211 lines
4.4 KiB
JSON
211 lines
4.4 KiB
JSON
{
|
|
"type": "record",
|
|
"name": "traffic_summary_log",
|
|
"namespace": "druid",
|
|
"doc": {
|
|
"partition_key": "__time",
|
|
"functions": {
|
|
"$ref": "public_schema_info.json#/functions"
|
|
},
|
|
"schema_query": {
|
|
"references": {
|
|
"$ref": "public_schema_info.json#/schema_query/references"
|
|
}
|
|
}
|
|
},
|
|
"fields": [
|
|
{
|
|
"name": "__time",
|
|
"label": "Time",
|
|
"type": "string",
|
|
"doc": {
|
|
"constraints": {
|
|
"type": "timestamp"
|
|
},
|
|
"visibility": "enabled"
|
|
}
|
|
},
|
|
{
|
|
"name": "data_center",
|
|
"label": "Data Center",
|
|
"type": "string",
|
|
"doc": {
|
|
"constraints": {
|
|
"operator_functions": "=,in"
|
|
},
|
|
"data": {
|
|
"$ref": "device_tag.json#",
|
|
"key": "$[?(@.tagType=='data_center')].subTags.[?(@.tagType=='data_center')]['tagValue']",
|
|
"value": "$[?(@.tagType=='data_center')].subTags.[?(@.tagType=='data_center')]['tagName']"
|
|
},
|
|
"visibility": "enabled"
|
|
}
|
|
},
|
|
{
|
|
"name": "device_group",
|
|
"label": "Device Group",
|
|
"type": "string",
|
|
"doc": {
|
|
"constraints": {
|
|
"operator_functions": "=,in"
|
|
},
|
|
"data": {
|
|
"$ref": "device_tag.json#",
|
|
"key": "$[?(@.tagType=='device_group')].subTags.[?(@.tagType=='device_group')]['tagValue']",
|
|
"value": "$[?(@.tagType=='device_group')].subTags.[?(@.tagType=='device_group')]['tagName']"
|
|
},
|
|
"visibility": "enabled"
|
|
}
|
|
},
|
|
{
|
|
"name": "isp",
|
|
"label": "ISP",
|
|
"type": "string",
|
|
"doc": {
|
|
"visibility": "disabled"
|
|
}
|
|
},
|
|
{
|
|
"name": "entrance_id",
|
|
"label": "Entrance ID",
|
|
"type": "long",
|
|
"doc": {
|
|
"visibility": "disabled"
|
|
}
|
|
},
|
|
{
|
|
"name": "schema_type",
|
|
"label": "Schema Type",
|
|
"type": "string",
|
|
"doc": {
|
|
"data": [
|
|
{
|
|
"code": "BASE",
|
|
"value": "BASE"
|
|
},
|
|
{
|
|
"code": "MAIL",
|
|
"value": "MAIL"
|
|
},
|
|
{
|
|
"code": "DNS",
|
|
"value": "DNS"
|
|
},
|
|
{
|
|
"code": "HTTP",
|
|
"value": "HTTP"
|
|
},
|
|
{
|
|
"code": "SSL",
|
|
"value": "SSL"
|
|
},
|
|
{
|
|
"code": "QUIC",
|
|
"value": "QUIC"
|
|
},
|
|
{
|
|
"code": "FTP",
|
|
"value": "FTP"
|
|
},
|
|
{
|
|
"code": "SSH",
|
|
"value": "SSH"
|
|
},
|
|
{
|
|
"code": "Stratum",
|
|
"value": "Stratum"
|
|
}
|
|
],
|
|
"visibility": "enabled"
|
|
}
|
|
},
|
|
{
|
|
"name": "ip_object",
|
|
"label": "IP Object",
|
|
"doc": {
|
|
"visibility": "enabled"
|
|
},
|
|
"type": "string"
|
|
},
|
|
{
|
|
"name": "sessions",
|
|
"label": "Sessions",
|
|
"doc": {
|
|
"visibility": "enabled"
|
|
},
|
|
"type": "long"
|
|
},
|
|
{
|
|
"name": "c2s_byte_num",
|
|
"label": "Bytes Sent",
|
|
"doc": {
|
|
"visibility": "enabled"
|
|
},
|
|
"type": "long"
|
|
},
|
|
{
|
|
"name": "s2c_byte_num",
|
|
"label": "Bytes Received",
|
|
"doc": {
|
|
"visibility": "enabled"
|
|
},
|
|
"type": "long"
|
|
},
|
|
{
|
|
"name": "c2s_pkt_num",
|
|
"label": "Packets Sent",
|
|
"doc": {
|
|
"visibility": "enabled"
|
|
},
|
|
"type": "long"
|
|
},
|
|
{
|
|
"name": "s2c_pkt_num",
|
|
"label": "Packets Received",
|
|
"doc": {
|
|
"visibility": "enabled"
|
|
},
|
|
"type": "long"
|
|
},
|
|
{
|
|
"name": "one_sided_connections",
|
|
"label": "One Sided Connections",
|
|
"doc": {
|
|
"visibility": "enabled"
|
|
},
|
|
"type": "long"
|
|
},
|
|
{
|
|
"name": "uncategorized_bytes",
|
|
"label": "Uncategorized Bytes",
|
|
"doc": {
|
|
"visibility": "enabled"
|
|
},
|
|
"type": "long"
|
|
},
|
|
{
|
|
"name": "fragmentation_packets",
|
|
"label": "Fragmentation Packets",
|
|
"doc": {
|
|
"visibility": "enabled"
|
|
},
|
|
"type": "long"
|
|
},
|
|
{
|
|
"name": "sequence_gap_loss",
|
|
"label": "Sequence Gap Loss",
|
|
"doc": {
|
|
"visibility": "enabled"
|
|
},
|
|
"type": "long"
|
|
},
|
|
{
|
|
"name": "unorder_packets",
|
|
"label": "Unorder Packets",
|
|
"doc": {
|
|
"visibility": "enabled"
|
|
},
|
|
"type": "long"
|
|
}
|
|
]
|
|
} |