"format":{"id":"terms","params":{"id":"string","otherBucketLabel":"Other","missingBucketLabel":"Missing"}},"params":{},"aggType":"terms"}]}},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"terms","schema":"segment","params":{"field":"source.as.organization.name","orderBy":"1","order":"desc","size":10,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - Login Failed', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - Login Failed","type":"metric","params":{"metric":{"percentageMode":false,"useRanges":false,"colorSchema":"Green to Red","metricColorMode":"None","colorsRange":[{"type":"range","from":0,"to":10000}],"labels":{"show":true},"invertColors":false,"style":{"bgFill":"#000","bgColor":false,"labelColor":false,"subText":"","fontSize":60}},"dimensions":{"metrics":[{"type":"vis_dimension","accessor":1,"format":{"id":"number","params":{}}}],"bucket":{"type":"vis_dimension","accessor":0,"format":{"id":"string","params":{}}}},"addTooltip":true,"addLegend":false,"type":"metric"},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"filters","schema":"group","params":{"filters":[{"input":{"query":"responseElements.ConsoleLogin:Failure","language":"kuery"},"label":"Login Failed"}]}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - Root Login(CIS3.3)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - Root Login(CIS3.3)","type":"metric","params":{"metric":{"percentageMode":false,"useRanges":false,"colorSchema":"Green to Red","metricColorMode":"None","colorsRange":[{"type":"range","from":0,"to":10000}],"labels":{"show":true},"invertColors":false,"style":{"bgFill":"#000","bgColor":false,"labelColor":false,"subText":"","fontSize":60}},"dimensions":{"metrics":[{"type":"vis_dimension","accessor":1,"format":{"id":"number","params":{}}}],"bucket":{"type":"vis_dimension","accessor":0,"format":{"id":"string","params":{}}}},"addTooltip":true,"addLegend":false,"type":"metric"},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"filters","schema":"group","params":{"filters":[{"input":{"query":"userIdentity.type:Root AND NOT userIdentity.invokedBy:* AND NOT eventType:AwsServiceEvent","language":"kuery"},"label":"Root Login"}]}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - Unauthorized API Calls(CIS3.1)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - Unauthorized API Calls(CIS3.1)","type":"metric","params":{"metric":{"percentageMode":false,"useRanges":false,"colorSchema":"Green to Red","metricColorMode":"None","colorsRange":[{"type":"range","from":0,"to":10000}],"labels":{"show":true},"invertColors":false,"style":{"bgFill":"#000","bgColor":false,"labelColor":false,"subText":"","fontSize":23}},"dimensions":{"metrics":[{"type":"vis_dimension","accessor":1,"format":{"id":"number","params":{}}}],"bucket":{"type":"vis_dimension","accessor":0,"format":{"id":"string","params":{}}}},"addTooltip":true,"addLegend":false,"type":"metric"},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"filters","schema":"group","params":{"filters":[{"label":"Unauthorized API Calls","input":{"query":"errorCode:*UnauthorizedOperation OR errorCode:AccessDenied*","language":"kuery"}}]}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - UserIdentity.arn', + uiStateJSON: '{"vis":{"params":{"sort":{"columnIndex":null,"direction":null}}}}', + version: 1, + visState: + '{"title":"CloudTrail - UserIdentity.arn","type":"table","params":{"perPage":10,"showPartialRows":false,"showMetricsAtAllLevels":false,"sort":{"columnIndex":null,"direction":null},"showTotal":false,"totalFunc":"sum","percentageCol":"","dimensions":{"metrics":[{"accessor":1,"format":{"id":"number"},"params":{},"aggType":"count"}],"buckets":[{"accessor":0,"format":{"id":"terms","params":{"id":"string","otherBucketLabel":"Other","missingBucketLabel":"Missing"}},"params":{},"aggType":"terms"}]}},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"terms","schema":"bucket","params":{"field":"userIdentity.arn","orderBy":"1","order":"desc","size":10,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"language":"kuery","query":""},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - Security Group Changed(CIS3.10)', + uiStateJSON: '{}', + version: 1, + visState: + '{"aggs":[{"enabled":true,"id":"1","params":{},"schema":"metric","type":"count"},{"enabled":true,"id":"2","params":{"filters":[{"input":{"language":"kuery","query":"eventName:(AuthorizeSecurityGroupIngress OR AuthorizeSecurityGroupEgress OR RevokeSecurityGroupIngress OR RevokeSecurityGroupEgress OR CreateSecurityGroup OR DeleteSecurityGroup)"},"label":"SG Changed"}]},"schema":"group","type":"filters"}],"params":{"addLegend":false,"addTooltip":true,"dimensions":{"bucket":{"accessor":0,"format":{"id":"string","params":{}},"type":"vis_dimension"},"metrics":[{"accessor":1,"format":{"id":"number","params":{}},"type":"vis_dimension"}]},"metric":{"colorSchema":"Green to Red","colorsRange":[{"from":0,"to":10000,"type":"range"}],"invertColors":false,"labels":{"show":true},"metricColorMode":"None","percentageMode":false,"style":{"bgColor":false,"bgFill":"#000","fontSize":60,"labelColor":false,"subText":""},"useRanges":false},"type":"metric"},"title":"CloudTrail - Security Group Changed(CIS3.10)","type":"metric"}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - NACL Changed(CIS3.11)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - NACL Changed(CIS3.11)","type":"metric","params":{"metric":{"percentageMode":false,"useRanges":false,"colorSchema":"Green to Red","metricColorMode":"None","colorsRange":[{"type":"range","from":0,"to":10000}],"labels":{"show":true},"invertColors":false,"style":{"bgFill":"#000","bgColor":false,"labelColor":false,"subText":"","fontSize":60}},"dimensions":{"metrics":[{"type":"vis_dimension","accessor":0,"format":{"id":"number","params":{}}}]},"addTooltip":true,"addLegend":false,"type":"metric"},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"filters","schema":"group","params":{"filters":[{"input":{"query":"eventName:(CreateNetworkAcl OR CreateNetworkAclEntry OR DeleteNetworkAcl OR DeleteNetworkAclEntry OR ReplaceNetworkAclEntry OR ReplaceNetworkAclAssociation)","language":"kuery"},"label":"NACL Changed"}]}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - Network Gateway Changd(CIS3.12)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - Network Gateway Changd(CIS3.12)","type":"metric","params":{"metric":{"percentageMode":false,"useRanges":false,"colorSchema":"Green to Red","metricColorMode":"None","colorsRange":[{"type":"range","from":0,"to":10000}],"labels":{"show":true},"invertColors":false,"style":{"bgFill":"#000","bgColor":false,"labelColor":false,"subText":"","fontSize":60}},"dimensions":{"metrics":[{"type":"vis_dimension","accessor":1,"format":{"id":"number","params":{}}}],"bucket":{"type":"vis_dimension","accessor":0,"format":{"id":"string","params":{}}}},"addTooltip":true,"addLegend":false,"type":"metric"},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"filters","schema":"group","params":{"filters":[{"input":{"query":"eventName:(CreateCustomerGateway OR DeleteCustomerGateway OR AttachInternetGateway OR CreateInternetGateway OR DeleteInternetGateway OR DetachInternetGateway)","language":"kuery"},"label":"Network Gateway Changed"}]}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - Route Table Changd(CIS3.13)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - Route Table Changd(CIS3.13)","type":"metric","params":{"metric":{"percentageMode":false,"useRanges":false,"colorSchema":"Green to Red","metricColorMode":"None","colorsRange":[{"type":"range","from":0,"to":10000}],"labels":{"show":true},"invertColors":false,"style":{"bgFill":"#000","bgColor":false,"labelColor":false,"subText":"","fontSize":60}},"dimensions":{"metrics":[{"type":"vis_dimension","accessor":1,"format":{"id":"number","params":{}}}],"bucket":{"type":"vis_dimension","accessor":0,"format":{"id":"string","params":{}}}},"addTooltip":true,"addLegend":false,"type":"metric"},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"filters","schema":"group","params":{"filters":[{"label":"Route Table Changed","input":{"query":"eventName:(CreateRoute OR CreateRouteTable OR ReplaceRoute OR ReplaceRouteTableAssociation OR DeleteRouteTable OR DeleteRoute OR DisassociateRouteTable)","language":"kuery"}}]}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - VPC Changed(CIS3.14)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - VPC Changed(CIS3.14)","type":"metric","params":{"metric":{"percentageMode":false,"useRanges":false,"colorSchema":"Green to Red","metricColorMode":"None","colorsRange":[{"type":"range","from":0,"to":10000}],"labels":{"show":true},"invertColors":false,"style":{"bgFill":"#000","bgColor":false,"labelColor":false,"subText":"","fontSize":60}},"dimensions":{"metrics":[{"type":"vis_dimension","accessor":0,"format":{"id":"number","params":{}}}]},"addTooltip":true,"addLegend":false,"type":"metric"},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"filters","schema":"group","params":{"filters":[{"input":{"query":"eventName:(CreateVpc OR DeleteVpc OR ModifyVpcAttribute OR AcceptVpcPeeringConnection OR CreateVpcPeeringConnection OR DeleteVpcPeeringConnection OR RejectVpcPeeringConnection OR AttachClassicLinkVpc OR DetachClassicLinkVpc OR DisableVpcClassicLink OR EnableVpcClassicLink)","language":"kuery"},"label":"VPC Changed"}]}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - S3 Bucket Changed(CIS3.8)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - S3 Bucket Changed(CIS3.8)","type":"metric","params":{"metric":{"percentageMode":false,"useRanges":false,"colorSchema":"Green to Red","metricColorMode":"None","colorsRange":[{"type":"range","from":0,"to":10000}],"labels":{"show":true},"invertColors":false,"style":{"bgFill":"#000","bgColor":false,"labelColor":false,"subText":"","fontSize":60}},"dimensions":{"metrics":[{"type":"vis_dimension","accessor":1,"format":{"id":"number","params":{}}}],"bucket":{"type":"vis_dimension","accessor":0,"format":{"id":"string","params":{}}}},"addTooltip":true,"addLegend":false,"type":"metric"},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"filters","schema":"group","params":{"filters":[{"input":{"query":"eventSource:s3.amazonaws.com AND (eventName:(PutBucketAcl OR PutBucketPolicy OR PutBucketCors OR PutBucketLifecycle OR PutBucketReplication OR DeleteBucketPolicy OR DeleteBucketCors OR DeleteBucketLifecycle OR DeleteBucketReplication))","language":"kuery"},"label":"S3 Bucket Changed"}]}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - Event Name(Pie)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - Event Name(Pie)","type":"pie","params":{"type":"pie","addTooltip":true,"addLegend":true,"legendPosition":"right","isDonut":true,"labels":{"show":false,"values":true,"last_level":true,"truncate":100},"dimensions":{"metric":{"accessor":0,"format":{"id":"number"},"params":{},"aggType":"count"}}},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"terms","schema":"segment","params":{"field":"eventName","orderBy":"1","order":"desc","size":10,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: 'DisableKey\nScheduleKeyDeletion\nPutKeyPolicy', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'CloudTrail - KMS Key Changed', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - KMS Key Changed","type":"metric","aggs":[{"id":"1","enabled":true,"type":"count","params":{},"schema":"metric"},{"id":"2","enabled":true,"type":"filters","params":{"filters":[{"input":{"query":"eventSource:kms.amazonaws.com AND eventName:(DisableKey OR ScheduleKeyDeletion OR PutKeyPolicy)","language":"kuery"},"label":"KMS Key Changed"}]},"schema":"group"}],"params":{"addTooltip":true,"addLegend":false,"type":"metric","metric":{"percentageMode":false,"useRanges":false,"colorSchema":"Green to Red","metricColorMode":"None","colorsRange":[{"from":0,"to":10000}],"labels":{"show":true},"invertColors":false,"style":{"bgFill":"#000","bgColor":false,"labelColor":false,"subText":"","fontSize":60}}}}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - Event Name(Area)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - Event Name(Area)","type":"area","params":{"type":"area","grid":{"categoryLines":false},"categoryAxes":[{"id":"CategoryAxis-1","type":"category","position":"bottom","show":true,"style":{},"scale":{"type":"linear"},"labels":{"show":true,"filter":true,"truncate":100},"title":{}}],"valueAxes":[{"id":"ValueAxis-1","name":"LeftAxis-1","type":"value","position":"left","show":true,"style":{},"scale":{"type":"linear","mode":"normal"},"labels":{"show":true,"rotate":0,"filter":false,"truncate":100},"title":{"text":"Count"}}],"seriesParams":[{"show":"true","type":"area","mode":"stacked","data":{"label":"Count","id":"1"},"drawLinesBetweenPoints":true,"showCircles":true,"interpolate":"linear","valueAxis":"ValueAxis-1"}],"addTooltip":true,"addLegend":true,"legendPosition":"right","times":[],"addTimeMarker":false,"thresholdLine":{"show":false,"value":10,"width":1,"style":"full","color":"#34130C"},"labels":{},"dimensions":{"x":{"accessor":0,"format":{"id":"date","params":{"pattern":"YYYY-MM-DD HH:mm"}},"params":{"date":true,"interval":"PT12H","format":"YYYY-MM-DD HH:mm","bounds":{"min":"2020-03-27T10:17:24.061Z","max":"2020-04-26T10:17:24.061Z"}},"aggType":"date_histogram"},"y":[{"accessor":1,"format":{"id":"number"},"params":{},"aggType":"count"}]}},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"date_histogram","schema":"segment","params":{"field":"timestamp","timeRange":{"from":"now-30d","to":"now"},"useNormalizedEsInterval":true,"interval":"auto","drop_partials":false,"min_doc_count":1,"extended_bounds":{}}},{"id":"3","enabled":true,"type":"terms","schema":"group","params":{"field":"eventName","orderBy":"1","order":"desc","size":10,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - Event Type(Pie)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - Event Type(Pie)","type":"pie","params":{"type":"pie","addTooltip":true,"addLegend":true,"legendPosition":"right","isDonut":true,"labels":{"show":false,"values":true,"last_level":true,"truncate":100},"dimensions":{"metric":{"accessor":0,"format":{"id":"number"},"params":{},"aggType":"count"}}},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"terms","schema":"segment","params":{"field":"eventType","orderBy":"1","order":"desc","size":10,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - Event Type(Area)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - Event Type(Area)","type":"area","params":{"type":"area","grid":{"categoryLines":false},"categoryAxes":[{"id":"CategoryAxis-1","type":"category","position":"bottom","show":true,"style":{},"scale":{"type":"linear"},"labels":{"show":true,"filter":true,"truncate":100},"title":{}}],"valueAxes":[{"id":"ValueAxis-1","name":"LeftAxis-1","type":"value","position":"left","show":true,"style":{},"scale":{"type":"linear","mode":"normal"},"labels":{"show":true,"rotate":0,"filter":false,"truncate":100},"title":{"text":"Count"}}],"seriesParams":[{"show":"true","type":"area","mode":"stacked","data":{"label":"Count","id":"1"},"drawLinesBetweenPoints":true,"showCircles":true,"interpolate":"linear","valueAxis":"ValueAxis-1"}],"addTooltip":true,"addLegend":true,"legendPosition":"right","times":[],"addTimeMarker":false,"thresholdLine":{"show":false,"value":10,"width":1,"style":"full","color":"#34130C"},"labels":{},"dimensions":{"x":null,"y":[{"accessor":0,"format":{"id":"number"},"params":{},"aggType":"count"}]}},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"date_histogram","schema":"segment","params":{"field":"timestamp","useNormalizedEsInterval":true,"interval":"auto","drop_partials":false,"min_doc_count":1,"extended_bounds":{}}},{"id":"3","enabled":true,"type":"terms","schema":"group","params":{"field":"eventType","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - Error Code(Pie)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - Error Code(Pie)","type":"pie","params":{"type":"pie","addTooltip":true,"addLegend":true,"legendPosition":"right","isDonut":true,"labels":{"show":false,"values":true,"last_level":true,"truncate":100},"dimensions":{"metric":{"accessor":1,"format":{"id":"number"},"params":{},"aggType":"count"},"buckets":[{"accessor":0,"format":{"id":"terms","params":{"id":"string","otherBucketLabel":"Other","missingBucketLabel":"Missing"}},"params":{},"aggType":"terms"}]}},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"terms","schema":"segment","params":{"field":"errorCode","orderBy":"1","order":"desc","size":10,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - Error Code(Area)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - Error Code(Area)","type":"area","params":{"type":"area","grid":{"categoryLines":false},"categoryAxes":[{"id":"CategoryAxis-1","type":"category","position":"bottom","show":true,"style":{},"scale":{"type":"linear"},"labels":{"show":true,"filter":true,"truncate":100},"title":{}}],"valueAxes":[{"id":"ValueAxis-1","name":"LeftAxis-1","type":"value","position":"left","show":true,"style":{},"scale":{"type":"linear","mode":"normal"},"labels":{"show":true,"rotate":0,"filter":false,"truncate":100},"title":{"text":"Count"}}],"seriesParams":[{"show":"true","type":"area","mode":"stacked","data":{"label":"Count","id":"1"},"drawLinesBetweenPoints":true,"showCircles":true,"interpolate":"linear","valueAxis":"ValueAxis-1"}],"addTooltip":true,"addLegend":true,"legendPosition":"right","times":[],"addTimeMarker":false,"thresholdLine":{"show":false,"value":10,"width":1,"style":"full","color":"#34130C"},"labels":{},"dimensions":{"x":{"accessor":0,"format":{"id":"date","params":{"pattern":"YYYY-MM-DD HH:mm"}},"params":{"date":true,"interval":"PT12H","format":"YYYY-MM-DD HH:mm","bounds":{"min":"2020-03-27T10:33:25.001Z","max":"2020-04-26T10:33:25.001Z"}},"aggType":"date_histogram"},"y":[{"accessor":2,"format":{"id":"number"},"params":{},"aggType":"count"}],"series":[{"accessor":1,"format":{"id":"terms","params":{"id":"string","otherBucketLabel":"Other","missingBucketLabel":"Missing"}},"params":{},"aggType":"terms"}]}},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"date_histogram","schema":"segment","params":{"field":"timestamp","timeRange":{"from":"now-30d","to":"now"},"useNormalizedEsInterval":true,"interval":"auto","drop_partials":false,"min_doc_count":1,"extended_bounds":{}}},{"id":"3","enabled":true,"type":"terms","schema":"group","params":{"field":"errorCode","orderBy":"1","order":"desc","size":10,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - Event Source(Pie)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - Event Source(Pie)","type":"pie","params":{"type":"pie","addTooltip":true,"addLegend":true,"legendPosition":"right","isDonut":true,"labels":{"show":false,"values":true,"last_level":true,"truncate":100},"dimensions":{"metric":{"accessor":0,"format":{"id":"number"},"params":{},"aggType":"count"}}},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"terms","schema":"segment","params":{"field":"eventSource","orderBy":"1","order":"desc","size":10,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'CloudTrail - Event Source(Area)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - Event Source(Area)","type":"area","params":{"type":"area","grid":{"categoryLines":false},"categoryAxes":[{"id":"CategoryAxis-1","type":"category","position":"bottom","show":true,"style":{},"scale":{"type":"linear"},"labels":{"show":true,"filter":true,"truncate":100},"title":{}}],"valueAxes":[{"id":"ValueAxis-1","name":"LeftAxis-1","type":"value","position":"left","show":true,"style":{},"scale":{"type":"linear","mode":"normal"},"labels":{"show":true,"rotate":0,"filter":false,"truncate":100},"title":{"text":"Count"}}],"seriesParams":[{"show":"true","type":"area","mode":"stacked","data":{"label":"Count","id":"1"},"drawLinesBetweenPoints":true,"showCircles":true,"interpolate":"linear","valueAxis":"ValueAxis-1"}],"addTooltip":true,"addLegend":true,"legendPosition":"right","times":[],"addTimeMarker":false,"thresholdLine":{"show":false,"value":10,"width":1,"style":"full","color":"#34130C"},"labels":{},"dimensions":{"x":null,"y":[{"accessor":0,"format":{"id":"number"},"params":{},"aggType":"count"}]}},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"date_histogram","schema":"segment","params":{"field":"timestamp","timeRange":{"from":"now-30d","to":"now"},"useNormalizedEsInterval":true,"interval":"auto","drop_partials":false,"min_doc_count":1,"extended_bounds":{}}},{"id":"3","enabled":true,"type":"terms","schema":"group","params":{"field":"eventSource","orderBy":"1","order":"desc","size":10,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}}]}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'CloudTrail - TLS version', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - TLS version","type":"pie","aggs":[{"id":"1","enabled":true,"type":"count","params":{},"schema":"metric"},{"id":"2","enabled":true,"type":"terms","params":{"field":"tlsDetails.tlsVersion","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"},"schema":"segment"}],"params":{"type":"pie","addTooltip":true,"addLegend":true,"legendPosition":"right","isDonut":true,"labels":{"show":false,"values":true,"last_level":true,"truncate":100}}}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'CloudTrail - User Agent Browser', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"CloudTrail - User Agent Browser","type":"pie","aggs":[{"id":"1","enabled":true,"type":"count","params":{},"schema":"metric"},{"id":"2","enabled":true,"type":"terms","params":{"field":"user_agent.name","orderBy":"1","order":"desc","size":15,"otherBucket":true,"otherBucketLabel":"Other2","missingBucket":false,"missingBucketLabel":"Missing"},"schema":"segment"}],"params":{"type":"pie","addTooltip":true,"addLegend":true,"legendPosition":"right","isDonut":true,"labels":{"show":false,"values":true,"last_level":true,"truncate":100}}}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"language":"kuery","query":""},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'CloudTrail - Matched IoC', + uiStateJSON: '{"vis":{"params":{"sort":{"columnIndex":1,"direction":"desc"}}}}', + version: 1, + visState: + '{"title":"CloudTrail - Matched IoC","type":"table","aggs":[{"id":"1","enabled":true,"type":"count","params":{},"schema":"metric"},{"id":"2","enabled":true,"type":"terms","params":{"field":"threat.matched.providers","orderBy":"1","order":"desc","size":10,"otherBucket":true,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing","customLabel":"Providers"},"schema":"bucket"}],"params":{"perPage":10,"showPartialRows":false,"showMetricsAtAllLevels":false,"sort":{"columnIndex":null,"direction":null},"showTotal":false,"totalFunc":"sum","percentageCol":""}}', + }, + references: [ + { + id: '5f946950-7fc8-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, +]; + +export const cloudtrailIndexPatternConfig: IndexPatternSavedObjectCreationConfig = { + attributes: { + fields: + '[{"count":0,"name":"@id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"@log_s3bucket","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"@log_s3key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"@log_type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"@message","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false},{"count":0,"name":"timestamp","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"SchemaVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"_id","type":"string","esTypes":["_id"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":false},{"count":0,"name":"_index","type":"string","esTypes":["_index"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":false},{"count":0,"name":"_source","type":"_source","esTypes":["_source"],"scripted":false,"searchable":false,"aggregatable":false,"readFromDocValues":false},{"count":0,"name":"additionalEventData.AuthenticationMethod","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.CipherSuite","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.LoginTo","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.MFAUsed","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.MfaType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.MobileVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.RedirectTo","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.RenewedBy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.RoleRenewed","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.SSEApplied","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.SignatureVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.SwitchFrom","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.SwitchTo","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.accessPointName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.bucketName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.bytesTransferredIn","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.bytesTransferredOut","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.configRuleArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.configRuleInputParameters","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.configRuleName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.grantId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.lakeFormationPrincipal","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.managedRuleIdentifier","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.notificationJobType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.providerAction","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.service","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.versionId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.vpcEndpointId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"additionalEventData.x-amz-id-2","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"apiVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"awsRegion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"base.tags","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"cloud.account.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"cloud.instance.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"cloud.provider","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"cloud.region","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"container.image.tag","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"cwe_timestamp","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"cwl_timestamp","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"destination.as.number","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"destination.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"destination.geo.city_name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"destination.geo.country_iso_code","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"destination.geo.country_name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"destination.geo.location","type":"geo_point","esTypes":["geo_point"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"destination.ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"destination.nat.ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"destination.nat.port","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"destination.packets","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"destination.port","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"dns.answers.ttl","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"dns.header_flags","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"dns.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"dns.resolved_ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"ecs.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"error.code","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"error.message","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false},{"count":0,"name":"errorCode","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"errorMessage","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"event.action","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.category","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.code","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.created","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.duration","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.end","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"event.ingested","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.kind","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"event.module","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"event.outcome","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.risk_score","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.risk_score_norm","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.sequence","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"event.severity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.start","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.timezone","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"eventCategory","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"eventID","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"eventName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"eventSource","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"eventTime","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"eventType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"eventVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.accessed","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.attributes","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.created","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.ctime","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.gid","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.inode","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.mode","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.mtime","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.size","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.uid","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"group.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.disk.read.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.disk.write.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.hostname","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.mac","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.network.egress.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.network.egress.packets","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.network.ingress.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.network.ingress.packets","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.uptime","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"http.request.body.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"http.request.body.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"http.request.body.content.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"http.request.body.content"}}},{"count":10,"name":"http.request.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"http.response.body.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"http.response.body.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"http.response.body.content.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"http.response.body.content"}}},{"count":10,"name":"http.response.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"http.response.status_code","type":"number","esTypes":["short"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"http.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"insightDetails.eventName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"insightDetails.eventSource","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"insightDetails.insightContext.attributions.attribute","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"insightDetails.insightContext.attributions.baseline.average","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"insightDetails.insightContext.attributions.baseline.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"insightDetails.insightContext.attributions.insight.average","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"insightDetails.insightContext.attributions.insight.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"insightDetails.insightContext.statistics.baseline.average","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"insightDetails.insightContext.statistics.baselineDuration","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"insightDetails.insightContext.statistics.insight.average","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"insightDetails.insightContext.statistics.insightDuration","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"insightDetails.insightType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"insightDetails.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"interface.alias","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"interface.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"interface.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"log.level","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"log.origin.file.line","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"log.syslog.facility.code","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"log.syslog.priority","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"log.syslog.severity.code","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"managementEvent","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"network.bytes","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"network.community_id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"network.forwarded_ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"network.iana_number","type":"number","esTypes":["short"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"network.packets","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"observer.ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"observer.mac","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"observer.serial_number","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"observer.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"organization.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"os.family","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"os.full","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"os.full.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"os.full"}}},{"count":0,"name":"os.kernel","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"os.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"os.name.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"os.name"}}},{"count":0,"name":"os.platform","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"os.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"os.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.args","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.args_count","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.command_line","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.command_line.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"process.command_line"}}},{"count":0,"name":"process.entity_id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.exit_code","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.pgid","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"process.pid","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.ppid","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.start","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.thread.id","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.uptime","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"readOnly","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"recipientAccountId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"related.hash","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"related.hosts","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"related.ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"related.user","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestID","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.AccountScope","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.AssociateClientVpnTargetNetworkRequest.ClientToken","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.AssociateClientVpnTargetNetworkRequest.ClientVpnEndpointId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.AssociateClientVpnTargetNetworkRequest.SubnetId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.AssociateIamInstanceProfileRequest.IamInstanceProfile.Arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.AssociateIamInstanceProfileRequest.IamInstanceProfile.Name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.AssociateIamInstanceProfileRequest.InstanceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.AuthCode","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.AuthorizeClientVpnIngressRequest.AuthorizeAllGroups","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.AuthorizeClientVpnIngressRequest.ClientToken","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.AuthorizeClientVpnIngressRequest.ClientVpnEndpointId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.AuthorizeClientVpnIngressRequest.TargetNetworkCidr","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CodeVerifier","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CompleteMultipartUpload.Part.ETag","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CompleteMultipartUpload.Part.PartNumber","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CompleteMultipartUpload.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Context","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateAccessPointRequest.Bucket","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateAccessPointRequest.PublicAccessBlockConfiguration.BlockPublicAcls","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateAccessPointRequest.PublicAccessBlockConfiguration.BlockPublicPolicy","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateAccessPointRequest.PublicAccessBlockConfiguration.IgnorePublicAcls","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateAccessPointRequest.PublicAccessBlockConfiguration.RestrictPublicBuckets","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateAccessPointRequest.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateBucketConfiguration.LocationConstraint","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateBucketConfiguration.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.Authentication.MutualAuthentication.ClientRootCertificateChainArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.Authentication.Type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.Authentication.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.ClientCidrBlock","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.ClientConnectOptions.Enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.ClientLoginBannerOptions.Enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.ClientToken","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.ConnectionLogOptions.Enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.Description","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.DnsServers.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.DnsServers.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.SecurityGroupId.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.SecurityGroupId.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.SelfServicePortal","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.ServerCertificateArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.SessionTimeoutHours","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.SplitTunnel","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.TagSpecification.ResourceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.TagSpecification.Tag.Key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.TagSpecification.Tag.Value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.TagSpecification.Tag.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.TagSpecification.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.TransportProtocol","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.VpcId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnEndpointRequest.VpnPort","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnRouteRequest.ClientToken","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnRouteRequest.ClientVpnEndpointId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnRouteRequest.DestinationCidrBlock","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateClientVpnRouteRequest.TargetVpcSubnetId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.ClientToken","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.LaunchTemplateConfigs.LaunchTemplateSpecification.LaunchTemplateId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.LaunchTemplateConfigs.LaunchTemplateSpecification.Version","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.AvailabilityZone","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.InstanceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.Priority","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.SubnetId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.LaunchTemplateConfigs.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.OnDemandOptions.AllocationStrategy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.SpotOptions.AllocationStrategy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.TagSpecification.ResourceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.TagSpecification.Tag.Key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.TagSpecification.Tag.Value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.TagSpecification.Tag.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.TagSpecification.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.TargetCapacitySpecification.DefaultTargetCapacityType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.TargetCapacitySpecification.OnDemandTargetCapacity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.TargetCapacitySpecification.SpotTargetCapacity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.TargetCapacitySpecification.TotalTargetCapacity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFleetRequest.Type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFlowLogsRequest.DestinationOptions.FileFormat","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFlowLogsRequest.DestinationOptions.HiveCompatiblePartitions","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFlowLogsRequest.DestinationOptions.PerHourPartition","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFlowLogsRequest.LogDestination","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFlowLogsRequest.LogDestinationType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFlowLogsRequest.LogFormat","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFlowLogsRequest.MaxAggregationInterval","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFlowLogsRequest.ResourceId.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFlowLogsRequest.ResourceId.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFlowLogsRequest.ResourceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFlowLogsRequest.TagSpecification.ResourceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFlowLogsRequest.TagSpecification.Tag.Key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFlowLogsRequest.TagSpecification.Tag.Value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFlowLogsRequest.TagSpecification.Tag.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFlowLogsRequest.TagSpecification.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateFlowLogsRequest.TrafficType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateJobRequest.ClientRequestToken","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateJobRequest.ConfirmationRequired","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateJobRequest.Description","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateJobRequest.ManifestGenerator.S3JobManifestGenerator.EnableManifestOutput","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateJobRequest.ManifestGenerator.S3JobManifestGenerator.Filter.EligibleForReplication","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateJobRequest.ManifestGenerator.S3JobManifestGenerator.SourceBucket","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateJobRequest.Priority","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateJobRequest.Report.Enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateJobRequest.RoleArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateJobRequest.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.TagSpecification.Tag.Value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.TagSpecification.Tag.Value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateNatGatewayRequest.AllocationId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateNatGatewayRequest.ClientToken","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateNatGatewayRequest.SubnetId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateNatGatewayRequest.TagSpecification.ResourceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateNatGatewayRequest.TagSpecification.Tag.Key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateNatGatewayRequest.TagSpecification.Tag.Value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateNatGatewayRequest.TagSpecification.Tag.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateNatGatewayRequest.TagSpecification.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateNetworkInterfacePermissionRequest.AwsAccountId","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateNetworkInterfacePermissionRequest.NetworkInterfaceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateNetworkInterfacePermissionRequest.Permission","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateSnapshotsRequest.TagSpecification.Tag.Value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.CreateVpcEndpointRequest.TagSpecification.Tag.Value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DeleteFlowLogsRequest.FlowLogId.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DeleteFlowLogsRequest.FlowLogId.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeByoipCidrsRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeClientVpnAuthorizationRulesRequest.ClientVpnEndpointId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeClientVpnConnectionsRequest.ClientVpnEndpointId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeClientVpnEndpointsRequest.ClientVpnEndpointId.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeClientVpnEndpointsRequest.ClientVpnEndpointId.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeClientVpnRoutesRequest.ClientVpnEndpointId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeClientVpnTargetNetworksRequest.ClientVpnEndpointId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeEgressOnlyInternetGatewaysRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeFlowLogsRequest","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeFlowLogsRequest.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"requestParameters.DescribeFlowLogsRequest"}}},{"count":0,"name":"requestParameters.DescribeHostsRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeIamInstanceProfileAssociationsRequest.Filter.Name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeIamInstanceProfileAssociationsRequest.Filter.Value.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeIamInstanceProfileAssociationsRequest.Filter.Value.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeIamInstanceProfileAssociationsRequest.Filter.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeInstanceTypeOfferingsRequest.LocationType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeInstanceTypeOfferingsRequest.NextToken","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeInstanceTypesRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeInstanceTypesRequest.NextToken","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeIpamPoolsRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeIpv6PoolsRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateVersion.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateVersion.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeLaunchTemplatesRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeManagedPrefixListsRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeNatGatewaysRequest.Filter.Name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeNatGatewaysRequest.Filter.Value.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeNatGatewaysRequest.Filter.Value.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeNatGatewaysRequest.Filter.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeNatGatewaysRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeNatGatewaysRequest.NatGatewayId.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribePrefixListsRequest.PrefixListId.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribePrefixListsRequest.PrefixListId.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeReplaceRootVolumeTasksRequest.Filter.Name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeReplaceRootVolumeTasksRequest.Filter.Value.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeReplaceRootVolumeTasksRequest.Filter.Value.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeReplaceRootVolumeTasksRequest.Filter.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeReplaceRootVolumeTasksRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeSecurityGroupRulesRequest.Filter.Name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeSecurityGroupRulesRequest.Filter.Value.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeSecurityGroupRulesRequest.Filter.Value.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeSecurityGroupRulesRequest.Filter.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeSecurityGroupRulesRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeTransitGatewayAttachmentsRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeTransitGatewayPeeringAttachmentsRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeTransitGatewayRouteTablesRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeTransitGatewayVpcAttachmentsRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeTransitGatewaysRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeVolumesModificationsRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeVpcEndpointServiceConfigurationsRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeVpcEndpointServicesRequest.Filter.Name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeVpcEndpointServicesRequest.Filter.Value.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeVpcEndpointServicesRequest.Filter.Value.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeVpcEndpointServicesRequest.Filter.tag","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.DescribeVpcEndpointsRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Dimension","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.EnvironmentId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ExportClientVpnClientConfigurationRequest.ClientVpnEndpointId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filter.And.Dimensions.Key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filter.And.Dimensions.Values","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filter.And.Or.Dimensions.Key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filter.And.Or.Dimensions.Values","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filter.Dimensions.Key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filter.Dimensions.Values","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filter.Not.Or.Dimensions.Key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filter.Not.Or.Dimensions.Values","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filter.Or.Dimensions.Key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filter.Or.Dimensions.Values","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.FilterValues","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filters.GeneratorId.Comparison","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filters.GeneratorId.Value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filters.ProductName.Comparison","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filters.ProductName.Value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filters.RecordState.Comparison","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filters.RecordState.Value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filters.UpdatedAt.DateRange.Unit","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filters.UpdatedAt.DateRange.Value","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filters.WorkflowStatus.Comparison","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Filters.WorkflowStatus.Value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.GetManagedPrefixListEntriesRequest.MaxResults","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.GetManagedPrefixListEntriesRequest.PrefixListId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Granularity","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.GroupBy.Key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.GroupBy.Type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Host","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.InsightArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.InsightArns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.KeyBase","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.LookbackPeriodInDays","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.MaxResults","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Metric","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Metrics","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.NotificationConfiguration.QueueConfiguration.Id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.OnlyAssociated","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.PaymentOption","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.PredictionIntervalLevel","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.PublicAccessBlockConfiguration.BlockPublicAcls","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.PublicAccessBlockConfiguration.BlockPublicPolicy","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.PublicAccessBlockConfiguration.IgnorePublicAcls","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.PublicAccessBlockConfiguration.RestrictPublicBuckets","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.PublicAccessBlockConfiguration.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.PutAccessPointPolicyRequest.Policy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.PutAccessPointPolicyRequest.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.RedirectUri","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.RefreshToken","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ReplicationConfiguration.Role","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ReplicationConfiguration.Rule.DeleteMarkerReplication.Status","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ReplicationConfiguration.Rule.Destination.AccessControlTranslation.Owner","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ReplicationConfiguration.Rule.Destination.Account","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ReplicationConfiguration.Rule.Destination.Bucket","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ReplicationConfiguration.Rule.Filter","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ReplicationConfiguration.Rule.ID","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ReplicationConfiguration.Rule.Priority","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ReplicationConfiguration.Rule.Status","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ReplicationConfiguration.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ResourceArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.SavingsPlansType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ServerSideEncryptionConfiguration.Rule.ApplyServerSideEncryptionByDefault.SSEAlgorithm","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ServerSideEncryptionConfiguration.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Service","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ServiceSpecification.EC2Specification.OfferingClass","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.SortBy.Key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.SortBy.SortOrder","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.SortCriteria.Field","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.SortCriteria.SortOrder","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Tagging.TagSet.Tag.Key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.Tagging.TagSet.Tag.Value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.TermInYears","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.TimePeriod.End","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.TimePeriod.Start","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.VersioningConfiguration.Status","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.VersioningConfiguration.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.X-Amz-Algorithm","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.X-Amz-Date","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.X-Amz-Expires","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.X-Amz-SignedHeaders","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.aRN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.aWSServiceName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.acceptedMediaTypes","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.accessKeyId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.accessPolicies","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.accountAttributeNameSet.items.attributeName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.accountId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.accountIds","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.action","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.actionsEnabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.advancedOptions.override_main_response_version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.agentName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.agentStatus","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.agentVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.aggregateField","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.alarmActions","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.alarmName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.alarmNames","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.alarmTypes","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.aliasName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.allRegions","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.allocationIdsSet.items.allocationId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.amazonProvidedIpv6CidrBlock","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.analyzerArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.analyzerName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.anomalyDetectorTypes","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.architectures","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.assessmentRunName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.assessmentTemplateArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.associationFilterList.key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.associationFilterList.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.associationId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.associationStatus.additionalInfo","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.associationStatus.date","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.associationStatus.message","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.associationStatus.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.assumeRolePolicyDocument","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.attribute","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.attribute.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"requestParameters.attribute"}}},{"count":0,"name":"requestParameters.attributeName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.attributeValue","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.attributes.KmsDataKeyReusePeriodSeconds","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.attributes.KmsMasterKeyId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.attributes.MessageRetentionPeriod","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.attributes.RedrivePolicy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.attributes.VisibilityTimeout","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.authParameters","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.authParameters.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"requestParameters.authParameters"}}},{"count":0,"name":"requestParameters.autoScalingGroupName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.automationExecutionId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.availabilityZone","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.blockDeviceMapping.items.deviceName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.blockDeviceMapping.items.ebs.deleteOnTermination","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.blockDeviceMapping.items.ebs.encrypted","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.blockDeviceMapping.items.ebs.iops","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.blockDeviceMapping.items.ebs.kmsKeyId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.blockDeviceMapping.items.ebs.snapshotId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.blockDeviceMapping.items.ebs.throughput","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.blockDeviceMapping.items.ebs.volumeSize","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.blockDeviceMapping.items.ebs.volumeType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.bucket","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.bucketName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.bucketPolicy.Id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.bucketPolicy.Statement","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.bucketPolicy.Statement.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"requestParameters.bucketPolicy.Statement"}}},{"count":0,"name":"requestParameters.bucketPolicy.Version","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.bypassPolicyLockoutSafetyCheck","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.capabilities","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.category","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificate.address","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificate.bigEndian","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificate.capacity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificate.hb","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificate.isReadOnly","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificate.limit","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificate.mark","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificate.nativeByteOrder","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificate.offset","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificate.position","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificateArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificateChain.address","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificateChain.bigEndian","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificateChain.capacity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificateChain.hb","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificateChain.isReadOnly","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificateChain.limit","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificateChain.mark","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificateChain.nativeByteOrder","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificateChain.offset","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificateChain.position","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.certificateStatuses","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.changeSetName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.checkId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.checkIds","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.cidrBlock","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.clientToken","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.cluster","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.clusterConfig.dedicatedMasterType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.clusterConfig.instanceCount","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.clusterConfig.instanceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.clusterConfig.zoneAwarenessConfig.availabilityZoneCount","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.clusterStates","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.clusters","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.commandId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.comparisonOperator","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.complianceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.complianceTypes","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.computerName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.configRule.configRuleArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.configRule.configRuleId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.configRule.configRuleName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.configRule.configRuleState","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.configRule.createdBy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.configRule.description","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.configRule.inputParameters","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.configRule.scope.complianceResourceTypes","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.configRule.source.owner","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.configRule.source.sourceIdentifier","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.configRuleName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.configRuleNames","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.configuration.