fixup!

elastic · Mar 19, 2024 · cc31660 · cc31660
1 parent 36ee90c
commit cc31660
Showing 1 changed file with 24 additions and 23 deletions.
diff --git a/filebeat/module/elasticsearch/slowlog/test/es814_index_search_slowlog-json.log-expected.json b/filebeat/module/elasticsearch/slowlog/test/es814_index_search_slowlog-json.log-expected.json
@@ -6,11 +6,14 @@
         "elasticsearch.index.name": "my-index",
         "elasticsearch.node.id": "a8BUD2RfQSu4aqtpePX7BA",
         "elasticsearch.node.name": "runTask-0",
-        "elasticsearch.slowlog.id": "2",
+        "elasticsearch.slowlog.id": null,
         "elasticsearch.slowlog.search_type": "QUERY_THEN_FETCH",
         "elasticsearch.slowlog.source": "{\\\"query\\\":{\\\"match_none\\\":{\\\"boost\\\":1.0}}}",
         "elasticsearch.slowlog.took": "7.7ms",
         "elasticsearch.slowlog.total_hits": "0 hits",
+        "elasticsearch.shard.id": "0",
+        "elasticsearch.slowlog.stats": "[]",
+        "elasticsearch.slowlog.total_shards": 1,
         "event.dataset": "elasticsearch.index_search_slowlog",
         "event.type": "info",
         "event.kind": "event",
@@ -21,17 +24,13 @@
         "log.offset": 0,
         "message": "[my-index][0]",
         "service.type": "elasticsearch",
-        "elasticsearch.slowlog.auth.type": "REALM",
-        "elasticsearch.index.id": "0",
         "event.category": "database",
-        "user.name": "elastic",
-        "elasticsearch.slowlog.user.realm": "reserved",
         "ecs.version": "1.2.0",
         "service.name": "ES_ECS",
         "event.duration": 7000000,
         "event.module": "elasticsearch",
-        "process.thread.name": "elasticsearch[runTask-0][write][T#7]",
-        "log.logger": "index.indexing.slowlog.index"
+        "process.thread.name": "elasticsearch[runTask-0][search][T#3]",
+        "log.logger": "index.search.slowlog.query"
     },
     {
         "@timestamp": "2024-03-13T09:43:56.663Z",
@@ -40,32 +39,31 @@
         "elasticsearch.index.name": "my-index",
         "elasticsearch.node.id": "a8BUD2RfQSu4aqtpePX7BA",
         "elasticsearch.node.name": "runTask-0",
-        "elasticsearch.slowlog.id": "2",
+        "elasticsearch.slowlog.id": null,
         "elasticsearch.slowlog.search_type": "QUERY_THEN_FETCH",
-        "elasticsearch.slowlog.source": "elasticsearch.slowlog.source":"{\\\"query\\\":{\\\"match_none\\\":{\\\"boost\\\":1.0}}}",
+        "elasticsearch.slowlog.source": "{\\\"query\\\":{\\\"match_none\\\":{\\\"boost\\\":1.0}}}",
         "elasticsearch.slowlog.took": "946.6micros",
         "elasticsearch.slowlog.total_hits": "0 hits",
+        "elasticsearch.shard.id": "0",
+        "elasticsearch.slowlog.total_shards": 1,
+        "elasticsearch.slowlog.stats": "[]",
         "event.dataset": "elasticsearch.index_search_slowlog",
         "event.type": "info",
         "event.kind": "event",
         "fileset.name": "slowlog",
         "host.id": "a8BUD2RfQSu4aqtpePX7BA",
         "input.type": "log",
         "log.level": "WARN",
-        "log.offset": 0,
+        "log.offset": 869,
         "message": "[my-index][0]",
         "service.type": "elasticsearch",
-        "elasticsearch.slowlog.auth.type": "REALM",
-        "elasticsearch.index.id": "0",
         "event.category": "database",
-        "user.name": "elastic",
-        "elasticsearch.slowlog.user.realm": "reserved",
         "ecs.version": "1.2.0",
         "service.name": "ES_ECS",
-        "event.duration": 900000,
+        "event.duration": 0,
         "event.module": "elasticsearch",
-        "process.thread.name": "elasticsearch[runTask-0][write][T#7]",
-        "log.logger": "index.indexing.slowlog.index"
+        "process.thread.name": "elasticsearch[runTask-0][search][T#6]",
+        "log.logger": "index.search.slowlog.query"
     },
     {
         "@timestamp": "2024-03-13T09:44:20.724Z",
@@ -74,30 +72,33 @@
         "elasticsearch.index.name": "my-index",
         "elasticsearch.node.id": "a8BUD2RfQSu4aqtpePX7BA",
         "elasticsearch.node.name": "runTask-0",
-        "elasticsearch.slowlog.id": "2",
+        "elasticsearch.slowlog.id": null,
         "elasticsearch.slowlog.search_type": "QUERY_THEN_FETCH",
         "elasticsearch.slowlog.source": "{\\\"query\\\":{\\\"match_none\\\":{\\\"boost\\\":1.0}}}",
         "elasticsearch.slowlog.took": "509.5micros",
         "elasticsearch.slowlog.total_hits": "0 hits",
+        "elasticsearch.shard.id": "0",
+        "elasticsearch.slowlog.stats": "[]",
+        "elasticsearch.slowlog.total_shards": 1,
         "event.type": "info",
         "event.kind": "event",
+        "event.dataset": "elasticsearch.index_search_slowlog",
         "fileset.name": "slowlog",
         "host.id": "a8BUD2RfQSu4aqtpePX7BA",
         "input.type": "log",
         "log.level": "WARN",
-        "log.offset": 0,
+        "log.offset": 1744,
         "message": "[my-index][0]",
         "service.type": "elasticsearch",
         "elasticsearch.slowlog.auth.type": "REALM",
-        "elasticsearch.index.id": "0",
         "event.category": "database",
         "user.name": "elastic",
         "elasticsearch.slowlog.user.realm": "reserved",
         "ecs.version": "1.2.0",
         "service.name": "ES_ECS",
-        "event.duration": 500000,
+        "event.duration": 0,
         "event.module": "elasticsearch",
-        "process.thread.name": "elasticsearch[runTask-0][write][T#7]",
-        "log.logger": "index.indexing.slowlog.index"
+        "process.thread.name": "elasticsearch[runTask-0][search][T#8]",
+        "log.logger": "index.search.slowlog.query"
     }
 ]