From 84f1691142c523134c887735507fa6107f78307f Mon Sep 17 00:00:00 2001 From: Andrew Kroh Date: Sun, 31 Jan 2021 10:30:27 -0500 Subject: [PATCH 1/4] Add field definitions for known Netflow/IPFIX vendor fields Closes #23771 --- CHANGELOG.next.asciidoc | 1 + filebeat/docs/fields.asciidoc | 6223 +++++++++++++++++ .../filebeat/input/netflow/_meta/fields.yml | 2667 +++++++ .../input/netflow/decoder/fields/gen.go | 5 + x-pack/filebeat/input/netflow/doc.go | 3 + x-pack/filebeat/input/netflow/fields.go | 2 +- x-pack/filebeat/input/netflow/fields_gen.go | 39 +- 7 files changed, 8926 insertions(+), 14 deletions(-) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 9305d523f7f6..0c9f5413327a 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -825,6 +825,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d - Populate `source.mac` and `destination.mac` for Suricata EVE events. {issue}23706[23706] {pull}23721[23721] - Added RFC6587 framing option for tcp and unix inputs {issue}23663[23663] {pull}23724[23724] - Added string splitting for httpjson input {pull}24022[24022] +- Added field mappings for Netflow/IPFIX vendor fields that are known to Filebeat. {issue}23771[23771] *Heartbeat* diff --git a/filebeat/docs/fields.asciidoc b/filebeat/docs/fields.asciidoc index 42e2d318a998..b92dd29a6e7b 100644 --- a/filebeat/docs/fields.asciidoc +++ b/filebeat/docs/fields.asciidoc @@ -97529,6 +97529,6229 @@ type: short -- +*`netflow.initial_tcp_flags`*:: ++ +-- +type: short + +-- + +*`netflow.union_tcp_flags`*:: ++ +-- +type: short + +-- + +*`netflow.payload`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_flow_delta_milliseconds`*:: ++ +-- +type: long + +-- + +*`netflow.silk_app_label`*:: ++ +-- +type: integer + +-- + +*`netflow.payload_entropy`*:: ++ +-- +type: short + +-- + +*`netflow.os_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.os_version`*:: ++ +-- +type: keyword + +-- + +*`netflow.first_packet_banner`*:: ++ +-- +type: keyword + +-- + +*`netflow.second_packet_banner`*:: ++ +-- +type: keyword + +-- + +*`netflow.flow_attributes`*:: ++ +-- +type: integer + +-- + +*`netflow.expired_fragment_count`*:: ++ +-- +type: long + +-- + +*`netflow.assembled_fragment_count`*:: ++ +-- +type: long + +-- + +*`netflow.mean_flow_rate`*:: ++ +-- +type: long + +-- + +*`netflow.mean_packet_rate`*:: ++ +-- +type: long + +-- + +*`netflow.flow_table_flush_event_count`*:: ++ +-- +type: long + +-- + +*`netflow.flow_table_peak_count`*:: ++ +-- +type: long + +-- + +*`netflow.os_finger_print`*:: ++ +-- +type: keyword + +-- + +*`netflow.tftp_filename`*:: ++ +-- +type: keyword + +-- + +*`netflow.tftp_mode`*:: ++ +-- +type: keyword + +-- + +*`netflow.dns_query_response`*:: ++ +-- +type: short + +-- + +*`netflow.dns_qr_type`*:: ++ +-- +type: integer + +-- + +*`netflow.dns_authoritative`*:: ++ +-- +type: short + +-- + +*`netflow.dns_nx_domain`*:: ++ +-- +type: short + +-- + +*`netflow.dns_rr_section`*:: ++ +-- +type: short + +-- + +*`netflow.dns_qname`*:: ++ +-- +type: keyword + +-- + +*`netflow.dns_cname`*:: ++ +-- +type: keyword + +-- + +*`netflow.dns_mx_preference`*:: ++ +-- +type: integer + +-- + +*`netflow.dns_mx_exchange`*:: ++ +-- +type: keyword + +-- + +*`netflow.dns_nsd_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.dns_ptrd_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.ssl_cipher`*:: ++ +-- +type: keyword + +-- + +*`netflow.ssl_client_version`*:: ++ +-- +type: short + +-- + +*`netflow.ssl_server_cipher`*:: ++ +-- +type: long + +-- + +*`netflow.ssl_compression_method`*:: ++ +-- +type: short + +-- + +*`netflow.ssl_cert_version`*:: ++ +-- +type: short + +-- + +*`netflow.ssl_cert_signature`*:: ++ +-- +type: keyword + +-- + +*`netflow.dns_ttl`*:: ++ +-- +type: long + +-- + +*`netflow.dns_txt_data`*:: ++ +-- +type: keyword + +-- + +*`netflow.dns_soa_serial`*:: ++ +-- +type: long + +-- + +*`netflow.dns_soa_refresh`*:: ++ +-- +type: long + +-- + +*`netflow.dns_soa_retry`*:: ++ +-- +type: long + +-- + +*`netflow.dns_soa_expire`*:: ++ +-- +type: long + +-- + +*`netflow.dns_soa_minimum`*:: ++ +-- +type: long + +-- + +*`netflow.dns_soam_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.dns_soar_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.dns_srv_priority`*:: ++ +-- +type: integer + +-- + +*`netflow.dns_srv_weight`*:: ++ +-- +type: integer + +-- + +*`netflow.dns_srv_port`*:: ++ +-- +type: integer + +-- + +*`netflow.dns_srv_target`*:: ++ +-- +type: integer + +-- + +*`netflow.tcp_urg_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.dns_id`*:: ++ +-- +type: integer + +-- + +*`netflow.ssl_cert_serial_number`*:: ++ +-- +type: keyword + +-- + +*`netflow.ssl_object_type`*:: ++ +-- +type: keyword + +-- + +*`netflow.ssl_object_value`*:: ++ +-- +type: keyword + +-- + +*`netflow.ssl_cert_validity_not_before`*:: ++ +-- +type: keyword + +-- + +*`netflow.ssl_cert_validity_not_after`*:: ++ +-- +type: keyword + +-- + +*`netflow.ssl_public_key_algorithm`*:: ++ +-- +type: keyword + +-- + +*`netflow.ssl_public_key_length`*:: ++ +-- +type: keyword + +-- + +*`netflow.rtp_payload_type`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_rtp_payload_type`*:: ++ +-- +type: short + +-- + +*`netflow.mptcp_initial_data_sequence_number`*:: ++ +-- +type: long + +-- + +*`netflow.mptcp_receiver_token`*:: ++ +-- +type: long + +-- + +*`netflow.mptcp_maximum_segment_size`*:: ++ +-- +type: integer + +-- + +*`netflow.mptcp_address_id`*:: ++ +-- +type: short + +-- + +*`netflow.mptcp_flags`*:: ++ +-- +type: short + +-- + +*`netflow.ssl_server_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.ssl_certificate_hash`*:: ++ +-- +type: keyword + +-- + +*`netflow.small_packet_count`*:: ++ +-- +type: long + +-- + +*`netflow.non_empty_packet_count`*:: ++ +-- +type: long + +-- + +*`netflow.data_byte_count`*:: ++ +-- +type: long + +-- + +*`netflow.average_interarrival_time`*:: ++ +-- +type: long + +-- + +*`netflow.standard_deviation_interarrival_time`*:: ++ +-- +type: long + +-- + +*`netflow.first_non_empty_packet_size`*:: ++ +-- +type: integer + +-- + +*`netflow.max_packet_size`*:: ++ +-- +type: integer + +-- + +*`netflow.first_eight_non_empty_packet_directions`*:: ++ +-- +type: short + +-- + +*`netflow.standard_deviation_payload_length`*:: ++ +-- +type: short + +-- + +*`netflow.large_packet_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_initial_tcp_flags`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_union_tcp_flags`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_payload`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_payload_entropy`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_os_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_os_version`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_first_packet_banner`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_second_packet_banner`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_flow_attributes`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_os_finger_print`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_rtp_payload_type`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_small_packet_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_non_empty_packet_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_data_byte_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_average_interarrival_time`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_standard_deviation_interarrival_time`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_first_non_empty_packet_size`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_max_packet_size`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_standard_deviation_payload_length`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_large_packet_count`*:: ++ +-- +type: long + +-- + +*`netflow.policy_qos_classification_hierarchy`*:: ++ +-- +type: long + +-- + +*`netflow.waasoptimization_segment`*:: ++ +-- +type: short + +-- + +*`netflow.art_clientpackets`*:: ++ +-- +type: long + +-- + +*`netflow.art_serverpackets`*:: ++ +-- +type: long + +-- + +*`netflow.art_count_retransmissions`*:: ++ +-- +type: long + +-- + +*`netflow.art_count_transactions`*:: ++ +-- +type: long + +-- + +*`netflow.art_total_transaction_time_sum`*:: ++ +-- +type: long + +-- + +*`netflow.art_total_transaction_time_maximum`*:: ++ +-- +type: long + +-- + +*`netflow.art_total_transaction_time_minimum`*:: ++ +-- +type: long + +-- + +*`netflow.art_count_new_connections`*:: ++ +-- +type: long + +-- + +*`netflow.art_count_responses`*:: ++ +-- +type: long + +-- + +*`netflow.art_count_responses_histogram_bucket1`*:: ++ +-- +type: long + +-- + +*`netflow.art_count_responses_histogram_bucket2`*:: ++ +-- +type: long + +-- + +*`netflow.art_count_responses_histogram_bucket3`*:: ++ +-- +type: long + +-- + +*`netflow.art_count_responses_histogram_bucket4`*:: ++ +-- +type: long + +-- + +*`netflow.art_count_responses_histogram_bucket5`*:: ++ +-- +type: long + +-- + +*`netflow.art_count_responses_histogram_bucket6`*:: ++ +-- +type: long + +-- + +*`netflow.art_count_responses_histogram_bucket7`*:: ++ +-- +type: long + +-- + +*`netflow.art_count_late_responses`*:: ++ +-- +type: long + +-- + +*`netflow.art_response_time_sum`*:: ++ +-- +type: long + +-- + +*`netflow.art_response_time_maximum`*:: ++ +-- +type: long + +-- + +*`netflow.art_response_time_minimum`*:: ++ +-- +type: long + +-- + +*`netflow.art_server_response_time_sum`*:: ++ +-- +type: long + +-- + +*`netflow.art_server_response_time_maximum`*:: ++ +-- +type: long + +-- + +*`netflow.art_server_response_time_minimum`*:: ++ +-- +type: long + +-- + +*`netflow.art_total_response_time_sum`*:: ++ +-- +type: long + +-- + +*`netflow.art_total_response_time_maximum`*:: ++ +-- +type: long + +-- + +*`netflow.art_total_response_time_minimum`*:: ++ +-- +type: long + +-- + +*`netflow.art_network_time_sum`*:: ++ +-- +type: long + +-- + +*`netflow.art_network_time_maximum`*:: ++ +-- +type: long + +-- + +*`netflow.art_network_time_minimum`*:: ++ +-- +type: long + +-- + +*`netflow.art_client_network_time_sum`*:: ++ +-- +type: long + +-- + +*`netflow.art_client_network_time_maximum`*:: ++ +-- +type: long + +-- + +*`netflow.art_client_network_time_minimum`*:: ++ +-- +type: long + +-- + +*`netflow.art_server_network_time_sum`*:: ++ +-- +type: long + +-- + +*`netflow.art_server_network_time_maximum`*:: ++ +-- +type: long + +-- + +*`netflow.art_server_network_time_minimum`*:: ++ +-- +type: long + +-- + +*`netflow.application_http_uri_statistics`*:: ++ +-- +type: short + +-- + +*`netflow.policy_qos_queueindex`*:: ++ +-- +type: long + +-- + +*`netflow.policy_qos_queue_index`*:: ++ +-- +type: long + +-- + +*`netflow.policy_qos_queuedrops`*:: ++ +-- +type: long + +-- + +*`netflow.application_category_name`*:: ++ +-- +type: long + +-- + +*`netflow.application_sub_category_name`*:: ++ +-- +type: long + +-- + +*`netflow.application_group_name`*:: ++ +-- +type: long + +-- + +*`netflow.application_http_user-agent`*:: ++ +-- +type: short + +-- + +*`netflow.application_traffic-class`*:: ++ +-- +type: long + +-- + +*`netflow.application_business-relevance`*:: ++ +-- +type: long + +-- + +*`netflow.timestamp_absolute_monitoring-interval`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_round_trip_time`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_transaction_id`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_http_req_url`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_http_req_cookie`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_flow_flags`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_connection_id`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_syslog_priority`*:: ++ +-- +type: short + +-- + +*`netflow.netscaler_syslog_message`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_syslog_timestamp`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_http_req_referer`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_http_req_method`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_http_req_host`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_http_req_user_agent`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_http_rsp_status`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_http_rsp_len`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_server_ttfb`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_server_ttlb`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_app_name_incarnation_number`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_app_name_app_id`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_app_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_http_req_rcv_fb`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_http_req_forw_fb`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_http_res_rcv_fb`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_http_res_forw_fb`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_http_req_rcv_lb`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_http_req_forw_lb`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_main_page_id`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_main_page_core_id`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_http_client_interaction_start_time`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_http_client_render_end_time`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_http_client_render_start_time`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_app_template_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_http_client_interaction_end_time`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_http_res_rcv_lb`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_http_res_forw_lb`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_app_unit_name_app_id`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_db_login_flags`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_db_req_type`*:: ++ +-- +type: short + +-- + +*`netflow.netscaler_db_protocol_name`*:: ++ +-- +type: short + +-- + +*`netflow.netscaler_db_user_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_db_database_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_db_clt_host_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_db_req_string`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_db_resp_status_string`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_db_resp_status`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_db_resp_length`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_client_rtt`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_http_content_type`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_http_req_authorization`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_http_req_via`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_http_res_location`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_http_res_set_cookie`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_http_res_set_cookie2`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_http_req_xforwarded_for`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_connection_chain_id`*:: ++ +-- +type: short + +-- + +*`netflow.netscaler_connection_chain_hop_count`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_session_guid`*:: ++ +-- +type: short + +-- + +*`netflow.netscale_ica_client_version`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_ica_client_type`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_ica_client_ip`*:: ++ +-- +type: ip + +-- + +*`netflow.netscaler_ica_client_host_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_aaa_username`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_ica_domain_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_ica_client_launcher`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_ica_session_setup_time`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_server_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_ica_session_reconnects`*:: ++ +-- +type: short + +-- + +*`netflow.netscaler_ica_rtt`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_clientside_rx_bytes`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_clientside_tx_bytes`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_clientside_packets_retransmit`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_ica_serverside_packets_retransmit`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_ica_clientside_rtt`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_serverside_rtt`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_session_update_begin_sec`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_session_update_end_sec`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_channel_id1`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_channel_id1_bytes`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_channel_id2`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_channel_id2_bytes`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_channel_id3`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_channel_id3_bytes`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_channel_id4`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_channel_id4_bytes`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_channel_id5`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_channel_id5_bytes`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_connection_priority`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_application_startup_duration`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_launch_mechanism`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_ica_application_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_application_startup_time`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_application_termination_type`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_ica_application_termination_time`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_session_end_time`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_clientside_jitter`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_serverside_jitter`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_app_process_id`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_app_module_path`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_ica_device_serial_no`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_msi_client_cookie`*:: ++ +-- +type: short + +-- + +*`netflow.netscaler_ica_flags`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_username`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_license_type`*:: ++ +-- +type: short + +-- + +*`netflow.netscaler_max_license_count`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_current_license_consumed`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_network_update_start_time`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_network_update_end_time`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_clientside_srtt`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_serverside_srtt`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_clientside_delay`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_serverside_delay`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_host_delay`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_client_side_window_size`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_ica_server_side_window_size`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_ica_client_side_rto_count`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_ica_server_side_rto_count`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_ica_l7_client_latency`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_ica_l7_server_latency`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_http_domain_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_cache_redir_client_connection_core_id`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_cache_redir_client_connection_transaction_id`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown270`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown271`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown272`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown273`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown274`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown275`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown276`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown277`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown278`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown279`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown280`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown281`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown282`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown283`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown284`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown285`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown286`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown287`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown288`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown289`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown290`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown291`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown292`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown293`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown294`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown295`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown296`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown297`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown298`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown299`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown300`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown301`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown302`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown303`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown304`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown305`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown306`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown307`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown308`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown309`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown310`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown311`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown312`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown313`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown314`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown315`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown316`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_unknown317`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown318`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown319`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_unknown320`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_unknown321`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown322`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown323`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_unknown324`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_unknown325`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_unknown326`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_unknown327`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown328`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_unknown329`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_unknown330`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_unknown331`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_unknown332`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown333`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_unknown334`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_unknown335`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown336`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown337`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown338`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown339`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown340`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown341`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown342`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown343`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown344`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown345`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown346`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown347`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown348`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_unknown349`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_unknown350`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_unknown351`*:: ++ +-- +type: keyword + +-- + +*`netflow.netscaler_unknown352`*:: ++ +-- +type: integer + +-- + +*`netflow.netscaler_unknown353`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown354`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown355`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown356`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown357`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown363`*:: ++ +-- +type: short + +-- + +*`netflow.netscaler_unknown383`*:: ++ +-- +type: short + +-- + +*`netflow.netscaler_unknown391`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown398`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown404`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown405`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown427`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown429`*:: ++ +-- +type: short + +-- + +*`netflow.netscaler_unknown432`*:: ++ +-- +type: short + +-- + +*`netflow.netscaler_unknown433`*:: ++ +-- +type: short + +-- + +*`netflow.netscaler_unknown453`*:: ++ +-- +type: long + +-- + +*`netflow.netscaler_unknown465`*:: ++ +-- +type: long + +-- + +*`netflow.fw_ext_event`*:: ++ +-- +type: integer + +-- + +*`netflow.fw_event_level`*:: ++ +-- +type: long + +-- + +*`netflow.fw_event_level_id`*:: ++ +-- +type: long + +-- + +*`netflow.fw_configured_value`*:: ++ +-- +type: long + +-- + +*`netflow.fw_cts_src_sgt`*:: ++ +-- +type: long + +-- + +*`netflow.fw_ext_event_alt`*:: ++ +-- +type: long + +-- + +*`netflow.fw_blackout_secs`*:: ++ +-- +type: long + +-- + +*`netflow.fw_half_open_high`*:: ++ +-- +type: long + +-- + +*`netflow.fw_half_open_rate`*:: ++ +-- +type: long + +-- + +*`netflow.fw_zone_pair_id`*:: ++ +-- +type: long + +-- + +*`netflow.fw_max_sessions`*:: ++ +-- +type: long + +-- + +*`netflow.fw_zone_pair_name`*:: ++ +-- +type: long + +-- + +*`netflow.fw_ext_event_desc`*:: ++ +-- +type: keyword + +-- + +*`netflow.fw_summary_pkt_count`*:: ++ +-- +type: long + +-- + +*`netflow.fw_half_open_count`*:: ++ +-- +type: long + +-- + +*`netflow.username`*:: ++ +-- +type: keyword + +-- + +*`netflow.xlate_source_address_ip_v4`*:: ++ +-- +type: ip + +-- + +*`netflow.xlate_destination_address_ip_v4`*:: ++ +-- +type: ip + +-- + +*`netflow.xlate_source_port`*:: ++ +-- +type: integer + +-- + +*`netflow.xlate_destination_port`*:: ++ +-- +type: integer + +-- + +*`netflow.firewall_event`*:: ++ +-- +type: short + +-- + +*`netflow.nat_inside_svcid`*:: ++ +-- +type: integer + +-- + +*`netflow.nat_outside_svcid`*:: ++ +-- +type: integer + +-- + +*`netflow.nat_sub_string`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_l7_app_id`*:: ++ +-- +type: long + +-- + +*`netflow.ixia_l7_app_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_src_country_code`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_src_country_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_src_region_code`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_src_region_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_src_city_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_src_latitude`*:: ++ +-- +type: float + +-- + +*`netflow.ixia_src_longitude`*:: ++ +-- +type: float + +-- + +*`netflow.ixia_dst_country_code`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_dst_country_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_dst_region_code`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_dst_region_node`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_dst_city_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_dst_latitude`*:: ++ +-- +type: float + +-- + +*`netflow.ixia_dst_longitude`*:: ++ +-- +type: float + +-- + +*`netflow.ixia_device_id`*:: ++ +-- +type: short + +-- + +*`netflow.ixia_device_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_browser_id`*:: ++ +-- +type: short + +-- + +*`netflow.ixia_browser_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_rev_octet_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.ixia_rev_packet_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.ixia_encrypt_type`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_encrypt_cipher`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_encrypt_key_length`*:: ++ +-- +type: integer + +-- + +*`netflow.ixia_imsi_subscriber`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_http_user_agent`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_http_host_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_http_uri`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_dns_record_txt`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_src_as_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_dst_as_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_latency`*:: ++ +-- +type: long + +-- + +*`netflow.ixia_dns_query`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_dns_answer`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_dns_classes`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_threat_type`*:: ++ +-- +type: keyword + +-- + +*`netflow.ixia_threat_ipv4`*:: ++ +-- +type: ip + +-- + +*`netflow.ixia_threat_ipv6`*:: ++ +-- +type: ip + +-- + +*`netflow.vmware_tenant_protocol`*:: ++ +-- +type: short + +-- + +*`netflow.vmware_tenant_source_ipv4`*:: ++ +-- +type: ip + +-- + +*`netflow.vmware_tenant_dest_ipv4`*:: ++ +-- +type: ip + +-- + +*`netflow.vmware_tenant_source_ipv6`*:: ++ +-- +type: ip + +-- + +*`netflow.vmware_tenant_dest_ipv6`*:: ++ +-- +type: ip + +-- + +*`netflow.vmware_tenant_source_port`*:: ++ +-- +type: integer + +-- + +*`netflow.vmware_tenant_dest_port`*:: ++ +-- +type: integer + +-- + +*`netflow.vmware_egress_interface_attr`*:: ++ +-- +type: integer + +-- + +*`netflow.vmware_vxlan_export_role`*:: ++ +-- +type: short + +-- + +*`netflow.vmware_ingress_interface_attr`*:: ++ +-- +type: integer + +-- + +*`netflow.afc_protocol`*:: ++ +-- +type: integer + +-- + +*`netflow.afc_protocol_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.flow_direction`*:: ++ +-- +type: short + +-- + +*`netflow.timestamp`*:: ++ +-- +type: long + +-- + +*`netflow.log_op`*:: ++ +-- +type: short + +-- + +*`netflow.traffic_type`*:: ++ +-- +type: short + +-- + +*`netflow.fw_rule`*:: ++ +-- +type: keyword + +-- + +*`netflow.service_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.reason`*:: ++ +-- +type: long + +-- + +*`netflow.reason_text`*:: ++ +-- +type: keyword + +-- + +*`netflow.bind_ipv4_address`*:: ++ +-- +type: ip + +-- + +*`netflow.bind_transport_port`*:: ++ +-- +type: integer + +-- + +*`netflow.conn_ipv4_address`*:: ++ +-- +type: ip + +-- + +*`netflow.conn_transport_port`*:: ++ +-- +type: integer + +-- + +*`netflow.audit_counter`*:: ++ +-- +type: long + +-- + +*`netflow.timestamp`*:: ++ +-- +type: long + +-- + +*`netflow.log_op`*:: ++ +-- +type: short + +-- + +*`netflow.traffic_type`*:: ++ +-- +type: short + +-- + +*`netflow.fw_rule`*:: ++ +-- +type: keyword + +-- + +*`netflow.service_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.reason`*:: ++ +-- +type: long + +-- + +*`netflow.reason_text`*:: ++ +-- +type: keyword + +-- + +*`netflow.bind_ipv4_address`*:: ++ +-- +type: ip + +-- + +*`netflow.bind_transport_port`*:: ++ +-- +type: integer + +-- + +*`netflow.conn_ipv4_address`*:: ++ +-- +type: ip + +-- + +*`netflow.conn_transport_port`*:: ++ +-- +type: integer + +-- + +*`netflow.audit_counter`*:: ++ +-- +type: long + +-- + +*`netflow.procera_service`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_base_service`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_incoming_octets`*:: ++ +-- +type: long + +-- + +*`netflow.procera_outgoing_octets`*:: ++ +-- +type: long + +-- + +*`netflow.procera_incoming_packets`*:: ++ +-- +type: long + +-- + +*`netflow.procera_outgoing_packets`*:: ++ +-- +type: long + +-- + +*`netflow.procera_incoming_shaping_latency`*:: ++ +-- +type: integer + +-- + +*`netflow.procera_outgoing_shaping_latency`*:: ++ +-- +type: integer + +-- + +*`netflow.procera_incoming_shaping_drops`*:: ++ +-- +type: long + +-- + +*`netflow.procera_outgoing_shaping_drops`*:: ++ +-- +type: long + +-- + +*`netflow.procera_internal_rtt`*:: ++ +-- +type: integer + +-- + +*`netflow.procera_external_rtt`*:: ++ +-- +type: integer + +-- + +*`netflow.procera_flow_behavior`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_content_categories`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_property`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_server_hostname`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_http_request_method`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_http_user_agent`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_http_content_type`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_http_url`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_http_referer`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_http_response_status`*:: ++ +-- +type: integer + +-- + +*`netflow.procera_http_file_length`*:: ++ +-- +type: long + +-- + +*`netflow.procera_http_location`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_http_language`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_subscriber_identifier`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_msisdn`*:: ++ +-- +type: long + +-- + +*`netflow.procera_imsi`*:: ++ +-- +type: long + +-- + +*`netflow.procera_rat`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_device_id`*:: ++ +-- +type: long + +-- + +*`netflow.procera_sgsn`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_rnc`*:: ++ +-- +type: integer + +-- + +*`netflow.procera_apn`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_user_location_information`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_ggsn`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_qoe_incoming_internal`*:: ++ +-- +type: float + +-- + +*`netflow.procera_qoe_incoming_external`*:: ++ +-- +type: float + +-- + +*`netflow.procera_qoe_outgoing_internal`*:: ++ +-- +type: float + +-- + +*`netflow.procera_qoe_outgoing_external`*:: ++ +-- +type: float + +-- + +*`netflow.procera_local_ipv4_host`*:: ++ +-- +type: ip + +-- + +*`netflow.procera_local_ipv6_host`*:: ++ +-- +type: ip + +-- + +*`netflow.procera_remote_ipv4_host`*:: ++ +-- +type: ip + +-- + +*`netflow.procera_remote_ipv6_host`*:: ++ +-- +type: ip + +-- + +*`netflow.procera_http_request_version`*:: ++ +-- +type: keyword + +-- + +*`netflow.procera_template_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.mark`*:: ++ +-- +type: long + +-- + +*`netflow.conntrack_id`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_octet_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_packet_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_delta_flow_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_protocol_identifier`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_ip_class_of_service`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_tcp_control_bits`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_source_transport_port`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_source_ipv4_address`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_source_ipv4_prefix_length`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_ingress_interface`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_destination_transport_port`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_destination_ipv4_address`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_destination_ipv4_prefix_length`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_egress_interface`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_ip_next_hop_ipv4_address`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_bgp_source_as_number`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_bgp_destination_as_number`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_bgp_next_hop_ipv4_address`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_post_mcast_packet_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_post_mcast_octet_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_flow_end_sys_up_time`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_flow_start_sys_up_time`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_post_octet_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_post_packet_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_minimum_ip_total_length`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_maximum_ip_total_length`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_source_ipv6_address`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_destination_ipv6_address`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_source_ipv6_prefix_length`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_destination_ipv6_prefix_length`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_flow_label_ipv6`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_icmp_type_code_ipv4`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_igmp_type`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_sampling_interval`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_sampling_algorithm`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_flow_active_timeout`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_flow_idle_timeout`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_engine_type`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_engine_id`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_ipv4_router_sc`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_source_ipv4_prefix`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_destination_ipv4_prefix`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_mpls_top_label_type`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_mpls_top_label_ipv4_address`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_sampler_id`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_sampler_mode`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_sampler_random_interval`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_class_id`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_minimum_ttl`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_maximum_ttl`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_fragment_identification`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_post_ip_class_of_service`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_source_mac_address`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_post_destination_mac_address`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_vlan_id`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_post_vlan_id`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_ip_version`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_flow_direction`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_ip_next_hop_ipv6_address`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_bgp_next_hop_ipv6_address`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_ipv6_extension_headers`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_mpls_top_label_stack_section`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_mpls_label_stack_section2`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_mpls_label_stack_section3`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_mpls_label_stack_section4`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_mpls_label_stack_section5`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_mpls_label_stack_section6`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_mpls_label_stack_section7`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_mpls_label_stack_section8`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_mpls_label_stack_section9`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_mpls_label_stack_section10`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_destination_mac_address`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_post_source_mac_address`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_interface_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_interface_description`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_sampler_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_octet_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_packet_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_flags_and_sampler_id`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_fragment_offset`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_forwarding_status`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_mpls_vpn_route_distinguisher`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_mpls_top_label_prefix_length`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_src_traffic_index`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_dst_traffic_index`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_application_description`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_application_id`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_application_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_post_ip_diff_serv_code_point`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_multicast_replication_factor`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_class_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_classification_engine_id`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_layer2packet_section_offset`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_layer2packet_section_size`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_layer2packet_section_data`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_bgp_next_adjacent_as_number`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_bgp_prev_adjacent_as_number`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_dropped_octet_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_dropped_packet_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_dropped_octet_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_dropped_packet_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_flow_end_reason`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_observation_point_id`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_icmp_type_code_ipv6`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_mpls_top_label_ipv6_address`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_line_card_id`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_port_id`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_metering_process_id`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_exporting_process_id`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_wlan_channel_id`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_wlan_ssid`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_flow_start_seconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_flow_end_seconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_flow_start_milliseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_flow_end_milliseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_flow_start_microseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_flow_end_microseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_flow_start_nanoseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_flow_end_nanoseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_flow_start_delta_microseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_flow_end_delta_microseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_system_init_time_milliseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_flow_duration_milliseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_flow_duration_microseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_destination_ipv6_prefix`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_source_ipv6_prefix`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