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false},{"count":0,"name":"requestParameters.configurationARN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.configurationAggregatorName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.configurationRecorderNames","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.conformancePackName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.conformancePackNames","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.connectionArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.constraints.encryptionContextEquals.aws:acm:arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.constraints.encryptionContextEquals.clientvpn:ap-east-1:arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.constraints.encryptionContextSubset.aws:ebs:id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.constraints.encryptionContextSubset.aws:pi:service","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.constraints.encryptionContextSubset.aws:rds:db-id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.constraints.encryptionContextSubset.domainARN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.constraints.encryptionContextSubset.service","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.containerOverrides.environment.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.content.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"requestParameters.content"}}},{"count":0,"name":"requestParameters.continuation-token","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.currentDeliveryStreamVersionId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.customerMasterKeySpec","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.dBClusterSnapshotIdentifier","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.dBSnapshotIdentifier","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.dashboardBody","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.dashboardName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.dashboardNames","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.databaseName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.datapointsToAlarm","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.deadLetterConfig.targetArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.definition","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.delimiter","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.deliveryStreamName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.deliveryStreamType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.descending","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.description","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.destinationAAD","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.destinationArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.destinationCidrBlock","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.destinationEncryptionAlgorithm","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.destinationEncryptionContext.aws:acm:arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.destinationEncryptionContext.aws:elasticloadbalancing:arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.destinationEncryptionContext.clientvpn:ap-east-1:arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.destinationId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.destinationKeyId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.detectorId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.disableApiStop","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.disableApiTermination","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.aliases.items","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.aliases.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.cacheBehaviors.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.callerReference","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.comment","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.customErrorResponses.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.allowedMethods.cachedMethods.items","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.allowedMethods.cachedMethods.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.allowedMethods.items","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.allowedMethods.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.compress","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.defaultTTL","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.forwardedValues.cookies.forward","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.forwardedValues.headers.items","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.forwardedValues.headers.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.forwardedValues.queryString","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.forwardedValues.queryStringCacheKeys.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.functionAssociations.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.lambdaFunctionAssociations.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.maxTTL","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.minTTL","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.realtimeLogConfigArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.smoothStreaming","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.targetOriginId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.trustedKeyGroups.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.trustedKeyGroups.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.trustedSigners.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.trustedSigners.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.defaultCacheBehavior.viewerProtocolPolicy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.httpVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.isIPV6Enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.logging.bucket","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.logging.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.logging.includeCookies","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.logging.prefix","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.originGroups.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.origins.items.connectionAttempts","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.origins.items.connectionTimeout","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.origins.items.customHeaders.items.headerName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.origins.items.customHeaders.items.headerValue","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.origins.items.customHeaders.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.origins.items.customOriginConfig.hTTPPort","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.origins.items.customOriginConfig.hTTPSPort","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.origins.items.customOriginConfig.originKeepaliveTimeout","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.origins.items.customOriginConfig.originProtocolPolicy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.origins.items.customOriginConfig.originReadTimeout","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.origins.items.customOriginConfig.originSslProtocols.items","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.origins.items.customOriginConfig.originSslProtocols.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.origins.items.domainName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.origins.items.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.origins.items.originAccessControlId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.origins.items.originPath","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.origins.items.originShield.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.origins.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.priceClass","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.restrictions.geoRestriction.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.restrictions.geoRestriction.restrictionType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.staging","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.viewerCertificate.aCMCertificateArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.viewerCertificate.certificate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.viewerCertificate.certificateSource","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.viewerCertificate.cloudFrontDefaultCertificate","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.viewerCertificate.minimumProtocolVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.viewerCertificate.sSLSupportMethod","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionConfig.webACLId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.distributionId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.documentName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.documentVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.domain","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.domainName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.domainNames","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.dryRun","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.durationSeconds","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ebsOptimized","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ebsOptimized.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"requestParameters.ebsOptimized"}}},{"count":0,"name":"requestParameters.enableDnsHostnames.value","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.encoding-type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.encryptionAlgorithm","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.encryptionContext.aws-crypto-public-key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.encryptionContext.aws:acm:arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.encryptionContext.aws:cloudfront:arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.encryptionContext.aws:cloudtrail:arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.encryptionContext.aws:ebs:id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.encryptionContext.aws:elasticloadbalancing:arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.encryptionContext.aws:lambda:FunctionArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.encryptionContext.aws:pi:service","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.encryptionContext.aws:rds:db-id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.encryptionContext.aws:rds:dbc-id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.encryptionContext.aws:s3:arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.encryptionContext.aws:sqs:arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.encryptionContext.clientvpn:ap-east-1:arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.encryptionContext.clientvpn:ap-northeast-1:arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.encryptionContext.domainARN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.encryptionContext.service","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.endPoints.kinesisStreamConfig.roleARN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.endPoints.kinesisStreamConfig.streamARN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.endPoints.streamType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.endTime","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.engineType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.engineVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.environmentVariablesOverride.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.environmentVariablesOverride.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.environmentVariablesOverride.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ephemeralStorage.size","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.evaluationPeriods","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.evaluations.annotation","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.evaluations.complianceResourceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.evaluations.complianceResourceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.evaluations.complianceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.evaluations.orderingTimestamp","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.eventBusName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.eventCategory","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.eventSourceArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.excludeAutoscalingAlarms","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.excludeManagedAlarms","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.executionArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.executionResult.executionDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.executionResult.executionSummary","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.executionResult.status","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.executionSummary.executionId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.executionSummary.executionTime","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.executionSummary.executionType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.expression","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationConfiguration.bucketARN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationConfiguration.bufferingHints.intervalInSeconds","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationConfiguration.bufferingHints.sizeInMBs","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationConfiguration.cloudWatchLoggingOptions.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationConfiguration.cloudWatchLoggingOptions.logGroupName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationConfiguration.cloudWatchLoggingOptions.logStreamName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationConfiguration.compressionFormat","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationConfiguration.dataFormatConversionConfiguration.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationConfiguration.encryptionConfiguration.noEncryptionConfig","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationConfiguration.prefix","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationConfiguration.processingConfiguration.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationConfiguration.roleARN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationConfiguration.s3BackupMode","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationUpdate.bucketARN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationUpdate.bufferingHints.intervalInSeconds","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationUpdate.bufferingHints.sizeInMBs","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationUpdate.cloudWatchLoggingOptions.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationUpdate.cloudWatchLoggingOptions.logGroupName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationUpdate.cloudWatchLoggingOptions.logStreamName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationUpdate.compressionFormat","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationUpdate.dataFormatConversionConfiguration.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationUpdate.encryptionConfiguration.noEncryptionConfig","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationUpdate.prefix","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationUpdate.processingConfiguration.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationUpdate.roleARN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.extendedS3DestinationUpdate.s3BackupMode","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.externalId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.fetch-owner","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.fields","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.fileSystemId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.filter","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.filter.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"requestParameters.filter"}}},{"count":0,"name":"requestParameters.filterBy.comparator","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.filterBy.key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.filterBy.values","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.filterSet.items.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.filterSet.items.valueSet.items.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.filters.key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.filters.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.filters.values","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.findingCriteria.criterion.archived.eq","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.findingCriteria.criterion.category.eq","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.findingCriteria.criterion.service.action.networkConnectionAction.localPortDetails.port.eq","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.findingCriteria.criterion.service.action.networkConnectionAction.remotePortDetails.port.eq","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.findingCriteria.criterion.service.archived.eq","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.findingCriteria.criterion.updatedAt.gte","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.findingCriteria.criterion.updatedAt.lt","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.findingIds","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.findingStatisticTypes","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.firewallArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.firewallName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.firewallPolicyArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.forAccount","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.force","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.fullyQualifiedArn.arnPrefix.account","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.fullyQualifiedArn.arnPrefix.partition","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.fullyQualifiedArn.arnPrefix.region","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.fullyQualifiedArn.relativeId.functionName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.functionArns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.functionName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.functionVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.gatewayId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.gitCloneDepthOverride","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.granteePrincipal","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.granularity","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.groupBy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.groupDescription","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.groupId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.groupName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.groupSet.items.groupId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.handler","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.hostedZoneId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.iPAddress","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.iamInstanceProfile","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.iamInstanceProfile.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"requestParameters.iamInstanceProfile"}}},{"count":0,"name":"requestParameters.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.identifier","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ids","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ifMatch","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ignored","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.imageId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.imageIds.imageDigest","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.imageIds.imageTag","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.imagesSet.items.imageId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.include","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.includeAllInstances","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.includeBlacklistedFeatures","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.includeCommunications","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.includeDeletedResources","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.includeDeprecatedFeaturesAccess","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.includeDeprecatedRuntimeDetails","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.includeExecutionData","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.includePreviewFeatures","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.includePublic","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.includePublicKey","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.includeResolvedCases","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.includeShadowTrails","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.includeShared","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.includeUnreservedConcurrentExecutionsMinimum","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.includes.hasDnsFqdn","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.includes.keyTypes","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.input","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.instanceArns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.instanceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.instanceIds","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.instanceMarketOptions.marketType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.instanceMarketOptions.spotOptions.spotInstanceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.instanceProfileName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.instanceTenancy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.instanceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.instanceType.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"requestParameters.instanceType"}}},{"count":0,"name":"requestParameters.instancesSet.item.instanceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.instancesSet.items.imageId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.instancesSet.items.instanceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.instancesSet.items.keyName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.instancesSet.items.maxCount","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.instancesSet.items.minCount","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.interactive","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.internetGatewayId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.internetGatewayIdSet.items.internetGatewayId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ipPermissions.items.fromPort","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ipPermissions.items.ipProtocol","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ipPermissions.items.ipRanges.items.cidrIp","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ipPermissions.items.toPort","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ipv6AddressCount","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.itemContentHash","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.items.captureTime","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.items.contentHash","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.items.details.DetailedText","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.items.details.DocumentName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.items.details.DocumentVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.items.details.PatchBaselineId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.items.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.items.schemaVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.items.severity","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.items.status","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.items.title","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.items.typeName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.itemsPerPage","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.jobId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.jobStatuses","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.key-marker","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.keyId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.keyName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.keySpec","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.keyUsage","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.kinesisStreamSourceConfiguration.kinesisStreamARN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.kinesisStreamSourceConfiguration.roleARN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.language","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.laterTime","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.launchTemplate.launchTemplateId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.launchTemplate.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.layerDigest","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.layerName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.layers","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.limit","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.list-type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.listenerArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.listenerArns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.loadBalancerArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.loadBalancerArns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.loadBalancerName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.loadBalancerNames","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.locale","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.logGroupName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.logGroupNamePrefix","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.logGroupNames","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.logStreamName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.logStreamNamePrefix","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.loggingConfiguration.destinations.cloudWatchLogsLogGroup.logGroupArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.loggingConfiguration.includeExecutionData","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.loggingConfiguration.level","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.lookupAttributes.attributeKey","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.lookupAttributes.attributeValue","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.caller","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.end","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.filter.map.expressions.myArrayList.map.expressions.myArrayList.map.comparison.map.attribute","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.filter.map.expressions.myArrayList.map.expressions.myArrayList.map.comparison.map.matchOption","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.filter.map.expressions.myArrayList.map.expressions.myArrayList.map.comparison.map.values.myArrayList","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.filter.map.expressions.myArrayList.map.expressions.myArrayList.map.expressions.myArrayList.map.comparison.map.attribute","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.filter.map.expressions.myArrayList.map.expressions.myArrayList.map.expressions.myArrayList.map.comparison.map.matchOption","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.filter.map.expressions.myArrayList.map.expressions.myArrayList.map.expressions.myArrayList.map.comparison.map.values.myArrayList","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.filter.map.expressions.myArrayList.map.expressions.myArrayList.map.logicalOperator","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.filter.map.expressions.myArrayList.map.logicalOperator","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.filter.map.logicalOperator","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.groupBy.myArrayList","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.limit","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.locale","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.month","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.payload.myArrayList","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.sort.map.order","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.start","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.timePeriod.map.endBillingPeriod.map.month","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.timePeriod.map.endBillingPeriod.map.year","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.timePeriod.map.startBillingPeriod.map.month","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.timePeriod.map.startBillingPeriod.map.year","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.timestamp","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.timestampInMilliseconds","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.usageType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.map.year","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.marker","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.masterRegion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.max-keys","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.maxConcurrency","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.maxErrors","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.maxItems","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.maxRecords","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.maxResults","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.memorySize","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.metricName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.metrics","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.mode","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.monitoring.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.multiRegion","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.namePrefix","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.names","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.namespace","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.natGatewayId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.networkInterfaceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.networkInterfaceIdSet.items.networkInterfaceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.networkInterfaceSet.items.associatePublicIpAddress","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.networkInterfaceSet.items.deviceIndex","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.networkInterfaceSet.items.groupSet.items.groupId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.nextToken","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.notificationFilter.domainName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.numberOfBytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.onFailure","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.onlyAssociated","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.onlyAttached","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.operations","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.orderBy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.origin","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.overrides.containerOverrides.environment.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ownersSet.items.owner","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.packageType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.pageSize","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.parameters.AutomationAssumeRole","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.parameters.ForceReplace","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.parameters.InstanceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.parameters.IsPolicyAttachAllowed","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.parameters.RoleName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.parameters.archiveType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.parameters.branchName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.parameters.callbackToken","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.parameters.commitId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.parameters.destinationBucket","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.parameters.destinationBucketKey","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.parameters.fullRepositoryId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.parameters.maxBytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.parameters.normalizeArchive","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.parameters.parameterKey","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.parameters.sSEAlgorithm","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.parameters.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.parentsOfAlarmName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partNumber","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInput.lastAccessTime","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInput.storageDescriptor.columns.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInput.storageDescriptor.columns.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInput.storageDescriptor.compressed","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInput.storageDescriptor.inputFormat","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInput.storageDescriptor.location","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInput.storageDescriptor.numberOfBuckets","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInput.storageDescriptor.outputFormat","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInput.storageDescriptor.parameters.averageRecordSize","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInput.storageDescriptor.parameters.classification","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInput.storageDescriptor.parameters.compressionType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInput.storageDescriptor.parameters.objectCount","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInput.storageDescriptor.parameters.recordCount","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInput.storageDescriptor.parameters.sizeKey","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInput.storageDescriptor.parameters.typeOfData","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInput.storageDescriptor.serdeInfo.parameters.serialization.format","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInput.storageDescriptor.serdeInfo.serializationLibrary","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInput.storageDescriptor.storedAsSubDirectories","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInput.values","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionInputList","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false},{"count":0,"name":"requestParameters.partitionValueList","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.partitionsToGet.values","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.passwordResetRequired","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.path","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.pathPrefix","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.pendingWindowInDays","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.performCheckOnly","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.period","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.permissionType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.physicalResourceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.platformName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.platformType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.platformVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.policy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.policyArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.policyDocument","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.policyName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.policyType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.prefix","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.principal","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.principal.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"requestParameters.principal"}}},{"count":0,"name":"requestParameters.principalArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.privateDnsNameOptions.enableResourceNameDnsAAAARecord","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.privateDnsNameOptions.enableResourceNameDnsARecord","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.privateDnsNameOptions.hostnameType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.privateKey","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.projectName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.publicIpsSet.items.publicIp","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.publicKeyMaterial","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.publish","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.qualifier","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.queryId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.queryString","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.queueUrl","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.recommendationPreferences.cpuVendorArchitectures","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.recordPointer","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.reference.Commit","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.reference.FullRepositoryId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.referenceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.registryId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.registryName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.repositoryName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.repositoryNames","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.requestContext.awsAccountId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.resolverRuleAssociationId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.resolverRuleId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.resource","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.resourceARN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.resourceArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.resourceArns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.resourceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.resourceIdList","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.resourceKeys.resourceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.resourceKeys.resourceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.resourceName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.resourceOwner","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.resourceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.resourceTypeFilters","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.resourcesPerPage","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.resourcesSet.items.resourceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.response-content-disposition","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.result","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.result.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"requestParameters.result"}}},{"count":0,"name":"requestParameters.resultToken","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.retiringPrincipal","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.reverseOrder","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.role","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.roleArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.roleName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.roleSessionName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.routeTableId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.routeTableIdSet.items.routeTableId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.rule","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ruleGroupArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.ruleGroupName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.runtime","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.s3Bucket","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.s3Key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.s3ObjectVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.samplingRate","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.scheduleExpression","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.scope","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.searchExpression.subExpressions.subExpressions.filters.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.secretId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.securityGroupIdSet.items.groupId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.service","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.serviceName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.serviceNamespace","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.serviceNamespaces","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.services","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.setAsDefault","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.severity","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.shardCount","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.sharedUsersSet.items.user","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.showSubscriptionDestinations","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.size","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.snapshotId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.snapshotSet.items.snapshotId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.sort","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.sort.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"requestParameters.sort"}}},{"count":0,"name":"requestParameters.sortBy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.sortBy.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"requestParameters.sortBy"}}},{"count":0,"name":"requestParameters.sortCriteria.attributeName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.sortCriteria.orderBy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.sortOrder","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.source","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.source.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"requestParameters.source"}}},{"count":0,"name":"requestParameters.sourceAAD","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.sourceArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.sourceEncryptionAlgorithm","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.sourceEncryptionContext.aws:acm:arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.sourceVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.stackName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.stackStatusFilter","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.startDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.startTime","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.stateMachineArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.statementId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.statistic","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.status","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.status.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"requestParameters.status"}}},{"count":0,"name":"requestParameters.streamARN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.streamCreationTimestamp","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.streamModeDetails.streamMode","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.streamName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.subnetId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.subnetSet.items.subnetId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.subnets","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.subnets.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"requestParameters.subnets"}}},{"count":0,"name":"requestParameters.tableInput.isRowFilteringEnabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.lastAccessTime","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.owner","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.parameters","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.parameters.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"requestParameters.tableInput.parameters"}}},{"count":0,"name":"requestParameters.tableInput.partitionKeys.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.partitionKeys.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.retention","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.columns.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.columns.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.compressed","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.inputFormat","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.location","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.numberOfBuckets","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.outputFormat","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.parameters.CrawlerSchemaDeserializerVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.parameters.CrawlerSchemaSerializerVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.parameters.UPDATED_BY_CRAWLER","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.parameters.averageRecordSize","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.parameters.classification","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.parameters.compressionType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.parameters.exclusions","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.parameters.objectCount","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.parameters.recordCount","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.parameters.sizeKey","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.parameters.typeOfData","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.serdeInfo.parameters.serialization.format","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.serdeInfo.serializationLibrary","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.storageDescriptor.storedAsSubDirectories","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableInput.tableType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tableName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tagSet.items.key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tagSet.items.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tagSpecificationSet.items.resourceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tagSpecificationSet.items.tags.key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tagSpecificationSet.items.tags.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tags.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tagsPerPage","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.target","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.target.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"requestParameters.target"}}},{"count":0,"name":"requestParameters.targetGroupArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.targetGroupArns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.targetKeyId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.targetParameterName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.targetVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.targets.arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.targets.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.targets.key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.targets.port","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.targets.values","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.taskDefinition","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.taskName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.template","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.templateBody","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.templateURL","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.testMode","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.threshold","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.timeRange","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.timeout","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.timeoutInMinutesOverride","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.timeoutSeconds","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.title","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.topicArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.tracingConfig.mode","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.trailName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.treatMissingData","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.typeName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.uploadId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.uploadType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.usageCriteria.accountIds","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.usageCriteria.dataSources","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.usageStatisticsType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.usePreviousTemplate","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.userName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.validatePolicyResourceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.version-id-marker","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.versionId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.versionNumber","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.volumeId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.volumeSet.items.volumeId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.vpc","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.vpcId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.vpcSet.items.vpcId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.workGroup","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.workspaceIds","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.x-amz-acl","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.x-amz-server-side-encryption","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.x-amz-server-side-encryption-aws-kms-key-id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.x-amz-server-side-encryption-context","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.x-amz-storage-class","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"requestParameters.x-amz-version-id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"resources.ARN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"resources.ARNPrefix","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"resources.accountId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"resources.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.AssociateClientVpnTargetNetworkResponse.associationId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.AssociateClientVpnTargetNetworkResponse.requestId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.AssociateClientVpnTargetNetworkResponse.status.code","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.AssociateClientVpnTargetNetworkResponse.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.associationId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.AssociateIamInstanceProfileResponse.requestId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.AssociateIamInstanceProfileResponse.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.AuthorizeClientVpnIngressResponse.requestId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.AuthorizeClientVpnIngressResponse.status.code","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.AuthorizeClientVpnIngressResponse.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CheckMfa","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.ConsoleLogin","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateClientVpnEndpointResponse.clientVpnEndpointId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateClientVpnEndpointResponse.dnsName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateClientVpnEndpointResponse.requestId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateClientVpnEndpointResponse.status.code","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateClientVpnEndpointResponse.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateClientVpnRouteResponse.requestId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateClientVpnRouteResponse.status.code","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateClientVpnRouteResponse.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateFleetResponse.fleetId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.launchTemplateSpecification.launchTemplateId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.launchTemplateSpecification.version","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.overrides.availabilityZone","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.overrides.instanceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.overrides.priority","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.overrides.subnetId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateFleetResponse.fleetInstanceSet.item.lifecycle","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateFleetResponse.requestId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateFleetResponse.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateFlowLogsResponse.clientToken","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateFlowLogsResponse.flowLogIdSet.item","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateFlowLogsResponse.requestId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateFlowLogsResponse.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateData.tagSpecificationSet.item.tagSet.item.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateNatGatewayResponse.clientToken","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateNatGatewayResponse.natGateway.connectivityType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateNatGatewayResponse.natGateway.createTime","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateNatGatewayResponse.natGateway.natGatewayAddressSet.item.allocationId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateNatGatewayResponse.natGateway.natGatewayId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateNatGatewayResponse.natGateway.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateNatGatewayResponse.natGateway.subnetId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateNatGatewayResponse.natGateway.tagSet.item.key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateNatGatewayResponse.natGateway.tagSet.item.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateNatGatewayResponse.natGateway.vpcId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateNatGatewayResponse.requestId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateNatGatewayResponse.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfacePermissionId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.permission","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.permissionState.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateNetworkInterfacePermissionResponse.requestId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateNetworkInterfacePermissionResponse.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateSnapshotsResponse.snapshotSet.item.tagSet.item.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.CreateVpcEndpointResponse.vpcEndpoint.tagSet.item.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.DeleteFlowLogsResponse.requestId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.DeleteFlowLogsResponse.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.EnvironmentId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.ExportClientVpnClientConfigurationResponse.clientConfiguration","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.ExportClientVpnClientConfigurationResponse.requestId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.ExportClientVpnClientConfigurationResponse.xmlns","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.RenewRole","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.SessionId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.StartScreenMessages.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.StartScreenMessages.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.StartScreenMessages.link.text","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.StartScreenMessages.link.url","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.StartScreenMessages.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.Status","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.StreamUrl","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.SwitchRole","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.TokenValue","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements._return","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.advancedOptions.override_main_response_version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.advancedOptions.rest.action.multi.allow_explicit_index","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.allocationId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.approximateNumberOfMessagesMoved","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.architectures","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.associationId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.associationState.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.assumedRoleUser.arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.assumedRoleUser.assumedRoleId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.automationExecutionId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.availabilityZones","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.artifacts.encryptionDisabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.artifacts.location","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.artifacts.overrideArtifactName","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.buildComplete","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.buildNumber","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.buildStatus","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.cache.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.currentPhase","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.encryptionKey","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.endTime","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.environment.computeType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.environment.environmentVariables.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.environment.environmentVariables.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.environment.environmentVariables.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.environment.image","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.environment.imagePullCredentialsType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.environment.privilegedMode","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.environment.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.initiator","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.logs.cloudWatchLogs.status","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.logs.cloudWatchLogsArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.logs.deepLink","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.logs.groupName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.logs.s3Logs.encryptionDisabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.logs.s3Logs.status","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.logs.streamName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.phases.contexts.message","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.phases.contexts.statusCode","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.phases.durationInSeconds","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.phases.endTime","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.phases.phaseStatus","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.phases.phaseType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.phases.startTime","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.projectName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.queuedTimeoutInMinutes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.resolvedSourceVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.serviceRole","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.source.buildspec","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.source.gitCloneDepth","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.source.gitSubmodulesConfig.fetchSubmodules","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.source.insecureSsl","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.source.location","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.source.reportBuildStatus","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.source.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.sourceVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.startTime","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.build.timeoutInMinutes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.certificateArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.codeSha256","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.codeSize","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.cloudWatchOutputConfig.cloudWatchOutputEnabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.commandId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.completedCount","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.deliveryTimedOutCount","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.documentName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.documentVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.errorCount","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.expiresAfter","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.interactive","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.maxConcurrency","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.maxErrors","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.outputS3Region","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.parameters","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.requestedDateTime","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.status","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.statusDetails","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.targetCount","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.targets.key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.targets.values","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.command.timeoutSeconds","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.conformancePackArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.createTime","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.createdDate","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.credentials.accessKeyId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.credentials.expiration","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.credentials.sessionToken","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.dBClusterSnapshotAttributes.attributeName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.dBClusterSnapshotIdentifier","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.dBSnapshotAttributes.attributeName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.dBSnapshotIdentifier","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.dBSubnetGroup","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.dBSubnetGroup.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"responseElements.dBSubnetGroup"}}},{"count":0,"name":"responseElements.dashboardEntries.dashboardArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.dashboardEntries.dashboardName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.dashboardEntries.lastModified","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.dashboardEntries.size","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.data","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.deadLetterConfig.targetArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.deletionDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.deliveryStreamARN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.description","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.description.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"responseElements.description"}}},{"count":0,"name":"responseElements.destinationArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.aRN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.activeTrustedKeyGroups.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.activeTrustedKeyGroups.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.activeTrustedSigners.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.activeTrustedSigners.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.aliasICPRecordals.cNAME","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.aliasICPRecordals.iCPRecordalStatus","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.aliases.items","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.aliases.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.cacheBehaviors.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.callerReference","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.comment","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.customErrorResponses.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.allowedMethods.cachedMethods.items","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.allowedMethods.cachedMethods.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.allowedMethods.items","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.allowedMethods.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.compress","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.defaultTTL","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.forwardedValues.cookies.forward","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.forwardedValues.headers.items","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.forwardedValues.headers.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.forwardedValues.queryString","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.forwardedValues.queryStringCacheKeys.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.functionAssociations.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.lambdaFunctionAssociations.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.maxTTL","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.minTTL","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.realtimeLogConfigArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.smoothStreaming","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.targetOriginId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.trustedKeyGroups.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.trustedKeyGroups.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.trustedSigners.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.trustedSigners.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.defaultCacheBehavior.viewerProtocolPolicy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.httpVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.isIPV6Enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.logging.bucket","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.logging.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.logging.includeCookies","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.logging.prefix","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.originGroups.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.origins.items.connectionAttempts","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.origins.items.connectionTimeout","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.origins.items.customHeaders.items.headerName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.origins.items.customHeaders.items.headerValue","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.origins.items.customHeaders.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.origins.items.customOriginConfig.hTTPPort","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.origins.items.customOriginConfig.hTTPSPort","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.origins.items.customOriginConfig.originKeepaliveTimeout","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.origins.items.customOriginConfig.originProtocolPolicy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.origins.items.customOriginConfig.originReadTimeout","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.origins.items.customOriginConfig.originSslProtocols.items","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.origins.items.customOriginConfig.originSslProtocols.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.origins.items.domainName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.origins.items.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.origins.items.originAccessControlId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.origins.items.originPath","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.origins.items.originShield.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.origins.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.priceClass","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.restrictions.geoRestriction.quantity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.restrictions.geoRestriction.restrictionType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.staging","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.viewerCertificate.aCMCertificateArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.viewerCertificate.certificate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.viewerCertificate.certificateSource","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.viewerCertificate.cloudFrontDefaultCertificate","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.viewerCertificate.minimumProtocolVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.viewerCertificate.sSLSupportMethod","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.distributionConfig.webACLId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.domainName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.inProgressInvalidationBatches","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.lastModifiedTime","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.distribution.status","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domain","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.accessPolicies.options","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.accessPolicies.status.creationDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.accessPolicies.status.pendingDeletion","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.accessPolicies.status.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.accessPolicies.status.updateDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.accessPolicies.status.updateVersion","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.advancedOptions.options.override_main_response_version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.advancedOptions.status.creationDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.advancedOptions.status.pendingDeletion","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.advancedOptions.status.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.advancedOptions.status.updateDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.advancedOptions.status.updateVersion","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.advancedSecurityOptions.options.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.advancedSecurityOptions.options.internalUserDatabaseEnabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.advancedSecurityOptions.status.creationDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.advancedSecurityOptions.status.pendingDeletion","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.advancedSecurityOptions.status.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.advancedSecurityOptions.status.updateDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.advancedSecurityOptions.status.updateVersion","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.autoTuneOptions.options.desiredState","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.autoTuneOptions.options.maintenanceSchedules.cronExpressionForRecurrence","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.autoTuneOptions.options.maintenanceSchedules.duration.unit","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.autoTuneOptions.options.maintenanceSchedules.duration.value","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.autoTuneOptions.options.maintenanceSchedules.startAt","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.autoTuneOptions.options.rollbackOnDisable","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.autoTuneOptions.status.creationDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.autoTuneOptions.status.pendingDeletion","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.autoTuneOptions.status.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.autoTuneOptions.status.updateDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.autoTuneOptions.status.updateVersion","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.changeProgressDetails.changeId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.clusterConfig.options.coldStorageOptions.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.clusterConfig.options.dedicatedMasterCount","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.clusterConfig.options.dedicatedMasterEnabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.clusterConfig.options.dedicatedMasterType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.clusterConfig.options.instanceCount","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.clusterConfig.options.instanceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.clusterConfig.options.warmCount","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.clusterConfig.options.warmEnabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.clusterConfig.options.warmStorage","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.clusterConfig.options.warmType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.clusterConfig.options.zoneAwarenessConfig.availabilityZoneCount","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.clusterConfig.options.zoneAwarenessEnabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.clusterConfig.status.creationDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.clusterConfig.status.pendingDeletion","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.clusterConfig.status.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.clusterConfig.status.updateDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.clusterConfig.status.updateVersion","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.cognitoOptions.options.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.cognitoOptions.status.creationDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.cognitoOptions.status.pendingDeletion","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.cognitoOptions.status.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.cognitoOptions.status.updateDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.cognitoOptions.status.updateVersion","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.domainEndpointOptions.options.customEndpointEnabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.domainEndpointOptions.options.enforceHTTPS","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.domainEndpointOptions.options.tLSSecurityPolicy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.domainEndpointOptions.status.creationDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.domainEndpointOptions.status.pendingDeletion","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.domainEndpointOptions.status.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.domainEndpointOptions.status.updateDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.domainEndpointOptions.status.updateVersion","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.eBSOptions.options.eBSEnabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.eBSOptions.options.iops","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.eBSOptions.options.throughput","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.eBSOptions.options.volumeSize","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.eBSOptions.options.volumeType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.eBSOptions.status.creationDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.eBSOptions.status.pendingDeletion","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.eBSOptions.status.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.eBSOptions.status.updateDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.eBSOptions.status.updateVersion","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.encryptionAtRestOptions.options.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.encryptionAtRestOptions.options.kmsKeyId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.encryptionAtRestOptions.status.creationDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.encryptionAtRestOptions.status.pendingDeletion","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.encryptionAtRestOptions.status.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.encryptionAtRestOptions.status.updateDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.encryptionAtRestOptions.status.updateVersion","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.engineVersion.options","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.engineVersion.status.creationDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.engineVersion.status.pendingDeletion","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.engineVersion.status.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.engineVersion.status.updateDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.engineVersion.status.updateVersion","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.logPublishingOptions.options.AUDIT_LOGS.cloudWatchLogsLogGroupArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.logPublishingOptions.options.AUDIT_LOGS.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.logPublishingOptions.options.ES_APPLICATION_LOGS.cloudWatchLogsLogGroupArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.logPublishingOptions.options.ES_APPLICATION_LOGS.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.logPublishingOptions.options.INDEX_SLOW_LOGS.cloudWatchLogsLogGroupArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.logPublishingOptions.options.INDEX_SLOW_LOGS.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.logPublishingOptions.options.SEARCH_SLOW_LOGS.cloudWatchLogsLogGroupArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.logPublishingOptions.options.SEARCH_SLOW_LOGS.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.logPublishingOptions.status.creationDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.logPublishingOptions.status.pendingDeletion","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.logPublishingOptions.status.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.logPublishingOptions.status.updateDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.logPublishingOptions.status.updateVersion","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.nodeToNodeEncryptionOptions.options.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.nodeToNodeEncryptionOptions.status.creationDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.nodeToNodeEncryptionOptions.status.pendingDeletion","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.nodeToNodeEncryptionOptions.status.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.nodeToNodeEncryptionOptions.status.updateDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.nodeToNodeEncryptionOptions.status.updateVersion","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.snapshotOptions.options.automatedSnapshotStartHour","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.snapshotOptions.status.creationDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.snapshotOptions.status.pendingDeletion","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.snapshotOptions.status.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.snapshotOptions.status.updateDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.snapshotOptions.status.updateVersion","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.vPCOptions.status.creationDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.vPCOptions.status.pendingDeletion","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.vPCOptions.status.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.vPCOptions.status.updateDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainConfig.vPCOptions.status.updateVersion","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.domainName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.eTag","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.encrypted","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.endpoint","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.endpoint.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"responseElements.endpoint"}}},{"count":0,"name":"responseElements.ephemeralStorage.size","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.errors.partitionValues","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.executionArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.failedEntryCount","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.functionArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.functionName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.grantId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.groupId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.handler","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.imageId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instanceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.amiLaunchIndex","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.architecture","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.capacityReservationSpecification.capacityReservationPreference","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.clientToken","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.cpuOptions.coreCount","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.cpuOptions.threadsPerCore","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.currentState.code","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.currentState.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.ebsOptimized","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.enaSupport","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.enclaveOptions.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.groupSet.items.groupId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.groupSet.items.groupName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.hypervisor","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.iamInstanceProfile.arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.iamInstanceProfile.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.imageId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.instanceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.instanceLifecycle","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.instanceState.code","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.instanceState.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.instanceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.keyName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.launchTime","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.maintenanceOptions.autoRecovery","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.metadataOptions.httpEndpoint","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.metadataOptions.httpProtocolIpv4","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.metadataOptions.httpProtocolIpv6","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.metadataOptions.httpPutResponseHopLimit","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.metadataOptions.httpTokens","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.metadataOptions.instanceMetadataTags","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.metadataOptions.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.monitoring.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.attachment.attachTime","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.attachment.attachmentId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.attachment.deleteOnTermination","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.attachment.deviceIndex","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.attachment.networkCardIndex","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.attachment.status","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.groupSet.items.groupId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.groupSet.items.groupName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.interfaceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.macAddress","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.networkInterfaceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.ownerId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.privateDnsName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.privateIpAddress","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.privateIpAddressesSet.item.primary","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.privateIpAddressesSet.item.privateDnsName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.privateIpAddressesSet.item.privateIpAddress","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.sourceDestCheck","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.status","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.subnetId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.networkInterfaceSet.items.vpcId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.placement.availabilityZone","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.placement.tenancy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.platform","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.previousState.code","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.previousState.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.privateDnsName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.privateDnsNameOptions.enableResourceNameDnsAAAARecord","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.privateDnsNameOptions.enableResourceNameDnsARecord","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.privateDnsNameOptions.hostnameType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.privateIpAddress","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.rootDeviceName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.rootDeviceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.sourceDestCheck","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.spotInstanceRequestId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.stateReason.code","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.stateReason.message","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.subnetId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.tagSet.items.key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.tagSet.items.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.virtualizationType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.instancesSet.items.vpcId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.internetGateway.internetGatewayId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.internetGateway.ownerId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.internetGateway.tagSet.items.key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.internetGateway.tagSet.items.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.isElasticsearchDomain","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.isOpenSearchDomain","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.isTruncated","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.keyFingerprint","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.keyId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.keyMetadata.aWSAccountId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.keyMetadata.arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.keyMetadata.creationDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.keyMetadata.customerMasterKeySpec","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.keyMetadata.enabled","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.keyMetadata.encryptionAlgorithms","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.keyMetadata.keyId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.keyMetadata.keyManager","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.keyMetadata.keySpec","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.keyMetadata.keyState","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.keyMetadata.keyUsage","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.keyMetadata.multiRegion","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.keyMetadata.origin","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.keyName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.keyPairId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.keyState","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.lastEvaluatedAt","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.lastModified","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.lastUpdateStatus","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.lastUpdateStatusReason","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.lastUpdateStatusReasonCode","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.lastUpdatedDate","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.layers.arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.layers.codeSize","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.layers.uncompressedCodeSize","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.lifecyclePolicyText","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.loginProfile.createDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.loginProfile.passwordResetRequired","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.loginProfile.userName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.memorySize","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.multiAZ","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkBorderGroup","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.availabilityZone","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.description","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.groupSet.items.groupId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.groupSet.items.groupName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.interfaceType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.macAddress","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.networkInterfaceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.ownerId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.privateDnsName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.privateIpAddress","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.privateIpAddressesSet.item.primary","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.privateIpAddressesSet.item.privateDnsName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.privateIpAddressesSet.item.privateIpAddress","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.requesterId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.requesterManaged","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.sourceDestCheck","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.status","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.subnetId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.tagSet.items.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.networkInterface.vpcId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.nextToken","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.notificationFilter.domainName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.notifications.description","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.notifications.domains","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.notifications.eventName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.notifications.mergedNotification","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.notifications.notificationId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.notifications.notificationMetadataMap.automatedUpdateDate","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.notifications.notificationMetadataMap.event","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.notifications.notificationMetadataMap.severity","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.notifications.notificationMetadataMap.status","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.notifications.status","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.notifications.time","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.ownerId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.packageType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.packedPolicySize","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.pendingWindowInDays","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.performCheckOnly","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.policy.arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.policy.attachmentCount","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.policy.createDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.policy.defaultVersionId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.policy.isAttachable","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.policy.path","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.policy.policyId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.policy.policyName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.policy.updateDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.policy.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.policy.value.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"responseElements.policy.value"}}},{"count":0,"name":"responseElements.policyVersion.createDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.policyVersion.document","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.policyVersion.isDefaultVersion","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.policyVersion.versionId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.product","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.publicIp","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.publicIpv4Pool","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.queryId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.realtimeLogConfig.aRN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.realtimeLogConfig.endPoints.kinesisStreamConfig.roleARN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.realtimeLogConfig.endPoints.kinesisStreamConfig.streamARN","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.realtimeLogConfig.endPoints.streamType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.realtimeLogConfig.fields","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.realtimeLogConfig.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.realtimeLogConfig.samplingRate","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.registryId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.repositoryName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.requestId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.requesterId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.reservationId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.responseParameters.method.response.header.Access-Control-Allow-Headers","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.responseParameters.method.response.header.Access-Control-Allow-Methods","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.responseParameters.method.response.header.Access-Control-Allow-Origin","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.revisionId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.role","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.role.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"responseElements.role"}}},{"count":0,"name":"responseElements.routeTable.ownerId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.routeTable.routeSet.items.destinationCidrBlock","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.routeTable.routeSet.items.gatewayId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.routeTable.routeSet.items.origin","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.routeTable.routeSet.items.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.routeTable.routeTableId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.routeTable.tagSet.items.key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.routeTable.tagSet.items.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.routeTable.vpcId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.ruleArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.runtime","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.securityGroupRuleSet.items.cidrIpv4","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.securityGroupRuleSet.items.fromPort","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.securityGroupRuleSet.items.groupId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.securityGroupRuleSet.items.groupOwnerId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.securityGroupRuleSet.items.ipProtocol","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.securityGroupRuleSet.items.isEgress","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.securityGroupRuleSet.items.securityGroupRuleId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.securityGroupRuleSet.items.toPort","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.snapshotDownloadUrl","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.snapshotId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.sourceArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.stackId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.startDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.startTime","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.stateReason","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.stateReasonCode","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.statement","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.status.status","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnet.assignIpv6AddressOnCreation","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnet.availabilityZone","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnet.availabilityZoneId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnet.availableIpAddressCount","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnet.cidrBlock","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnet.defaultForAz","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnet.enableDns64","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnet.ipv6Native","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnet.mapPublicIpOnLaunch","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnet.ownerId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnet.privateDnsNameOptionsOnLaunch.enableResourceNameDnsAAAARecord","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnet.privateDnsNameOptionsOnLaunch.enableResourceNameDnsARecord","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnet.privateDnsNameOptionsOnLaunch.hostnameType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnet.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnet.subnetArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnet.subnetId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnet.tagSet.items.key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnet.tagSet.items.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnet.vpcId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnets","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.subnets.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"responseElements.subnets"}}},{"count":0,"name":"responseElements.success","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.targetVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.taskName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.tasks.overrides.containerOverrides.environment.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.timeout","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.tracingConfig.mode","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.updateDate","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.upgradeId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.volumeId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.volumeSize","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.vpc.cidrBlock","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.vpc.cidrBlockAssociationSet.items.associationId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.vpc.cidrBlockAssociationSet.items.cidrBlock","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.vpc.cidrBlockAssociationSet.items.cidrBlockState.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.vpc.dhcpOptionsId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.vpc.instanceTenancy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.vpc.isDefault","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.vpc.ownerId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.vpc.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.vpc.tagSet.items.key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.vpc.tagSet.items.value","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.vpc.vpcId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.workspaces.bundleId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.workspaces.computerName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.workspaces.directoryId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.workspaces.ipAddress","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.workspaces.state","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.workspaces.subnetId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.workspaces.userName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.workspaces.userRealm","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.workspaces.workspaceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.workspaces.workspaceProperties.computeTypeName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.workspaces.workspaceProperties.recycleMode","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.workspaces.workspaceProperties.rootVolumeSizeGib","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.workspaces.workspaceProperties.runningMode","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.workspaces.workspaceProperties.runningModeAutoStopTimeoutInMinutes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.workspaces.workspaceProperties.userVolumeSizeGib","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.workspacesConnectionStatus.connectionState","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.workspacesConnectionStatus.connectionStateCheckTimestamp","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.workspacesConnectionStatus.lastKnownUserConnectionTimestamp","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.workspacesConnectionStatus.workspaceId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.x-amz-delete-marker","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.x-amz-expiration","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.x-amz-server-side-encryption","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.x-amz-server-side-encryption-aws-kms-key-id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.x-amz-server-side-encryption-context","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.x-amz-storage-class","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"responseElements.x-amz-version-id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"rule.author","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"rule.category","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"rule.description","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"rule.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"rule.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"rule.uuid","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"rule.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"service.ephemeral_id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"service.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"service.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.eventRequestDetails","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.eventRequestDetails.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"serviceEventDetails.eventRequestDetails"}}},{"count":0,"name":"serviceEventDetails.failureCodes","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.instanceIdSet","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.jobArn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.jobEventId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.jobId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.keyId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.lifecycleEventPolicy.lastEvaluatedAt","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.lifecycleEventPolicy.lifecycleEventRules.action","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.lifecycleEventPolicy.lifecycleEventRules.description","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.lifecycleEventPolicy.lifecycleEventRules.lifecycleEventSelection.countNumber","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.lifecycleEventPolicy.lifecycleEventRules.lifecycleEventSelection.countType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.lifecycleEventPolicy.lifecycleEventRules.lifecycleEventSelection.tagStatus","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.lifecycleEventPolicy.lifecycleEventRules.rulePriority","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.lifecycleEventPolicy.policyId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.lifecycleEventPolicy.policyVersion","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.permissions.ClientMount","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.permissions.ClientRootAccess","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.permissions.ClientWrite","type":"boolean","esTypes":["boolean"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.repositoryName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.snapshotId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.sourceIpAddress","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.status","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"serviceEventDetails.statusChangeReason","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"sessionCredentialFromConsole","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"sharedEventID","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":1,"name":"source.address","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"source.as.number","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"source.as.organization.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"source.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"source.geo.city_name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"source.geo.country_iso_code","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"source.geo.country_name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"source.geo.location","type":"geo_point","esTypes":["geo_point"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"source.ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"source.nat.ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"source.nat.port","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"source.packets","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"source.port","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"sourceIPAddress","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"span.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"threat.enrichments.indicator.confidence","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.description","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.email.address","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.first_seen","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.last_seen","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.marking.tlp","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.modified_at","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.port","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.provider","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.reference","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.scanner_stats","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.sightings","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.matched.atomic","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.matched.field","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.matched.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.matched.index","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.matched.occurred","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.matched.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":10,"name":"threat.matched.indicators","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"threat.matched.names","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"threat.matched.providers","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"threat.matched.types","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"tlsDetails.cipherSuite","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"tlsDetails.clientProvidedHostHeader","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"tlsDetails.tlsVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"trace.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"transaction.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"url.full","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"url.full.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"url.full"}}},{"count":0,"name":"url.original","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"url.original.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"url.original"}}},{"count":10,"name":"url.port","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"user.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"user.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user.roles","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"userAgent","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"userIdentity.accessKeyId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"userIdentity.accountId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"userIdentity.arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"userIdentity.invokedBy","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"userIdentity.principalId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"userIdentity.sessionContext.attributes.creationDate","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"userIdentity.sessionContext.attributes.mfaAuthenticated","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"userIdentity.sessionContext.ec2RoleDelivery","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"userIdentity.sessionContext.sessionIssuer.accountId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"userIdentity.sessionContext.sessionIssuer.arn","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"userIdentity.sessionContext.sessionIssuer.principalId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"userIdentity.sessionContext.sessionIssuer.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"userIdentity.sessionContext.sessionIssuer.userName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"userIdentity.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"userIdentity.userName","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user_agent.device.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"user_agent.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"user_agent.original","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user_agent.original.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"user_agent.original"}}},{"count":0,"name":"user_agent.os.family","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user_agent.os.family.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"user_agent.os.family"}}},{"count":0,"name":"user_agent.os.full","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user_agent.os.kernel","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user_agent.os.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user_agent.os.name.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"user_agent.os.name"}}},{"count":0,"name":"user_agent.os.platform","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user_agent.os.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user_agent.os.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user_agent.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vlan.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vpcEndpointId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.category","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.classification","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.description","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.description.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"vulnerability.description"}}},{"count":0,"name":"vulnerability.enumeration","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.reference","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.report_id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.scanner.vendor","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.score.base","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.score.environmental","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.score.temporal","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.score.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.severity","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true}]', + timeFieldName: 'timestamp', + title: 'log-aws-cloudtrail-*', + }, + id: undefined, + migrationVersion: undefined, + references: [], + type: 'index-pattern', +}; diff --git a/public/store/config/savedObjects/s3.ts b/public/store/config/savedObjects/s3.ts new file mode 100644 index 000000000..993fa11b9 --- /dev/null +++ b/public/store/config/savedObjects/s3.ts @@ -0,0 +1,477 @@ +/* + * Copyright OpenSearch Contributors + * SPDX-License-Identifier: Apache-2.0 + */ + +import { + DashboardSavedObjectCreationConfig, + IndexPatternSavedObjectCreationConfig, + VisualizationSavedObjectCreationConfig, +} from '../../../../types'; + +export const s3DashboardConfig: DashboardSavedObjectCreationConfig = { + attributes: { + description: '', + hits: 0, + kibanaSavedObjectMeta: { + searchSourceJSON: '{"query":{"language":"kuery","query":""},"filter":[]}', + }, + optionsJSON: '{"hidePanelTitles":false,"useMargins":true}', + panelsJSON: + '[{"version":"7.10.2","gridData":{"x":0,"y":0,"w":24,"h":9,"i":"ae6d8495-1571-4382-bce4-6202ee506560"},"panelIndex":"ae6d8495-1571-4382-bce4-6202ee506560","embeddableConfig":{},"panelRefName":"panel_0"},{"version":"7.10.2","gridData":{"x":24,"y":0,"w":24,"h":9,"i":"caa7531f-205d-4600-84cb-df20aa673895"},"panelIndex":"caa7531f-205d-4600-84cb-df20aa673895","embeddableConfig":{},"panelRefName":"panel_1"},{"version":"7.10.2","gridData":{"x":0,"y":9,"w":38,"h":15,"i":"d0e725c3-a050-4c44-b2ad-d65f3255d8b3"},"panelIndex":"d0e725c3-a050-4c44-b2ad-d65f3255d8b3","embeddableConfig":{"mapZoom":2,"mapCenter":null},"panelRefName":"panel_2"},{"version":"7.10.2","gridData":{"x":38,"y":9,"w":10,"h":6,"i":"d946ce42-057a-445c-8073-447c4b04b467"},"panelIndex":"d946ce42-057a-445c-8073-447c4b04b467","embeddableConfig":{},"panelRefName":"panel_3"},{"version":"7.10.2","gridData":{"x":38,"y":15,"w":10,"h":9,"i":"396871d4-cfa9-4309-be36-7db714c899d8"},"panelIndex":"396871d4-cfa9-4309-be36-7db714c899d8","embeddableConfig":{},"panelRefName":"panel_4"},{"version":"7.10.2","gridData":{"x":0,"y":24,"w":38,"h":18,"i":"d10b2fd3-0036-46e7-a9d9-3dc29f6ebda7"},"panelIndex":"d10b2fd3-0036-46e7-a9d9-3dc29f6ebda7","embeddableConfig":{},"panelRefName":"panel_5"},{"version":"7.10.2","gridData":{"x":38,"y":24,"w":10,"h":9,"i":"7e093c31-a0a6-4244-94ab-2f5b33876929"},"panelIndex":"7e093c31-a0a6-4244-94ab-2f5b33876929","embeddableConfig":{},"panelRefName":"panel_6"},{"version":"7.10.2","gridData":{"x":38,"y":33,"w":10,"h":9,"i":"324faff3-8267-4ba5-8c61-eea5856e5ae8"},"panelIndex":"324faff3-8267-4ba5-8c61-eea5856e5ae8","embeddableConfig":{},"panelRefName":"panel_7"},{"version":"7.10.2","gridData":{"x":0,"y":42,"w":16,"h":10,"i":"07e5f43d-b03f-408a-a016-514cea2fece3"},"panelIndex":"07e5f43d-b03f-408a-a016-514cea2fece3","embeddableConfig":{},"panelRefName":"panel_8"},{"version":"7.10.2","gridData":{"x":16,"y":42,"w":32,"h":10,"i":"0e6ec458-758c-418c-8be4-c117280593f7"},"panelIndex":"0e6ec458-758c-418c-8be4-c117280593f7","embeddableConfig":{},"panelRefName":"panel_9"},{"version":"7.10.2","gridData":{"x":0,"y":52,"w":16,"h":10,"i":"819cb43c-dc15-4949-b6d5-ec9e171afc2a"},"panelIndex":"819cb43c-dc15-4949-b6d5-ec9e171afc2a","embeddableConfig":{},"panelRefName":"panel_10"},{"version":"7.10.2","gridData":{"x":16,"y":52,"w":32,"h":10,"i":"952abf40-cbfc-4120-8fbf-e37ac5f7c546"},"panelIndex":"952abf40-cbfc-4120-8fbf-e37ac5f7c546","embeddableConfig":{},"panelRefName":"panel_11"},{"version":"7.10.2","gridData":{"x":0,"y":62,"w":24,"h":12,"i":"a577dda6-7089-49b7-8d38-f0183704859b"},"panelIndex":"a577dda6-7089-49b7-8d38-f0183704859b","embeddableConfig":{},"panelRefName":"panel_12"},{"version":"7.10.2","gridData":{"x":24,"y":62,"w":24,"h":12,"i":"01da42a0-f09f-47ce-9189-a3230c1300e2"},"panelIndex":"01da42a0-f09f-47ce-9189-a3230c1300e2","embeddableConfig":{},"panelRefName":"panel_13"},{"version":"7.10.2","gridData":{"x":0,"y":74,"w":24,"h":12,"i":"43aadcad-3992-4f35-878d-f6d5633d4603"},"panelIndex":"43aadcad-3992-4f35-878d-f6d5633d4603","embeddableConfig":{},"panelRefName":"panel_14"},{"version":"7.10.2","gridData":{"x":24,"y":74,"w":24,"h":12,"i":"36fcd27b-a306-4b71-96fa-6f91fcd70f59"},"panelIndex":"36fcd27b-a306-4b71-96fa-6f91fcd70f59","embeddableConfig":{},"panelRefName":"panel_15"}]', + timeRestore: false, + title: 'S3Accesslog Summary', + version: 1, + }, + references: [ + { + id: '9c9fcf20-28ea-11ec-88c4-f70571f67193', + name: 'panel_0', + type: 'visualization', + }, + { + id: 'ebb898f0-28e8-11ec-88c4-f70571f67193', + name: 'panel_1', + type: 'visualization', + }, + { + id: '7546d1e0-774f-11ec-aa44-650c320a3c76', + name: 'panel_2', + type: 'visualization', + }, + { + id: '5b8d2660-28ed-11ec-88c4-f70571f67193', + name: 'panel_3', + type: 'visualization', + }, + { + id: 'eec8f4f0-28e2-11ec-88c4-f70571f67193', + name: 'panel_4', + type: 'visualization', + }, + { + id: '1db0d400-28f1-11ec-88c4-f70571f67193', + name: 'panel_5', + type: 'visualization', + }, + { + id: '9aa8c170-28e7-11ec-88c4-f70571f67193', + name: 'panel_6', + type: 'visualization', + }, + { + id: '66f989c0-28ee-11ec-88c4-f70571f67193', + name: 'panel_7', + type: 'visualization', + }, + { + id: '151368c0-28e8-11ec-88c4-f70571f67193', + name: 'panel_8', + type: 'visualization', + }, + { + id: '81bacac0-28ef-11ec-88c4-f70571f67193', + name: 'panel_9', + type: 'visualization', + }, + { + id: '9b59a570-28e8-11ec-88c4-f70571f67193', + name: 'panel_10', + type: 'visualization', + }, + { + id: '9e7f5a00-28e9-11ec-88c4-f70571f67193', + name: 'panel_11', + type: 'visualization', + }, + { + id: '609226d0-244f-11ec-88c4-f70571f67193', + name: 'panel_12', + type: 'visualization', + }, + { + id: '377ff760-28f3-11ec-88c4-f70571f67193', + name: 'panel_13', + type: 'visualization', + }, + { + id: '9802cf20-244f-11ec-88c4-f70571f67193', + name: 'panel_14', + type: 'visualization', + }, + { + id: 'f5512f80-1e9d-11ec-88c4-f70571f67193', + name: 'panel_15', + type: 'visualization', + }, + ], + type: 'dashboard', +}; + +export const s3VisualizationConfigs: VisualizationSavedObjectCreationConfig[] = [ + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"lucene"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'S3Accesslog - AWS Account(Bar)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"S3Accesslog - AWS Account(Bar)","type":"histogram","aggs":[{"id":"1","enabled":true,"type":"count","params":{},"schema":"metric"},{"id":"3","enabled":true,"type":"terms","params":{"field":"cloud.account.id","orderBy":"1","order":"desc","size":10,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"},"schema":"segment"},{"id":"4","enabled":true,"type":"terms","params":{"field":"cloud.account.id","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"},"schema":"group"}],"params":{"type":"histogram","grid":{"categoryLines":false},"categoryAxes":[{"id":"CategoryAxis-1","type":"category","position":"bottom","show":false,"style":{},"scale":{"type":"linear"},"labels":{"show":true,"filter":true,"truncate":100},"title":{}}],"valueAxes":[{"id":"ValueAxis-1","name":"LeftAxis-1","type":"value","position":"left","show":true,"style":{},"scale":{"type":"linear","mode":"normal"},"labels":{"show":true,"rotate":0,"filter":false,"truncate":100},"title":{"text":"Count"}}],"seriesParams":[{"show":true,"type":"histogram","mode":"stacked","data":{"label":"Count","id":"1"},"valueAxis":"ValueAxis-1","drawLinesBetweenPoints":true,"lineWidth":2,"showCircles":true}],"addTooltip":true,"addLegend":true,"legendPosition":"right","times":[],"addTimeMarker":false,"labels":{"show":false},"thresholdLine":{"show":false,"value":10,"width":1,"style":"full","color":"#E7664C"}}}', + }, + references: [ + { + id: '4f75abd0-b7ca-11ea-9044-07f9c61c294e', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"lucene"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'S3Accesslog - Region(Bar)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"S3Accesslog - Region(Bar)","type":"histogram","aggs":[{"id":"1","enabled":true,"type":"count","params":{},"schema":"metric"},{"id":"2","enabled":true,"type":"terms","params":{"field":"cloud.region","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing","customLabel":""},"schema":"segment"},{"id":"3","enabled":true,"type":"terms","params":{"field":"cloud.region","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"},"schema":"group"}],"params":{"type":"histogram","grid":{"categoryLines":false},"categoryAxes":[{"id":"CategoryAxis-1","type":"category","position":"bottom","show":false,"style":{},"scale":{"type":"linear"},"labels":{"show":true,"filter":true,"truncate":100},"title":{}}],"valueAxes":[{"id":"ValueAxis-1","name":"LeftAxis-1","type":"value","position":"left","show":true,"style":{},"scale":{"type":"linear","mode":"normal"},"labels":{"show":true,"rotate":0,"filter":false,"truncate":100},"title":{"text":"Count"}}],"seriesParams":[{"show":true,"type":"histogram","mode":"stacked","data":{"label":"Count","id":"1"},"valueAxis":"ValueAxis-1","drawLinesBetweenPoints":true,"lineWidth":2,"showCircles":true}],"addTooltip":true,"addLegend":true,"legendPosition":"right","times":[],"addTimeMarker":false,"labels":{"show":false},"thresholdLine":{"show":false,"value":10,"width":1,"style":"full","color":"#E7664C"}}}', + }, + references: [ + { + id: '4f75abd0-b7ca-11ea-9044-07f9c61c294e', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"lucene"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'S3Accesslog - Source Countries(Geo)', + uiStateJSON: '{"mapZoom":2,"mapCenter":[7.536764322084078,4.921875000000001]}', + version: 1, + visState: + '{"title":"S3Accesslog - Source Countries(Geo)","type":"region_map","aggs":[{"id":"1","enabled":true,"type":"count","params":{},"schema":"metric"},{"id":"2","enabled":true,"type":"terms","params":{"field":"source.geo.country_iso_code","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"},"schema":"segment"}],"params":{"addTooltip":true,"colorSchema":"Yellow to Red","emsHotLink":"?locale=en#file/world_countries","isDisplayWarning":true,"legendPosition":"bottomright","mapCenter":[0,0],"mapZoom":2,"outlineWeight":1,"selectedJoinField":{"description":"ISO 3166-1 alpha-2 Code","name":"iso2","type":"id"},"selectedLayer":{"attribution":"Made with NaturalEarth","created_at":"2017-04-26T17:12:15.978370","fields":[{"description":"ISO 3166-1 alpha-2 Code","name":"iso2","type":"id"},{"description":"ISO 3166-1 alpha-3 Code","name":"iso3","type":"id"},{"description":"Name","name":"name","type":"name"}],"format":{"type":"geojson"},"id":"world_countries","isEMS":true,"layerId":"elastic_maps_service.World Countries","name":"World Countries","origin":"elastic_maps_service"},"showAllShapes":true,"wms":{"enabled":false,"options":{"attribution":"","format":"image/png","layers":"","styles":"","transparent":true,"version":""},"selectedTmsLayer":{"attribution":"Map data © OpenStreetMap contributors","id":"road_map","maxZoom":10,"minZoom":0,"origin":"elastic_maps_service"},"url":""}}}', + }, + references: [ + { + id: '4f75abd0-b7ca-11ea-9044-07f9c61c294e', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"lucene"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'S3Accesslog - Throttling Counts', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"S3Accesslog - Throttling Counts","type":"metric","aggs":[{"id":"1","enabled":true,"type":"count","params":{},"schema":"metric"},{"id":"2","enabled":true,"type":"filters","params":{"filters":[{"input":{"query":"HTTPstatus:503","language":"lucene"},"label":"Throttling"}]},"schema":"group"}],"params":{"addTooltip":true,"addLegend":false,"type":"metric","metric":{"percentageMode":false,"useRanges":false,"colorSchema":"Green to Red","metricColorMode":"None","colorsRange":[{"from":0,"to":10000}],"labels":{"show":true},"invertColors":false,"style":{"bgFill":"#000","bgColor":false,"labelColor":false,"subText":"","fontSize":60}}}}', + }, + references: [ + { + id: '4f75abd0-b7ca-11ea-9044-07f9c61c294e', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'S3Accesslog - Source IP', + uiStateJSON: '{"vis":{"params":{"sort":{"columnIndex":null,"direction":null}}}}', + version: 1, + visState: + '{"title":"S3Accesslog - Source IP","type":"table","aggs":[{"id":"1","enabled":true,"type":"count","params":{},"schema":"metric"},{"id":"2","enabled":true,"type":"terms","params":{"field":"source.ip","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"},"schema":"bucket"}],"params":{"perPage":10,"showPartialRows":false,"showMetricsAtAllLevels":false,"sort":{"columnIndex":null,"direction":null},"showTotal":false,"totalFunc":"sum","percentageCol":""}}', + }, + references: [ + { + id: '4f75abd0-b7ca-11ea-9044-07f9c61c294e', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"lucene"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'S3Accesslog - Error Code for each Buckets', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"S3Accesslog - Error Code for each Buckets","type":"histogram","aggs":[{"id":"1","enabled":true,"type":"count","params":{},"schema":"metric"},{"id":"2","enabled":true,"type":"terms","params":{"field":"Bucket","orderBy":"1","order":"desc","size":10,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing","customLabel":" "},"schema":"segment"},{"id":"3","enabled":true,"type":"terms","params":{"field":"ErrorCode","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing","json":""},"schema":"group"},{"id":"4","enabled":true,"type":"terms","params":{"field":"HTTPstatus","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"},"schema":"group"}],"params":{"type":"histogram","grid":{"categoryLines":false},"categoryAxes":[{"id":"CategoryAxis-1","type":"category","position":"bottom","show":true,"style":{},"scale":{"type":"linear"},"labels":{"show":true,"filter":true,"truncate":100},"title":{}}],"valueAxes":[{"id":"ValueAxis-1","name":"LeftAxis-1","type":"value","position":"left","show":true,"style":{},"scale":{"type":"linear","mode":"normal"},"labels":{"show":true,"rotate":0,"filter":false,"truncate":100},"title":{"text":"Count"}}],"seriesParams":[{"show":true,"type":"histogram","mode":"stacked","data":{"label":"Count","id":"1"},"valueAxis":"ValueAxis-1","drawLinesBetweenPoints":true,"lineWidth":2,"showCircles":true}],"addTooltip":true,"addLegend":true,"legendPosition":"right","times":[],"addTimeMarker":false,"labels":{"show":false},"thresholdLine":{"show":false,"value":10,"width":1,"style":"full","color":"#E7664C"}}}', + }, + references: [ + { + id: '4f75abd0-b7ca-11ea-9044-07f9c61c294e', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"lucene"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'S3Accesslog - Client Error Counts', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"S3Accesslog - Client Error Counts","type":"metric","aggs":[{"id":"1","enabled":true,"type":"count","params":{},"schema":"metric"},{"id":"2","enabled":true,"type":"filters","params":{"filters":[{"input":{"query":"HTTPstatus:{400 TO 499}","language":"lucene"},"label":"Client Error"}]},"schema":"group"}],"params":{"addTooltip":true,"addLegend":false,"type":"metric","metric":{"percentageMode":false,"useRanges":false,"colorSchema":"Green to Red","metricColorMode":"None","colorsRange":[{"from":0,"to":10000}],"labels":{"show":true},"invertColors":false,"style":{"bgFill":"#000","bgColor":false,"labelColor":false,"subText":"","fontSize":60}}}}', + }, + references: [ + { + id: '4f75abd0-b7ca-11ea-9044-07f9c61c294e', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"lucene"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'S3Accesslog - Server Error Counts', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"S3Accesslog - Server Error Counts","type":"metric","aggs":[{"id":"1","enabled":true,"type":"count","params":{},"schema":"metric"},{"id":"2","enabled":true,"type":"filters","params":{"filters":[{"input":{"query":"HTTPstatus:{500 TO 599}","language":"lucene"},"label":"Server Error"}]},"schema":"group"}],"params":{"addTooltip":true,"addLegend":false,"type":"metric","metric":{"percentageMode":false,"useRanges":false,"colorSchema":"Green to Red","metricColorMode":"None","colorsRange":[{"from":0,"to":10000}],"labels":{"show":true},"invertColors":false,"style":{"bgFill":"#000","bgColor":false,"labelColor":false,"subText":"","fontSize":60}}}}', + }, + references: [ + { + id: '4f75abd0-b7ca-11ea-9044-07f9c61c294e', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"lucene"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'S3Accesslog - Error Code(Pie)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"S3Accesslog - Error Code(Pie)","type":"pie","aggs":[{"id":"1","enabled":true,"type":"count","params":{},"schema":"metric"},{"id":"2","enabled":true,"type":"terms","params":{"field":"ErrorCode","orderBy":"1","order":"desc","size":5,"otherBucket":true,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"},"schema":"segment"}],"params":{"type":"pie","addTooltip":true,"addLegend":true,"legendPosition":"right","isDonut":true,"labels":{"show":false,"values":true,"last_level":true,"truncate":100}}}', + }, + references: [ + { + id: '4f75abd0-b7ca-11ea-9044-07f9c61c294e', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"lucene"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'S3Accesslog - Error Code (Area)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"S3Accesslog - Error Code (Area)","type":"area","aggs":[{"id":"1","enabled":true,"type":"count","params":{},"schema":"metric"},{"id":"2","enabled":true,"type":"date_histogram","params":{"field":"timestamp","timeRange":{"from":"now-30M","to":"now"},"useNormalizedEsInterval":true,"scaleMetricValues":false,"interval":"auto","drop_partials":false,"min_doc_count":1,"extended_bounds":{}},"schema":"segment"},{"id":"3","enabled":true,"type":"terms","params":{"field":"ErrorCode","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"},"schema":"group"},{"id":"4","enabled":true,"type":"terms","params":{"field":"HTTPstatus","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"},"schema":"group"}],"params":{"type":"area","grid":{"categoryLines":false},"categoryAxes":[{"id":"CategoryAxis-1","type":"category","position":"bottom","show":true,"style":{},"scale":{"type":"linear"},"labels":{"show":true,"filter":true,"truncate":100},"title":{}}],"valueAxes":[{"id":"ValueAxis-1","name":"LeftAxis-1","type":"value","position":"left","show":true,"style":{},"scale":{"type":"linear","mode":"normal"},"labels":{"show":true,"rotate":0,"filter":false,"truncate":100},"title":{"text":"Count"}}],"seriesParams":[{"show":true,"type":"area","mode":"stacked","data":{"label":"Count","id":"1"},"drawLinesBetweenPoints":true,"lineWidth":2,"showCircles":true,"interpolate":"linear","valueAxis":"ValueAxis-1"}],"addTooltip":true,"addLegend":true,"legendPosition":"right","times":[],"addTimeMarker":false,"thresholdLine":{"show":false,"value":10,"width":1,"style":"full","color":"#E7664C"},"labels":{}}}', + }, + references: [ + { + id: '4f75abd0-b7ca-11ea-9044-07f9c61c294e', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"lucene"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'S3Accesslog - Operation', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"S3Accesslog - Operation","type":"pie","aggs":[{"id":"1","enabled":true,"type":"count","params":{},"schema":"metric"},{"id":"2","enabled":true,"type":"terms","params":{"field":"Operation","orderBy":"1","order":"desc","size":5,"otherBucket":true,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"},"schema":"segment"}],"params":{"type":"pie","addTooltip":true,"addLegend":true,"legendPosition":"right","isDonut":true,"labels":{"show":false,"values":true,"last_level":true,"truncate":100}}}', + }, + references: [ + { + id: '4f75abd0-b7ca-11ea-9044-07f9c61c294e', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"lucene"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'S3Accesslog - Operation(Area)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"S3Accesslog - Operation(Area)","type":"area","aggs":[{"id":"1","enabled":true,"type":"count","params":{},"schema":"metric"},{"id":"2","enabled":true,"type":"date_histogram","params":{"field":"timestamp","timeRange":{"from":"now-30m","to":"now"},"useNormalizedEsInterval":true,"scaleMetricValues":false,"interval":"auto","drop_partials":false,"min_doc_count":1,"extended_bounds":{}},"schema":"segment"},{"id":"3","enabled":true,"type":"terms","params":{"field":"Operation","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"},"schema":"group"}],"params":{"type":"area","grid":{"categoryLines":false},"categoryAxes":[{"id":"CategoryAxis-1","type":"category","position":"bottom","show":true,"style":{},"scale":{"type":"linear"},"labels":{"show":true,"filter":true,"truncate":100},"title":{}}],"valueAxes":[{"id":"ValueAxis-1","name":"LeftAxis-1","type":"value","position":"left","show":true,"style":{},"scale":{"type":"linear","mode":"normal"},"labels":{"show":true,"rotate":0,"filter":false,"truncate":100},"title":{"text":"Count"}}],"seriesParams":[{"show":true,"type":"area","mode":"stacked","data":{"label":"Count","id":"1"},"drawLinesBetweenPoints":true,"lineWidth":2,"showCircles":true,"interpolate":"linear","valueAxis":"ValueAxis-1"}],"addTooltip":true,"addLegend":true,"legendPosition":"right","times":[],"addTimeMarker":false,"thresholdLine":{"show":false,"value":10,"width":1,"style":"full","color":"#E7664C"},"labels":{}}}', + }, + references: [ + { + id: '4f75abd0-b7ca-11ea-9044-07f9c61c294e', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'S3Accesslog - Requeast URL Key', + uiStateJSON: '{"vis":{"params":{"sort":{"columnIndex":null,"direction":null}}}}', + version: 1, + visState: + '{"title":"S3Accesslog - Requeast URL Key","type":"table","aggs":[{"id":"1","enabled":true,"type":"count","params":{},"schema":"metric"},{"id":"2","enabled":true,"type":"terms","params":{"field":"RequestURI_key","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"},"schema":"bucket"}],"params":{"perPage":10,"showPartialRows":false,"showMetricsAtAllLevels":false,"sort":{"columnIndex":null,"direction":null},"showTotal":false,"totalFunc":"sum","percentageCol":""}}', + }, + references: [ + { + id: '4f75abd0-b7ca-11ea-9044-07f9c61c294e', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"lucene"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'S3Accesslog - Request URI Key(Bar)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"S3Accesslog - Request URI Key(Bar)","type":"histogram","aggs":[{"id":"1","enabled":true,"type":"count","params":{},"schema":"metric"},{"id":"2","enabled":true,"type":"terms","params":{"field":"RequestURI_key","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"},"schema":"segment"},{"id":"3","enabled":true,"type":"terms","params":{"field":"RequestURI_key","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"},"schema":"group"}],"params":{"type":"histogram","grid":{"categoryLines":false},"categoryAxes":[{"id":"CategoryAxis-1","type":"category","position":"bottom","show":false,"style":{},"scale":{"type":"linear"},"labels":{"show":true,"filter":true,"truncate":100},"title":{}}],"valueAxes":[{"id":"ValueAxis-1","name":"LeftAxis-1","type":"value","position":"left","show":true,"style":{},"scale":{"type":"linear","mode":"normal"},"labels":{"show":true,"rotate":0,"filter":false,"truncate":100},"title":{"text":"Count"}}],"seriesParams":[{"show":true,"type":"histogram","mode":"stacked","data":{"label":"Count","id":"1"},"valueAxis":"ValueAxis-1","drawLinesBetweenPoints":true,"lineWidth":2,"showCircles":true}],"addTooltip":true,"addLegend":true,"legendPosition":"right","times":[],"addTimeMarker":false,"labels":{"show":false},"thresholdLine":{"show":false,"value":10,"width":1,"style":"full","color":"#E7664C"}}}', + }, + references: [ + { + id: '4f75abd0-b7ca-11ea-9044-07f9c61c294e', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'S3Accesslog - Requester', + uiStateJSON: '{"vis":{"params":{"sort":{"columnIndex":null,"direction":null}}}}', + version: 1, + visState: + '{"title":"S3Accesslog - Requester","type":"table","aggs":[{"id":"1","enabled":true,"type":"count","params":{},"schema":"metric"},{"id":"2","enabled":true,"type":"terms","params":{"field":"Requester","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"},"schema":"bucket"}],"params":{"perPage":10,"showPartialRows":false,"showMetricsAtAllLevels":false,"sort":{"columnIndex":null,"direction":null},"showTotal":false,"totalFunc":"sum","percentageCol":""}}', + }, + references: [ + { + id: '4f75abd0-b7ca-11ea-9044-07f9c61c294e', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"language":"kuery","query":""},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'S3Accesslog - Buckets Request Counts ', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"S3Accesslog - Buckets Request Counts ","type":"histogram","aggs":[{"id":"1","enabled":true,"type":"count","params":{"customLabel":"Requet Count"},"schema":"metric"},{"id":"2","enabled":true,"type":"terms","params":{"field":"Bucket","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"},"schema":"segment"},{"id":"3","enabled":true,"type":"terms","params":{"field":"Bucket","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"},"schema":"group"}],"params":{"addLegend":true,"addTimeMarker":false,"addTooltip":true,"categoryAxes":[{"id":"CategoryAxis-1","labels":{"filter":true,"show":true,"truncate":100},"position":"bottom","scale":{"type":"linear"},"show":false,"style":{},"title":{},"type":"category"}],"grid":{"categoryLines":false},"labels":{"show":false},"legendPosition":"right","seriesParams":[{"data":{"id":"1","label":"Requet Count"},"drawLinesBetweenPoints":true,"lineWidth":2,"mode":"stacked","show":true,"showCircles":true,"type":"histogram","valueAxis":"ValueAxis-1"}],"thresholdLine":{"color":"#E7664C","show":false,"style":"full","value":10,"width":1},"times":[],"type":"histogram","valueAxes":[{"id":"ValueAxis-1","labels":{"filter":false,"rotate":0,"show":true,"truncate":100},"name":"LeftAxis-1","position":"left","scale":{"mode":"normal","type":"linear"},"show":true,"style":{},"title":{"text":"Requet Count"},"type":"value"}]}}', + }, + references: [ + { + id: '4f75abd0-b7ca-11ea-9044-07f9c61c294e', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, +]; + +export const s3IndexPatternConfig: IndexPatternSavedObjectCreationConfig = { + attributes: { + fields: + '[{"count":0,"name":"@id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"@log_s3bucket","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"@log_s3key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"@log_type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"@message","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false},{"count":0,"name":"timestamp","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"AuthType","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"Bucket","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"BucketOwner","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"BytesSent","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"CipherSuite","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"EndPoint","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"ErrorCode","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"HTTPstatus","type":"number","esTypes":["short"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"HostId","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"Key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"ObjectSize","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"Operation","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"Referrer","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"RemoteIP","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"RequestDateTime","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"RequestID","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"RequestURI_httpProtoversion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"RequestURI_key","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"RequestURI_operation","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"Requester","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"SchemaVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"SigV","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"TLSVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"TotalTime","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"TurnAroundTime","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"UserAgent","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"_id","type":"string","esTypes":["_id"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":false},{"count":0,"name":"_index","type":"string","esTypes":["_index"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":false},{"count":0,"name":"_source","type":"_source","esTypes":["_source"],"scripted":false,"searchable":false,"aggregatable":false,"readFromDocValues":false},{"count":0,"name":"apiVersion","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"base.tags","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"cloud.account.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"cloud.provider","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"cloud.region","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"container.image.tag","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"cwe_timestamp","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"cwl_timestamp","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"destination.address","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"destination.as.number","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"destination.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"destination.domain","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"destination.geo.city_name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"destination.geo.country_iso_code","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"destination.geo.country_name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"destination.geo.location","type":"geo_point","esTypes":["geo_point"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"destination.ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"destination.nat.ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"destination.nat.port","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"destination.packets","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"destination.port","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"dns.answers.ttl","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"dns.header_flags","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"dns.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"dns.resolved_ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"ecs.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"error.message","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false},{"count":0,"name":"event.category","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.code","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.created","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.duration","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.end","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"event.ingested","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.kind","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"event.module","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"event.outcome","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.risk_score","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.risk_score_norm","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.sequence","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"event.severity","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.start","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.timezone","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"event.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.accessed","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.attributes","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.created","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.ctime","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.gid","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.inode","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.mode","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.mtime","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.size","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"file.uid","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"group.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.disk.read.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.disk.write.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.hostname","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.mac","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.network.egress.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.network.egress.packets","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.network.ingress.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.network.ingress.packets","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"host.uptime","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"http.request.body.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"http.request.body.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"http.request.body.content.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"http.request.body.content"}}},{"count":10,"name":"http.request.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"http.request.method","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"http.request.referrer","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"http.response.body.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"http.response.body.content","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"http.response.body.content.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"http.response.body.content"}}},{"count":10,"name":"http.response.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"http.response.status_code","type":"number","esTypes":["short"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"http.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"interface.alias","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"interface.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"interface.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"log.level","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"log.origin.file.line","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"log.syslog.facility.code","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"log.syslog.priority","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"log.syslog.severity.code","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"network.bytes","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"network.community_id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"network.forwarded_ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"network.iana_number","type":"number","esTypes":["short"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"network.packets","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"observer.ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"observer.mac","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"observer.serial_number","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"observer.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"organization.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"os.family","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"os.full","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"os.full.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"os.full"}}},{"count":0,"name":"os.kernel","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"os.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"os.name.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"os.name"}}},{"count":0,"name":"os.platform","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"os.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"os.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.args","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.args_count","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.command_line","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.command_line.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"process.command_line"}}},{"count":0,"name":"process.entity_id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.exit_code","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.pgid","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"process.pid","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.ppid","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.start","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.thread.id","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"process.uptime","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"related.hash","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"related.hosts","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"related.ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"related.user","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"rule.author","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"rule.category","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"rule.description","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"rule.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"rule.uuid","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"rule.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"service.ephemeral_id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"service.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"service.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"source.address","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"source.as.number","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"source.as.organization.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"source.bytes","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"source.geo.city_name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"source.geo.country_iso_code","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"source.geo.country_name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"source.geo.location","type":"geo_point","esTypes":["geo_point"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"source.ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"source.nat.ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"source.nat.port","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"source.packets","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"source.port","type":"number","esTypes":["integer"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"span.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"threat.enrichments.indicator.confidence","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.description","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.email.address","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.first_seen","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.ip","type":"ip","esTypes":["ip"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.last_seen","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.marking.tlp","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.modified_at","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.port","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.provider","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.reference","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.scanner_stats","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.sightings","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.indicator.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.matched.atomic","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.matched.field","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.matched.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.matched.index","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.matched.occurred","type":"date","esTypes":["date"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":0,"name":"threat.enrichments.matched.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"nested":{"path":"threat.enrichments"}}},{"count":10,"name":"threat.matched.indicators","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"threat.matched.names","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"threat.matched.providers","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"threat.matched.types","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"trace.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"transaction.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"url.domain","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"url.full","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"url.full.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"url.full"}}},{"count":0,"name":"url.original","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"url.original.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"url.original"}}},{"count":10,"name":"url.port","type":"number","esTypes":["long"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"user.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"user.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user.roles","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user_agent.device.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"user_agent.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":10,"name":"user_agent.original","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user_agent.original.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"user_agent.original"}}},{"count":0,"name":"user_agent.os.family","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user_agent.os.family.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"user_agent.os.family"}}},{"count":0,"name":"user_agent.os.full","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user_agent.os.kernel","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user_agent.os.name","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user_agent.os.name.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"user_agent.os.name"}}},{"count":0,"name":"user_agent.os.platform","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user_agent.os.type","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user_agent.os.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"user_agent.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vlan.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.category","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.classification","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.description","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.description.text","type":"string","esTypes":["text"],"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"vulnerability.description"}}},{"count":0,"name":"vulnerability.enumeration","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.reference","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.report_id","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.scanner.vendor","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.score.base","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.score.environmental","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.score.temporal","type":"number","esTypes":["float"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.score.version","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"count":0,"name":"vulnerability.severity","type":"string","esTypes":["keyword"],"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true}]', + timeFieldName: 'timestamp', + title: 'log-aws-s3accesslog-*', + }, + id: undefined, + migrationVersion: undefined, + references: [], + type: 'index-pattern', +}; diff --git a/public/store/config/savedObjects/vpc-flow-logs.ts b/public/store/config/savedObjects/vpc-flow-logs.ts new file mode 100644 index 000000000..346110bcf --- /dev/null +++ b/public/store/config/savedObjects/vpc-flow-logs.ts @@ -0,0 +1,372 @@ +/* + * Copyright OpenSearch Contributors + * SPDX-License-Identifier: Apache-2.0 + */ + +import { + DashboardSavedObjectCreationConfig, + IndexPatternSavedObjectCreationConfig, + VisualizationSavedObjectCreationConfig, +} from '../../../../types/SavedObjectConfig'; + +export const vpcFlowLogsDashboardConfig: DashboardSavedObjectCreationConfig = { + attributes: { + description: '', + hits: 0, + kibanaSavedObjectMeta: { + searchSourceJSON: '{"query":{"language":"kuery","query":""},"filter":[]}', + }, + optionsJSON: '{"hidePanelTitles":false,"useMargins":true}', + panelsJSON: + '[{"version":"7.7.0","gridData":{"x":0,"y":0,"w":24,"h":7,"i":"9ef783f5-af53-464f-8bf7-8fe79e574163"},"panelIndex":"9ef783f5-af53-464f-8bf7-8fe79e574163","embeddableConfig":{},"panelRefName":"panel_0"},{"version":"7.7.0","gridData":{"x":24,"y":0,"w":24,"h":7,"i":"96bddd36-2236-463b-b159-db84432d32de"},"panelIndex":"96bddd36-2236-463b-b159-db84432d32de","embeddableConfig":{},"panelRefName":"panel_1"},{"version":"7.7.0","gridData":{"x":0,"y":7,"w":24,"h":8,"i":"79257b0d-673f-4623-86ab-bf3e2cb151f8"},"panelIndex":"79257b0d-673f-4623-86ab-bf3e2cb151f8","embeddableConfig":{},"panelRefName":"panel_2"},{"version":"7.7.0","gridData":{"x":24,"y":7,"w":23,"h":8,"i":"9ac58252-693d-4d1b-a9d0-5fd413fa6814"},"panelIndex":"9ac58252-693d-4d1b-a9d0-5fd413fa6814","embeddableConfig":{},"panelRefName":"panel_3"},{"version":"7.7.0","gridData":{"x":0,"y":15,"w":12,"h":13,"i":"bca8500a-2fc1-413e-baea-bc3f412302e6"},"panelIndex":"bca8500a-2fc1-413e-baea-bc3f412302e6","embeddableConfig":{},"panelRefName":"panel_4"},{"version":"7.7.0","gridData":{"x":12,"y":15,"w":12,"h":13,"i":"915b89ba-5042-47ba-b109-c166aef741f6"},"panelIndex":"915b89ba-5042-47ba-b109-c166aef741f6","embeddableConfig":{},"panelRefName":"panel_5"},{"version":"7.7.0","gridData":{"x":24,"y":15,"w":12,"h":13,"i":"9fbd1232-494c-4b0f-a78b-c5ef50504ce9"},"panelIndex":"9fbd1232-494c-4b0f-a78b-c5ef50504ce9","embeddableConfig":{},"panelRefName":"panel_6"},{"version":"7.7.0","gridData":{"x":36,"y":15,"w":11,"h":13,"i":"bc745ad9-6dbb-436e-8a4a-b01519a8a5b5"},"panelIndex":"bc745ad9-6dbb-436e-8a4a-b01519a8a5b5","embeddableConfig":{},"panelRefName":"panel_7"},{"version":"7.7.0","gridData":{"x":0,"y":28,"w":24,"h":15,"i":"d1c3f6d6-bac5-4d31-af4e-0dbc85eec494"},"panelIndex":"d1c3f6d6-bac5-4d31-af4e-0dbc85eec494","embeddableConfig":{},"panelRefName":"panel_8"},{"version":"7.7.0","gridData":{"x":24,"y":28,"w":24,"h":15,"i":"3167fad5-70cc-44ab-bce1-53d0f30782af"},"panelIndex":"3167fad5-70cc-44ab-bce1-53d0f30782af","embeddableConfig":{},"panelRefName":"panel_9"},{"version":"7.7.0","gridData":{"x":0,"y":43,"w":48,"h":16,"i":"512dc9bf-f031-474f-9afb-36c59e7f4743"},"panelIndex":"512dc9bf-f031-474f-9afb-36c59e7f4743","embeddableConfig":{},"panelRefName":"panel_10"}]', + timeRestore: false, + title: 'VPCFlowLogs Summary', + version: 1, + }, + references: [ + { + id: 'e64d06f0-8225-11ea-9ba8-7fa25bc74a6f', + name: 'panel_0', + type: 'visualization', + }, + { + id: '8079b750-8226-11ea-945d-8d0868f4a377', + name: 'panel_1', + type: 'visualization', + }, + { + id: '93a6db30-8228-11ea-9ba8-7fa25bc74a6f', + name: 'panel_2', + type: 'visualization', + }, + { + id: 'c3100a20-8234-11ea-8450-d1d13849d130', + name: 'panel_3', + type: 'visualization', + }, + { + id: 'e3231530-823b-11ea-8450-d1d13849d130', + name: 'panel_4', + type: 'visualization', + }, + { + id: '41ffb5a0-823b-11ea-8dd2-6fda3f2e19c6', + name: 'panel_5', + type: 'visualization', + }, + { + id: '82c6bd20-823d-11ea-a1e6-856110366757', + name: 'panel_6', + type: 'visualization', + }, + { + id: '435e9770-823d-11ea-8dd2-6fda3f2e19c6', + name: 'panel_7', + type: 'visualization', + }, + { + id: '77dae980-823e-11ea-a1e6-856110366757', + name: 'panel_8', + type: 'visualization', + }, + { + id: 'b7f8a390-823e-11ea-8450-d1d13849d130', + name: 'panel_9', + type: 'visualization', + }, + { + id: 'e530dac0-8073-11ea-9ba8-7fa25bc74a6f', + name: 'panel_10', + type: 'visualization', + }, + ], + type: 'dashboard', +}; + +export const vpcFlowLogsVisualizationConfigs: VisualizationSavedObjectCreationConfig[] = [ + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'VPCFlowLogs - AWS Account(Bar)', + uiStateJSON: '{"vis":{"legendOpen":true}}', + version: 1, + visState: + '{"title":"VPCFlowLogs - AWS Account(Bar)","type":"histogram","params":{"type":"histogram","grid":{"categoryLines":false},"categoryAxes":[{"id":"CategoryAxis-1","type":"category","position":"bottom","show":false,"style":{},"scale":{"type":"linear"},"labels":{"show":true,"filter":true,"truncate":100},"title":{}}],"valueAxes":[{"id":"ValueAxis-1","name":"LeftAxis-1","type":"value","position":"left","show":true,"style":{},"scale":{"type":"linear","mode":"normal"},"labels":{"show":true,"rotate":0,"filter":false,"truncate":100},"title":{"text":"Count"}}],"seriesParams":[{"show":"true","type":"histogram","mode":"stacked","data":{"label":"Count","id":"1"},"valueAxis":"ValueAxis-1","drawLinesBetweenPoints":true,"showCircles":true}],"addTooltip":true,"addLegend":true,"legendPosition":"right","times":[],"addTimeMarker":false,"labels":{"show":false},"thresholdLine":{"show":false,"value":10,"width":1,"style":"full","color":"#34130C"},"dimensions":{"x":{"accessor":0,"format":{"id":"terms","params":{"id":"string","otherBucketLabel":"Other","missingBucketLabel":"Missing"}},"params":{},"aggType":"terms"},"y":[{"accessor":2,"format":{"id":"number"},"params":{},"aggType":"count"}],"series":[{"accessor":1,"format":{"id":"terms","params":{"id":"string","otherBucketLabel":"Other","missingBucketLabel":"Missing"}},"params":{},"aggType":"terms"}]}},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"terms","schema":"segment","params":{"field":"cloud.account.id","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}},{"id":"3","enabled":true,"type":"terms","schema":"group","params":{"field":"cloud.account.id","orderBy":"1","order":"desc","size":10,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing","customLabel":"Account"}}]}', + }, + references: [ + { + id: '99f81900-806f-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'VPCFlowLogs - Region(Bar)', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"VPCFlowLogs - Region(Bar)","type":"histogram","params":{"type":"histogram","grid":{"categoryLines":false},"categoryAxes":[{"id":"CategoryAxis-1","type":"category","position":"bottom","show":false,"style":{},"scale":{"type":"linear"},"labels":{"show":true,"filter":true,"truncate":100},"title":{}}],"valueAxes":[{"id":"ValueAxis-1","name":"LeftAxis-1","type":"value","position":"left","show":true,"style":{},"scale":{"type":"linear","mode":"normal"},"labels":{"show":true,"rotate":0,"filter":false,"truncate":100},"title":{"text":"Count"}}],"seriesParams":[{"show":"true","type":"histogram","mode":"stacked","data":{"label":"Count","id":"1"},"valueAxis":"ValueAxis-1","drawLinesBetweenPoints":true,"showCircles":true}],"addTooltip":true,"addLegend":true,"legendPosition":"right","times":[],"addTimeMarker":false,"labels":{"show":false},"thresholdLine":{"show":false,"value":10,"width":1,"style":"full","color":"#34130C"},"dimensions":{"x":{"accessor":0,"format":{"id":"terms","params":{"id":"string","otherBucketLabel":"Other","missingBucketLabel":"Missing"}},"params":{},"aggType":"terms"},"y":[{"accessor":2,"format":{"id":"number"},"params":{},"aggType":"count"}],"series":[{"accessor":1,"format":{"id":"terms","params":{"id":"string","otherBucketLabel":"Other","missingBucketLabel":"Missing"}},"params":{},"aggType":"terms"}]}},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"terms","schema":"segment","params":{"field":"cloud.region","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}},{"id":"3","enabled":true,"type":"terms","schema":"group","params":{"field":"cloud.region","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}}]}', + }, + references: [ + { + id: '99f81900-806f-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"language":"kuery","query":""},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'VPCFlowLogs - Accept Packets(Line Chart)', + uiStateJSON: '{"vis":{"legendOpen":false}}', + version: 1, + visState: + '{"type":"line","aggs":[{"id":"1","enabled":true,"type":"sum_bucket","schema":"metric","params":{"customBucket":{"id":"1-bucket","enabled":true,"type":"filters","params":{"filters":[{"input":{"language":"kuery","query":"\\"action\\": \\"ACCEPT\\""},"label":""}]}},"customMetric":{"id":"1-metric","enabled":true,"type":"sum","params":{"field":"network.packets"}}}},{"id":"2","enabled":true,"type":"date_histogram","schema":"segment","params":{"field":"timestamp","timeRange":{"from":"now-72h","to":"now"},"useNormalizedEsInterval":true,"scaleMetricValues":false,"interval":"auto","drop_partials":false,"min_doc_count":1,"extended_bounds":{}}}],"params":{"addLegend":true,"addTimeMarker":false,"addTooltip":true,"categoryAxes":[{"id":"CategoryAxis-1","labels":{"filter":true,"show":true,"truncate":100},"position":"bottom","scale":{"type":"linear"},"show":true,"style":{},"title":{},"type":"category"}],"grid":{"categoryLines":false},"labels":{},"legendPosition":"right","seriesParams":[{"data":{"id":"1","label":"Overall Sum of Sum of network.packets"},"drawLinesBetweenPoints":true,"interpolate":"linear","lineWidth":2,"mode":"normal","show":true,"showCircles":true,"type":"line","valueAxis":"ValueAxis-3"}],"thresholdLine":{"color":"#E7664C","show":false,"style":"full","value":10,"width":1},"times":[],"type":"line","valueAxes":[{"id":"ValueAxis-3","labels":{"filter":false,"rotate":0,"show":true,"truncate":100},"name":"LeftAxis-1","position":"left","scale":{"mode":"normal","type":"linear"},"show":true,"style":{},"title":{"text":""},"type":"value"}]},"title":"VPCFlowLogs - Accept Packets(Line Chart)"}', + }, + references: [ + { + id: '99f81900-806f-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"language":"kuery","query":""},"filter":[],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'VPCFlowLogs - Reject Packets(Line Chart)', + uiStateJSON: '{"vis":{"legendOpen":false}}', + version: 1, + visState: + '{"type":"line","aggs":[{"id":"1","enabled":true,"type":"sum_bucket","schema":"metric","params":{"customBucket":{"id":"1-bucket","enabled":true,"type":"filters","params":{"filters":[{"input":{"language":"kuery","query":"\\"action\\": \\"REJECT\\""},"label":""}]}},"customMetric":{"id":"1-metric","enabled":true,"type":"sum","params":{"field":"network.packets"}}}},{"id":"2","enabled":true,"type":"date_histogram","schema":"segment","params":{"field":"timestamp","timeRange":{"from":"now-72h","to":"now"},"useNormalizedEsInterval":true,"scaleMetricValues":false,"interval":"auto","drop_partials":true,"min_doc_count":1,"extended_bounds":{},"customLabel":""}}],"params":{"addLegend":true,"addTimeMarker":false,"addTooltip":true,"categoryAxes":[{"id":"CategoryAxis-1","labels":{"filter":true,"show":true,"truncate":100},"position":"bottom","scale":{"type":"linear"},"show":true,"style":{},"title":{},"type":"category"}],"grid":{"categoryLines":false,"valueAxis":""},"labels":{},"legendPosition":"bottom","seriesParams":[{"data":{"id":"1","label":"Overall Sum of Sum of network.packets"},"drawLinesBetweenPoints":true,"interpolate":"linear","lineWidth":2,"mode":"normal","show":true,"showCircles":true,"type":"line","valueAxis":"ValueAxis-2"}],"thresholdLine":{"color":"#E7664C","show":false,"style":"full","value":10,"width":1},"times":[],"type":"line","valueAxes":[{"id":"ValueAxis-2","labels":{"filter":false,"rotate":0,"show":true,"truncate":100},"name":"LeftAxis-1","position":"left","scale":{"mode":"normal","type":"linear"},"show":true,"style":{},"title":{"text":""},"type":"value"}]},"title":"VPCFlowLogs - Reject Packets(Line Chart)"}', + }, + references: [ + { + id: '99f81900-806f-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"action:ACCEPT","language":"kuery"},"filter":[{"$state":{"store":"appState"},"meta":{"alias":null,"disabled":false,"key":"action","negate":false,"params":{"query":"ACCEPT"},"type":"phrase","indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index"},"query":{"match_phrase":{"action":"ACCEPT"}}}],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'VPCFlowLogs - Accept Src Packets(Pie)', + uiStateJSON: '{"vis":{"legendOpen":false}}', + version: 1, + visState: + '{"type":"pie","aggs":[{"id":"1","enabled":true,"type":"sum","schema":"metric","params":{"field":"source.packets","json":""}},{"id":"2","enabled":true,"type":"terms","schema":"segment","params":{"field":"source.ip","orderBy":"1","order":"desc","size":10,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing","json":""}}],"params":{"type":"pie","addTooltip":true,"addLegend":true,"legendPosition":"right","isDonut":true,"labels":{"show":false,"values":true,"last_level":true,"truncate":100},"row":true},"title":"VPCFlowLogs - Accept Src Packets(Pie)"}', + }, + references: [ + { + id: '99f81900-806f-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + { + id: '99f81900-806f-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"filter":[{"$state":{"store":"appState"},"meta":{"alias":null,"disabled":false,"key":"action","negate":false,"params":{"query":"ACCEPT"},"type":"phrase","indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index"},"query":{"match_phrase":{"action":"ACCEPT"}}}],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'VPCFlowLogs - Accept Src Packets(Table)', + uiStateJSON: '{"vis":{"params":{"sort":{"columnIndex":null,"direction":null}}}}', + version: 1, + visState: + '{"type":"table","aggs":[{"id":"1","enabled":true,"type":"sum","schema":"metric","params":{"field":"source.packets","customLabel":"Packets"}},{"id":"2","enabled":true,"type":"terms","schema":"bucket","params":{"field":"source.ip","orderBy":"1","order":"desc","size":10,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing","customLabel":"Src IP"}}],"params":{"perPage":10,"showPartialRows":false,"showMetricsAtAllLevels":false,"sort":{"columnIndex":null,"direction":null},"showTotal":false,"totalFunc":"sum","percentageCol":""},"title":"VPCFlowLogs - Accept Src Packets(Table)"}', + }, + references: [ + { + id: '99f81900-806f-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + { + id: '99f81900-806f-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"action:REJECT","language":"kuery"},"filter":[{"$state":{"store":"appState"},"meta":{"alias":null,"disabled":false,"key":"action","negate":false,"params":{"query":"REJECT"},"type":"phrase","indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index"},"query":{"match_phrase":{"action":"REJECT"}}}],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'VPCFlowLogs - Reject Src Packets(Pie)', + uiStateJSON: '{"vis":{"legendOpen":false}}', + version: 1, + visState: + '{"type":"pie","aggs":[{"id":"1","enabled":true,"type":"sum","schema":"metric","params":{"field":"source.packets","json":""}},{"id":"2","enabled":true,"type":"terms","schema":"segment","params":{"field":"source.ip","orderBy":"1","order":"desc","size":10,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing","json":""}}],"params":{"type":"pie","addTooltip":true,"addLegend":true,"legendPosition":"right","isDonut":true,"labels":{"show":false,"values":true,"last_level":true,"truncate":100},"row":true},"title":"VPCFlowLogs - Reject Src Packets(Pie)"}', + }, + references: [ + { + id: '99f81900-806f-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + { + id: '99f81900-806f-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"language":"kuery","query":""},"filter":[{"$state":{"store":"appState"},"meta":{"alias":null,"disabled":false,"key":"action","negate":false,"params":{"query":"REJECT"},"type":"phrase","indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index"},"query":{"match_phrase":{"action":"REJECT"}}}],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'VPCFlowLogs - Reject Src Packets(Table)', + uiStateJSON: '{"vis":{"params":{"sort":{"columnIndex":null,"direction":null}}}}', + version: 1, + visState: + '{"type":"table","aggs":[{"id":"1","enabled":true,"type":"sum","schema":"metric","params":{"field":"source.packets","customLabel":"Packets"}},{"id":"2","enabled":true,"type":"terms","schema":"bucket","params":{"field":"source.ip","orderBy":"1","order":"desc","size":10,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing","customLabel":"Src IP"}}],"params":{"perPage":10,"percentageCol":"","showMetricsAtAllLevels":false,"showPartialRows":false,"showTotal":false,"sort":{"columnIndex":null,"direction":null},"totalFunc":"sum"},"title":"VPCFlowLogs - Reject Src Packets(Table)"}', + }, + references: [ + { + id: '99f81900-806f-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + { + id: '99f81900-806f-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"filter":[{"$state":{"store":"appState"},"meta":{"alias":null,"disabled":false,"key":"action","negate":false,"params":{"query":"ACCEPT"},"type":"phrase","indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index"},"query":{"match_phrase":{"action":"ACCEPT"}}}],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'VPCFlowLogs - Accept Src Packets(Geo)', + uiStateJSON: '{"mapZoom":2,"mapCenter":[25.777633878392646,41.93485907317978]}', + version: 1, + visState: + '{"type":"region_map","aggs":[{"id":"1","enabled":true,"type":"sum","schema":"metric","params":{"field":"source.packets"}},{"id":"2","enabled":true,"type":"terms","schema":"segment","params":{"field":"source.geo.country_iso_code","orderBy":"1","order":"desc","size":100,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}}],"params":{"addTooltip":true,"colorSchema":"Yellow to Red","emsHotLink":"https://maps.elastic.co/v7.7?locale=en#file/world_countries","isDisplayWarning":true,"legendPosition":"bottomright","mapCenter":[0,0],"mapZoom":2,"outlineWeight":1,"selectedJoinField":{"description":"ISO 3166-1 alpha-2 Code","name":"iso2","type":"id"},"selectedLayer":{"attribution":"Made with NaturalEarth","created_at":"2017-04-26T17:12:15.978370","fields":[{"description":"ISO 3166-1 alpha-2 Code","name":"iso2","type":"id"},{"description":"ISO 3166-1 alpha-3 Code","name":"iso3","type":"id"},{"description":"Name","name":"name","type":"name"}],"format":{"type":"geojson"},"id":"world_countries","isEMS":true,"layerId":"elastic_maps_service.World Countries","name":"World Countries","origin":"elastic_maps_service"},"showAllShapes":true,"wms":{"enabled":false,"options":{"format":"image/png","transparent":true},"selectedTmsLayer":{"attribution":"Map data © OpenStreetMap contributors","id":"road_map","maxZoom":10,"minZoom":0,"origin":"elastic_maps_service"}}},"title":"VPCFlowLogs - Accept Src Packets(Geo)"}', + }, + references: [ + { + id: '99f81900-806f-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + { + id: '99f81900-806f-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"language":"kuery","query":""},"filter":[{"$state":{"store":"appState"},"meta":{"alias":null,"disabled":false,"key":"action","negate":false,"params":{"query":"REJECT"},"type":"phrase","indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index"},"query":{"match_phrase":{"action":"REJECT"}}}],"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index"}', + }, + title: 'VPCFlowLogs - Reject Src Packets(Geo)', + uiStateJSON: '{"mapCenter":[25.777633878392646,41.93485907317978],"mapZoom":2}', + version: 1, + visState: + '{"type":"region_map","aggs":[{"id":"1","enabled":true,"type":"sum","schema":"metric","params":{"field":"source.packets"}},{"id":"2","enabled":true,"type":"terms","schema":"segment","params":{"field":"source.geo.country_iso_code","orderBy":"1","order":"desc","size":100,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}}],"params":{"addTooltip":true,"colorSchema":"Yellow to Red","emsHotLink":"https://maps.elastic.co/v7.7?locale=en#file/world_countries","isDisplayWarning":true,"legendPosition":"bottomright","mapCenter":[0,0],"mapZoom":2,"outlineWeight":1,"selectedJoinField":{"description":"ISO 3166-1 alpha-2 Code","name":"iso2","type":"id"},"selectedLayer":{"attribution":"Made with NaturalEarth","created_at":"2017-04-26T17:12:15.978370","fields":[{"description":"ISO 3166-1 alpha-2 Code","name":"iso2","type":"id"},{"description":"ISO 3166-1 alpha-3 Code","name":"iso3","type":"id"},{"description":"Name","name":"name","type":"name"}],"format":{"type":"geojson"},"id":"world_countries","isEMS":true,"layerId":"elastic_maps_service.World Countries","name":"World Countries","origin":"elastic_maps_service"},"showAllShapes":true,"wms":{"enabled":false,"options":{"format":"image/png","transparent":true},"selectedTmsLayer":{"attribution":"Map data © OpenStreetMap contributors","id":"road_map","maxZoom":10,"minZoom":0,"origin":"elastic_maps_service"}}},"title":"VPCFlowLogs - Reject Src Packets(Geo)"}', + }, + references: [ + { + id: '99f81900-806f-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + { + id: '99f81900-806f-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, + { + attributes: { + description: '', + kibanaSavedObjectMeta: { + searchSourceJSON: + '{"query":{"query":"","language":"kuery"},"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","filter":[]}', + }, + title: 'VPCFlowLogs - Top 10 Chart Source IP', + uiStateJSON: '{}', + version: 1, + visState: + '{"title":"VPCFlowLogs - Top 10 Chart Source IP","type":"line","params":{"type":"line","grid":{"categoryLines":false},"categoryAxes":[{"id":"CategoryAxis-1","type":"category","position":"bottom","show":true,"style":{},"scale":{"type":"linear"},"labels":{"show":true,"filter":true,"truncate":100},"title":{}}],"valueAxes":[{"id":"ValueAxis-1","name":"LeftAxis-1","type":"value","position":"left","show":true,"style":{},"scale":{"type":"linear","mode":"normal"},"labels":{"show":true,"rotate":0,"filter":false,"truncate":100},"title":{"text":"Count"}}],"seriesParams":[{"show":"true","type":"line","mode":"normal","data":{"label":"Count","id":"1"},"valueAxis":"ValueAxis-1","drawLinesBetweenPoints":true,"showCircles":true}],"addTooltip":true,"addLegend":true,"legendPosition":"right","times":[],"addTimeMarker":false,"labels":{},"thresholdLine":{"show":false,"value":10,"width":1,"style":"full","color":"#34130C"},"dimensions":{"x":{"accessor":0,"format":{"id":"string"},"params":{},"aggType":"date_range"},"y":[{"accessor":2,"format":{"id":"number"},"params":{},"aggType":"count"}],"series":[{"accessor":1,"format":{"id":"terms","params":{"id":"ip","otherBucketLabel":"Other","missingBucketLabel":"Missing"}},"params":{},"aggType":"terms"}]}},"aggs":[{"id":"1","enabled":true,"type":"count","schema":"metric","params":{}},{"id":"2","enabled":true,"type":"date_histogram","schema":"segment","params":{"field":"timestamp","useNormalizedEsInterval":true,"interval":"auto","drop_partials":false,"min_doc_count":1,"extended_bounds":{}}},{"id":"3","enabled":true,"type":"terms","schema":"group","params":{"field":"source.ip","orderBy":"1","order":"desc","size":5,"otherBucket":false,"otherBucketLabel":"Other","missingBucket":false,"missingBucketLabel":"Missing"}}]}', + }, + references: [ + { + id: '99f81900-806f-11ea-945d-8d0868f4a377', + name: 'kibanaSavedObjectMeta.searchSourceJSON.index', + type: 'index-pattern', + }, + ], + type: 'visualization', + }, +]; + +export const vpcFlowLogsIndexPatternConfig: IndexPatternSavedObjectCreationConfig = { + attributes: { + fields: + '[{"name":"@id","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"@log_group","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"@log_s3bucket","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"@log_s3key","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"@log_stream","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"@log_type","type":"string","esTypes":["keyword"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"@message","type":"string","esTypes":["text"],"count":0,"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false},{"name":"timestamp","type":"date","esTypes":["date"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"@timestamp_received","type":"date","esTypes":["date"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"SchemaVersion","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"_id","type":"string","esTypes":["_id"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":false},{"name":"_index","type":"string","esTypes":["_index"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":false},{"name":"_score","type":"number","count":0,"scripted":false,"searchable":false,"aggregatable":false,"readFromDocValues":false},{"name":"_source","type":"_source","esTypes":["_source"],"count":0,"scripted":false,"searchable":false,"aggregatable":false,"readFromDocValues":false},{"name":"_type","type":"string","esTypes":["_type"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":false},{"name":"account_id","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"action","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"apiVersion","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"bytes","type":"number","esTypes":["integer"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"cloud.account.id","type":"string","esTypes":["keyword"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"cloud.provider","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"cloud.region","type":"string","esTypes":["keyword"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"destination.address","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"destination.as.number","type":"number","esTypes":["integer"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"destination.as.organization.name","type":"string","esTypes":["keyword"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"destination.bytes","type":"number","esTypes":["long"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"destination.geo.city_name","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"destination.geo.country_iso_code","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"destination.geo.country_name","type":"string","esTypes":["keyword"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"destination.geo.location","type":"geo_point","esTypes":["geo_point"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"destination.ip","type":"ip","esTypes":["ip"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"destination.packets","type":"number","esTypes":["long"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"destination.port","type":"number","esTypes":["integer"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"dstaddr","type":"ip","esTypes":["ip"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"dstport","type":"number","esTypes":["integer"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"ecs.version","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"end","type":"date","esTypes":["date"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"event.action","type":"string","esTypes":["keyword"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"event.category","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"event.ingested","type":"date","esTypes":["date"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"event.kind","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"event.module","type":"string","esTypes":["keyword"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"event.outcome","type":"string","esTypes":["keyword"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"http.request.bytes","type":"number","esTypes":["long"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"http.response.bytes","type":"number","esTypes":["long"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"http.response.status_code","type":"number","esTypes":["short"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"http.version","type":"string","esTypes":["keyword"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"instance_id","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"interface_id","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"log_status","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"network.bytes","type":"number","esTypes":["integer"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"network.iana_number","type":"number","esTypes":["short"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"network.packets","type":"number","esTypes":["integer"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"packets","type":"number","esTypes":["integer"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"process.pid","type":"number","esTypes":["integer"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"protocol","type":"number","esTypes":["short"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"source.address","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"source.as.number","type":"number","esTypes":["integer"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"source.as.organization.name","type":"string","esTypes":["keyword"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"source.bytes","type":"number","esTypes":["long"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"source.geo.city_name","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"source.geo.country_iso_code","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"source.geo.country_name","type":"string","esTypes":["keyword"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"source.geo.location","type":"geo_point","esTypes":["geo_point"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"source.ip","type":"ip","esTypes":["ip"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"source.packets","type":"number","esTypes":["long"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"source.port","type":"number","esTypes":["integer"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"srcaddr","type":"ip","esTypes":["ip"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"srcport","type":"number","esTypes":["integer"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"start","type":"date","esTypes":["date"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"subnet_id","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"tcp_flags","type":"number","esTypes":["byte"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"url.full","type":"string","esTypes":["keyword"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"url.full.text","type":"string","esTypes":["text"],"count":10,"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"url.full"}}},{"name":"url.original","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"url.original.text","type":"string","esTypes":["text"],"count":0,"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"url.original"}}},{"name":"user_agent.original","type":"string","esTypes":["keyword"],"count":10,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"user_agent.original.text","type":"string","esTypes":["text"],"count":10,"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false,"subType":{"multi":{"parent":"user_agent.original"}}},{"name":"version","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"vpc_id","type":"string","esTypes":["keyword"],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true}]', + timeFieldName: 'timestamp', + title: 'log-aws-vpcflowlogs-*', + }, + id: undefined, + migrationVersion: undefined, + references: [], + type: 'index-pattern', +}; diff --git a/public/store/savedObjectsConfig.ts b/public/store/savedObjectsConfig.ts new file mode 100644 index 000000000..64bb0c9d4 --- /dev/null +++ b/public/store/savedObjectsConfig.ts @@ -0,0 +1,43 @@ +/* + * Copyright OpenSearch Contributors + * SPDX-License-Identifier: Apache-2.0 + */ + +import { DashboardCreationConfig } from '../../types'; +import { + cloudtrailDashboardConfig, + cloudtrailIndexPatternConfig, + cloudtrailVisualizationConfigs, +} from './config/savedObjects/cloudtrail'; +import { + s3DashboardConfig, + s3IndexPatternConfig, + s3VisualizationConfigs, +} from './config/savedObjects/s3'; +import { + vpcFlowLogsDashboardConfig, + vpcFlowLogsIndexPatternConfig, + vpcFlowLogsVisualizationConfigs, +} from './config/savedObjects/vpc-flow-logs'; + +const savedObjectsConfigsByLogType: { [logType: string]: DashboardCreationConfig } = { + network: { + 'index-pattern': vpcFlowLogsIndexPatternConfig, + visualizations: vpcFlowLogsVisualizationConfigs, + dashboard: vpcFlowLogsDashboardConfig, + }, + cloudtrail: { + 'index-pattern': cloudtrailIndexPatternConfig, + visualizations: cloudtrailVisualizationConfigs, + dashboard: cloudtrailDashboardConfig, + }, + s3: { + 'index-pattern': s3IndexPatternConfig, + visualizations: s3VisualizationConfigs, + dashboard: s3DashboardConfig, + }, +}; + +export function getSavedObjectConfigs(logType: string): DashboardCreationConfig | undefined { + return savedObjectsConfigsByLogType[logType]; +} diff --git a/public/utils/constants.ts b/public/utils/constants.ts index 49dcffd4f..3e90f8a8d 100644 --- a/public/utils/constants.ts +++ b/public/utils/constants.ts @@ -3,6 +3,8 @@ * SPDX-License-Identifier: Apache-2.0 */ +import { SimpleSavedObject } from 'opensearch-dashboards/public'; +import { ServerResponse } from '../../types'; import { Detector, DetectorInput, PeriodSchedule } from '../../models/interfaces'; import { DetectorHit } from '../../server/models/interfaces'; import { DETECTOR_TYPES } from '../pages/Detectors/utils/constants'; @@ -139,3 +141,9 @@ export const ALERT_STATE = Object.freeze({ ERROR: 'ERROR', DELETED: 'DELETED', }); + +export const logTypesWithDashboards = new Set(['network', 'cloudtrail', 's3']); + +export const pendingDashboardCreations: { + [detectorId: string]: undefined | Promise>>; +} = {}; diff --git a/server/models/interfaces/index.ts b/server/models/interfaces/index.ts index 2edcc9c78..dcf9e1832 100644 --- a/server/models/interfaces/index.ts +++ b/server/models/interfaces/index.ts @@ -28,6 +28,7 @@ export interface SecurityAnalyticsApi { readonly CHANNELS: string; readonly PLUGINS: string; readonly ACKNOWLEDGE_ALERTS: string; + readonly UPDATE_ALIASES: string; } export interface NodeServices { diff --git a/server/routes/IndexRoutes.ts b/server/routes/IndexRoutes.ts index f331d1d27..1c3a18ce4 100644 --- a/server/routes/IndexRoutes.ts +++ b/server/routes/IndexRoutes.ts @@ -6,6 +6,7 @@ import { IRouter } from 'opensearch-dashboards/server'; import { API } from '../utils/constants'; import { NodeServices } from '../models/interfaces'; +import { schema } from '@osd/config-schema'; export function setupIndexRoutes(services: NodeServices, router: IRouter) { const { indexService } = services; @@ -17,4 +18,14 @@ export function setupIndexRoutes(services: NodeServices, router: IRouter) { }, indexService.getIndices ); + + router.post( + { + path: API.UPDATE_ALIASES, + validate: { + body: schema.any(), + }, + }, + indexService.updateAliases + ); } diff --git a/server/services/IndexService.ts b/server/services/IndexService.ts index d96a652cd..d8d61ecd7 100644 --- a/server/services/IndexService.ts +++ b/server/services/IndexService.ts @@ -56,4 +56,33 @@ export default class IndexService { }); } }; + + updateAliases = async ( + _context: RequestHandlerContext, + request: OpenSearchDashboardsRequest, + response: OpenSearchDashboardsResponseFactory + ): Promise | ResponseError>> => { + try { + const actions = request.body; + const params = { body: actions }; + const { callAsCurrentUser: callWithRequest } = this.osDriver.asScoped(request); + await callWithRequest('indices.updateAliases', params); + + return response.custom({ + statusCode: 200, + body: { + ok: true, + }, + }); + } catch (error: any) { + console.error('Security Analytics - IndexService - createAliases:', error); + return response.custom({ + statusCode: 200, + body: { + ok: false, + error: error.message, + }, + }); + } + }; } diff --git a/server/utils/constants.ts b/server/utils/constants.ts index ba8baa955..91f701f2b 100644 --- a/server/utils/constants.ts +++ b/server/utils/constants.ts @@ -27,6 +27,7 @@ export const API: SecurityAnalyticsApi = { CHANNELS: `${BASE_API_PATH}/_notifications/channels`, PLUGINS: `${BASE_API_PATH}/_notifications/plugins`, ACKNOWLEDGE_ALERTS: `${BASE_API_PATH}/detectors/{detector_id}/_acknowledge/alerts`, + UPDATE_ALIASES: `${BASE_API_PATH}/update_aliases`, }; /** diff --git a/test/mocks/Detectors/containers/DetectorDetails/DetectorDetails.mock.ts b/test/mocks/Detectors/containers/DetectorDetails/DetectorDetails.mock.ts index d36c28926..4dc665222 100644 --- a/test/mocks/Detectors/containers/DetectorDetails/DetectorDetails.mock.ts +++ b/test/mocks/Detectors/containers/DetectorDetails/DetectorDetails.mock.ts @@ -7,6 +7,7 @@ import detectorHitMock from '../Detectors/DetectorHit.mock'; import services from '../../../services'; import notificationsStartMock from '../../../services/notifications/NotificationsStart.mock'; import browserHistoryMock from '../../../services/browserHistory.mock'; +import savedObjectsServiceMock from '../../../services/savedObjectService.mock'; import { DetectorDetails } from '../../../../../public/pages/Detectors/containers/Detector/DetectorDetails'; const { detectorService } = services; @@ -19,4 +20,5 @@ export default ({ pathname: '/detector-details/detector_id_1', }, history: browserHistoryMock, + savedObjectsService: savedObjectsServiceMock, } as unknown) as typeof DetectorDetails; diff --git a/test/mocks/services/savedObjectService.mock.ts b/test/mocks/services/savedObjectService.mock.ts new file mode 100644 index 000000000..7ca1a4325 --- /dev/null +++ b/test/mocks/services/savedObjectService.mock.ts @@ -0,0 +1,18 @@ +/* + * Copyright OpenSearch Contributors + * SPDX-License-Identifier: Apache-2.0 + */ + +import { ISavedObjectsService } from '../../../types'; +import { SavedObjectService } from '../../../public/services'; +import savedObjectsClientMock from './savedObjectsClient.mock'; +jest.fn(); + +const savedObjectsServiceMock = { + getDashboards: () => Promise.resolve([{ references: [], id: 'dashboardId' }]), +}; +const savedObjectsService = new SavedObjectService(savedObjectsClientMock); +Object.assign(savedObjectsService, savedObjectsServiceMock); + +export { savedObjectsServiceMock }; +export default savedObjectsService as ISavedObjectsService; diff --git a/types/SavedObjectConfig.ts b/types/SavedObjectConfig.ts new file mode 100644 index 000000000..59257131a --- /dev/null +++ b/types/SavedObjectConfig.ts @@ -0,0 +1,64 @@ +/* + * Copyright OpenSearch Contributors + * SPDX-License-Identifier: Apache-2.0 + */ + +import { + SavedObjectReference, + SavedObjectsMigrationVersion, + SavedObjectAttributes, +} from '../../../src/core/public'; + +interface SavedObjectCreationConfigBase { + references: SavedObjectReference[]; + migrationVersion?: SavedObjectsMigrationVersion; + id?: string; +} + +export interface IndexPatternSavedObjectCreationConfig extends SavedObjectCreationConfigBase { + type: 'index-pattern'; + attributes: { + fields: string; + timeFieldName: string; + title: string; + }; +} + +export interface VisualizationSavedObjectCreationConfig extends SavedObjectCreationConfigBase { + type: 'visualization'; + attributes: SavedObjectAttributes & { + title: string; + description: string; + uiStateJSON: string; + visState: string; + kibanaSavedObjectMeta: { + searchSourceJSON: string; + }; + }; +} + +export interface DashboardSavedObjectCreationConfig extends SavedObjectCreationConfigBase { + type: 'dashboard'; + attributes: SavedObjectAttributes & { + title: string; + description: string; + hits: number; + optionsJSON: string; + panelsJSON: string; + timeRestore: boolean; + kibanaSavedObjectMeta: { + searchSourceJSON: string; + }; + }; +} + +export type SavedObjectCreationConfig = + | IndexPatternSavedObjectCreationConfig + | VisualizationSavedObjectCreationConfig + | DashboardSavedObjectCreationConfig; + +export type DashboardCreationConfig = { + 'index-pattern': IndexPatternSavedObjectCreationConfig; + visualizations: VisualizationSavedObjectCreationConfig[]; + dashboard: DashboardSavedObjectCreationConfig; +}; diff --git a/types/index.ts b/types/index.ts index 2e50faaf9..2ed7c7b90 100644 --- a/types/index.ts +++ b/types/index.ts @@ -12,3 +12,4 @@ export * from './Notification'; export * from './Overview'; export * from './Rule'; export * from './services'; +export * from './SavedObjectConfig'; diff --git a/types/services/IIndexService.ts b/types/services/IIndexService.ts index 62f61ee32..b7e93a33d 100644 --- a/types/services/IIndexService.ts +++ b/types/services/IIndexService.ts @@ -3,20 +3,10 @@ * SPDX-License-Identifier: Apache-2.0 */ -import { - OpenSearchDashboardsRequest, - OpenSearchDashboardsResponseFactory, - IOpenSearchDashboardsResponse, - ResponseError, - RequestHandlerContext, -} from 'opensearch-dashboards/server'; import { ServerResponse } from './ServerResponse'; import { GetIndicesResponse } from '../Indices'; export interface IIndexService { - getIndices( - _context: RequestHandlerContext, - request: OpenSearchDashboardsRequest, - response: OpenSearchDashboardsResponseFactory - ): Promise | ResponseError>>; + getIndices(): Promise>; + updateAliases(actions: any): Promise>; } diff --git a/types/services/ISavedObjectsService.ts b/types/services/ISavedObjectsService.ts new file mode 100644 index 000000000..92902be38 --- /dev/null +++ b/types/services/ISavedObjectsService.ts @@ -0,0 +1,19 @@ +/* + * Copyright OpenSearch Contributors + * SPDX-License-Identifier: Apache-2.0 + */ + +import { SavedObjectReference, SimpleSavedObject } from 'opensearch-dashboards/public'; +import { ServerResponse } from './ServerResponse'; + +export interface ISavedObjectsService { + createSavedObject( + name: string, + logType: string, + detectorId: string, + inputIndices: string[] + ): Promise>; + getDashboards(): Promise< + SimpleSavedObject<{ references: SavedObjectReference[]; id?: string }>[] + >; +} diff --git a/types/services/index.ts b/types/services/index.ts index 20404cd89..3b4b12c9e 100644 --- a/types/services/index.ts +++ b/types/services/index.ts @@ -13,3 +13,4 @@ export * from './INotificationService'; export * from './IOpensearchService'; export * from './IRuleService'; export * from './ServerResponse'; +export * from './ISavedObjectsService';