_post_octet_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_post_packet_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_post_mcast_packet_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_post_mcast_octet_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_icmp_type_ipv4`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_icmp_code_ipv4`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_icmp_type_ipv6`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_icmp_code_ipv6`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_udp_source_port`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_udp_destination_port`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_tcp_source_port`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_tcp_destination_port`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_tcp_sequence_number`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_tcp_acknowledgement_number`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_tcp_window_size`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_tcp_urgent_pointer`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_tcp_header_length`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_ip_header_length`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_total_length_ipv4`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_payload_length_ipv6`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_ip_ttl`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_next_header_ipv6`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_mpls_payload_length`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_ip_diff_serv_code_point`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_ip_precedence`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_fragment_flags`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_octet_delta_sum_of_squares`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_octet_total_sum_of_squares`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_mpls_top_label_ttl`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_mpls_label_stack_length`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_mpls_label_stack_depth`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_mpls_top_label_exp`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_ip_payload_length`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_udp_message_length`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_is_multicast`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_ipv4_ihl`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_ipv4_options`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_tcp_options`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_tcp_syn_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_tcp_fin_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_tcp_rst_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_tcp_psh_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_tcp_ack_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_tcp_urg_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_ip_total_length`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_post_nat_source_ipv4_address`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_post_nat_destination_ipv4_address`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_post_napt_source_transport_port`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_post_napt_destination_transport_port`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_nat_originating_address_realm`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_nat_event`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_initiator_octets`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_responder_octets`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_firewall_event`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_ingress_vrfid`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_egress_vrfid`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_vr_fname`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_post_mpls_top_label_exp`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_tcp_window_scale`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_ethernet_header_length`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_ethernet_payload_length`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_ethernet_total_length`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_dot1q_vlan_id`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_dot1q_priority`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_dot1q_customer_vlan_id`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_dot1q_customer_priority`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_metro_evc_id`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_metro_evc_type`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_pseudo_wire_id`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_pseudo_wire_type`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_pseudo_wire_control_word`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_ingress_physical_interface`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_egress_physical_interface`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_post_dot1q_vlan_id`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_post_dot1q_customer_vlan_id`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_ethernet_type`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_post_ip_precedence`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_collection_time_milliseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_export_sctp_stream_id`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_max_export_seconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_max_flow_end_seconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_message_md5_checksum`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_message_scope`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_min_export_seconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_min_flow_start_seconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_opaque_octets`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_session_scope`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_max_flow_end_microseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_max_flow_end_milliseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_max_flow_end_nanoseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_min_flow_start_microseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_min_flow_start_milliseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_min_flow_start_nanoseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_collector_certificate`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_exporter_certificate`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_data_records_reliability`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_observation_point_type`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_new_connection_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_connection_sum_duration_seconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_connection_transaction_id`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_post_nat_source_ipv6_address`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_post_nat_destination_ipv6_address`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_nat_pool_id`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_nat_pool_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_anonymization_flags`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_anonymization_technique`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_information_element_index`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_p2p_technology`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_tunnel_technology`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_encrypted_technology`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_bgp_validity_state`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_ip_sec_spi`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_gre_key`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_nat_type`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_initiator_packets`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_responder_packets`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_observation_domain_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_selection_sequence_id`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_selector_id`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_information_element_id`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_selector_algorithm`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_sampling_packet_interval`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_sampling_packet_space`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_sampling_time_interval`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_sampling_time_space`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_sampling_size`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_sampling_population`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_sampling_probability`*:: ++ +-- +type: double + +-- + +*`netflow.reverse_data_link_frame_size`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_ip_header_packet_section`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_ip_payload_packet_section`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_data_link_frame_section`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_mpls_label_stack_section`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_mpls_payload_packet_section`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_selector_id_total_pkts_observed`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_selector_id_total_pkts_selected`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_absolute_error`*:: ++ +-- +type: double + +-- + +*`netflow.reverse_relative_error`*:: ++ +-- +type: double + +-- + +*`netflow.reverse_observation_time_seconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_observation_time_milliseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_observation_time_microseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_observation_time_nanoseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_digest_hash_value`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_hash_ip_payload_offset`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_hash_ip_payload_size`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_hash_output_range_min`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_hash_output_range_max`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_hash_selected_range_min`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_hash_selected_range_max`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_hash_digest_output`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_hash_initialiser_value`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_selector_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_upper_ci_limit`*:: ++ +-- +type: double + +-- + +*`netflow.reverse_lower_ci_limit`*:: ++ +-- +type: double + +-- + +*`netflow.reverse_confidence_level`*:: ++ +-- +type: double + +-- + +*`netflow.reverse_information_element_data_type`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_information_element_description`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_information_element_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_information_element_range_begin`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_information_element_range_end`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_information_element_semantics`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_information_element_units`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_private_enterprise_number`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_virtual_station_interface_id`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_virtual_station_interface_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_virtual_station_uuid`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_virtual_station_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_layer2_segment_id`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_layer2_octet_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_layer2_octet_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_ingress_unicast_packet_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_ingress_multicast_packet_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_ingress_broadcast_packet_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_egress_unicast_packet_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_egress_broadcast_packet_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_monitoring_interval_start_milli_seconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_monitoring_interval_end_milli_seconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_port_range_start`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_port_range_end`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_port_range_step_size`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_port_range_num_ports`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_sta_mac_address`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_sta_ipv4_address`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_wtp_mac_address`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_ingress_interface_type`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_egress_interface_type`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_rtp_sequence_number`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_user_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_application_category_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_application_sub_category_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_application_group_name`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_original_flows_present`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_original_flows_initiated`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_original_flows_completed`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_distinct_count_of_source_ip_address`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_distinct_count_of_destination_ip_address`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_distinct_count_of_source_ipv4_address`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_distinct_count_of_destination_ipv4_address`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_distinct_count_of_source_ipv6_address`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_distinct_count_of_destination_ipv6_address`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_value_distribution_method`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_rfc3550_jitter_milliseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_rfc3550_jitter_microseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_rfc3550_jitter_nanoseconds`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_dot1q_dei`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_dot1q_customer_dei`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_flow_selector_algorithm`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_flow_selected_octet_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_flow_selected_packet_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_flow_selected_flow_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_selector_id_total_flows_observed`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_selector_id_total_flows_selected`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_sampling_flow_interval`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_sampling_flow_spacing`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_flow_sampling_time_interval`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_flow_sampling_time_spacing`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_hash_flow_domain`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_transport_octet_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_transport_packet_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_original_exporter_ipv4_address`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_original_exporter_ipv6_address`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_original_observation_domain_id`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_intermediate_process_id`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_ignored_data_record_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_data_link_frame_type`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_section_offset`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_section_exported_octets`*:: ++ +-- +type: integer + +-- + +*`netflow.reverse_dot1q_service_instance_tag`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_dot1q_service_instance_id`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_dot1q_service_instance_priority`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_dot1q_customer_source_mac_address`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_dot1q_customer_destination_mac_address`*:: ++ +-- +type: keyword + +-- + +*`netflow.reverse_post_layer2_octet_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_post_mcast_layer2_octet_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_post_layer2_octet_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_post_mcast_layer2_octet_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_minimum_layer2_total_length`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_maximum_layer2_total_length`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_dropped_layer2_octet_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_dropped_layer2_octet_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_ignored_layer2_octet_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_not_sent_layer2_octet_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_layer2_octet_delta_sum_of_squares`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_layer2_octet_total_sum_of_squares`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_layer2_frame_delta_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_layer2_frame_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.reverse_pseudo_wire_destination_ipv4_address`*:: ++ +-- +type: ip + +-- + +*`netflow.reverse_ignored_layer2_frame_total_count`*:: ++ +-- +type: long + +-- + +*`netflow.viptela_vpn_id`*:: ++ +-- +type: long + +-- + [[exported-fields-netscout]] == Arbor Peakflow SP fields diff --git a/x-pack/filebeat/input/netflow/_meta/fields.yml b/x-pack/filebeat/input/netflow/_meta/fields.yml index f5a4c0823d58..2d971576e65d 100644 --- a/x-pack/filebeat/input/netflow/_meta/fields.yml +++ b/x-pack/filebeat/input/netflow/_meta/fields.yml @@ -1381,3 +1381,2670 @@ - name: vpn_identifier type: short + - name: initial_tcp_flags + type: short + + - name: union_tcp_flags + type: short + + - name: payload + type: keyword + + - name: reverse_flow_delta_milliseconds + type: long + + - name: silk_app_label + type: integer + + - name: payload_entropy + type: short + + - name: os_name + type: keyword + + - name: os_version + type: keyword + + - name: first_packet_banner + type: keyword + + - name: second_packet_banner + type: keyword + + - name: flow_attributes + type: integer + + - name: expired_fragment_count + type: long + + - name: assembled_fragment_count + type: long + + - name: mean_flow_rate + type: long + + - name: mean_packet_rate + type: long + + - name: flow_table_flush_event_count + type: long + + - name: flow_table_peak_count + type: long + + - name: os_finger_print + type: keyword + + - name: tftp_filename + type: keyword + + - name: tftp_mode + type: keyword + + - name: dns_query_response + type: short + + - name: dns_qr_type + type: integer + + - name: dns_authoritative + type: short + + - name: dns_nx_domain + type: short + + - name: dns_rr_section + type: short + + - name: dns_qname + type: keyword + + - name: dns_cname + type: keyword + + - name: dns_mx_preference + type: integer + + - name: dns_mx_exchange + type: keyword + + - name: dns_nsd_name + type: keyword + + - name: dns_ptrd_name + type: keyword + + - name: ssl_cipher + type: keyword + + - name: ssl_client_version + type: short + + - name: ssl_server_cipher + type: long + + - name: ssl_compression_method + type: short + + - name: ssl_cert_version + type: short + + - name: ssl_cert_signature + type: keyword + + - name: dns_ttl + type: long + + - name: dns_txt_data + type: keyword + + - name: dns_soa_serial + type: long + + - name: dns_soa_refresh + type: long + + - name: dns_soa_retry + type: long + + - name: dns_soa_expire + type: long + + - name: dns_soa_minimum + type: long + + - name: dns_soam_name + type: keyword + + - name: dns_soar_name + type: keyword + + - name: dns_srv_priority + type: integer + + - name: dns_srv_weight + type: integer + + - name: dns_srv_port + type: integer + + - name: dns_srv_target + type: integer + + - name: tcp_urg_total_count + type: long + + - name: dns_id + type: integer + + - name: ssl_cert_serial_number + type: keyword + + - name: ssl_object_type + type: keyword + + - name: ssl_object_value + type: keyword + + - name: ssl_cert_validity_not_before + type: keyword + + - name: ssl_cert_validity_not_after + type: keyword + + - name: ssl_public_key_algorithm + type: keyword + + - name: ssl_public_key_length + type: keyword + + - name: rtp_payload_type + type: short + + - name: reverse_rtp_payload_type + type: short + + - name: mptcp_initial_data_sequence_number + type: long + + - name: mptcp_receiver_token + type: long + + - name: mptcp_maximum_segment_size + type: integer + + - name: mptcp_address_id + type: short + + - name: mptcp_flags + type: short + + - name: ssl_server_name + type: keyword + + - name: ssl_certificate_hash + type: keyword + + - name: small_packet_count + type: long + + - name: non_empty_packet_count + type: long + + - name: data_byte_count + type: long + + - name: average_interarrival_time + type: long + + - name: standard_deviation_interarrival_time + type: long + + - name: first_non_empty_packet_size + type: integer + + - name: max_packet_size + type: integer + + - name: first_eight_non_empty_packet_directions + type: short + + - name: standard_deviation_payload_length + type: short + + - name: large_packet_count + type: long + + - name: reverse_initial_tcp_flags + type: short + + - name: reverse_union_tcp_flags + type: short + + - name: reverse_payload + type: keyword + + - name: reverse_payload_entropy + type: short + + - name: reverse_os_name + type: keyword + + - name: reverse_os_version + type: keyword + + - name: reverse_first_packet_banner + type: keyword + + - name: reverse_second_packet_banner + type: keyword + + - name: reverse_flow_attributes + type: integer + + - name: reverse_os_finger_print + type: keyword + + - name: reverse_rtp_payload_type + type: short + + - name: reverse_small_packet_count + type: long + + - name: reverse_non_empty_packet_count + type: long + + - name: reverse_data_byte_count + type: long + + - name: reverse_average_interarrival_time + type: long + + - name: reverse_standard_deviation_interarrival_time + type: long + + - name: reverse_first_non_empty_packet_size + type: integer + + - name: reverse_max_packet_size + type: integer + + - name: reverse_standard_deviation_payload_length + type: integer + + - name: reverse_large_packet_count + type: long + + - name: policy_qos_classification_hierarchy + type: long + + - name: waasoptimization_segment + type: short + + - name: art_clientpackets + type: long + + - name: art_serverpackets + type: long + + - name: art_count_retransmissions + type: long + + - name: art_count_transactions + type: long + + - name: art_total_transaction_time_sum + type: long + + - name: art_total_transaction_time_maximum + type: long + + - name: art_total_transaction_time_minimum + type: long + + - name: art_count_new_connections + type: long + + - name: art_count_responses + type: long + + - name: art_count_responses_histogram_bucket1 + type: long + + - name: art_count_responses_histogram_bucket2 + type: long + + - name: art_count_responses_histogram_bucket3 + type: long + + - name: art_count_responses_histogram_bucket4 + type: long + + - name: art_count_responses_histogram_bucket5 + type: long + + - name: art_count_responses_histogram_bucket6 + type: long + + - name: art_count_responses_histogram_bucket7 + type: long + + - name: art_count_late_responses + type: long + + - name: art_response_time_sum + type: long + + - name: art_response_time_maximum + type: long + + - name: art_response_time_minimum + type: long + + - name: art_server_response_time_sum + type: long + + - name: art_server_response_time_maximum + type: long + + - name: art_server_response_time_minimum + type: long + + - name: art_total_response_time_sum + type: long + + - name: art_total_response_time_maximum + type: long + + - name: art_total_response_time_minimum + type: long + + - name: art_network_time_sum + type: long + + - name: art_network_time_maximum + type: long + + - name: art_network_time_minimum + type: long + + - name: art_client_network_time_sum + type: long + + - name: art_client_network_time_maximum + type: long + + - name: art_client_network_time_minimum + type: long + + - name: art_server_network_time_sum + type: long + + - name: art_server_network_time_maximum + type: long + + - name: art_server_network_time_minimum + type: long + + - name: application_http_uri_statistics + type: short + + - name: policy_qos_queueindex + type: long + + - name: policy_qos_queue_index + type: long + + - name: policy_qos_queuedrops + type: long + + - name: application_category_name + type: long + + - name: application_sub_category_name + type: long + + - name: application_group_name + type: long + + - name: application_http_user-agent + type: short + + - name: application_traffic-class + type: long + + - name: application_business-relevance + type: long + + - name: timestamp_absolute_monitoring-interval + type: long + + - name: netscaler_round_trip_time + type: long + + - name: netscaler_transaction_id + type: long + + - name: netscaler_http_req_url + type: keyword + + - name: netscaler_http_req_cookie + type: keyword + + - name: netscaler_flow_flags + type: long + + - name: netscaler_connection_id + type: long + + - name: netscaler_syslog_priority + type: short + + - name: netscaler_syslog_message + type: keyword + + - name: netscaler_syslog_timestamp + type: long + + - name: netscaler_http_req_referer + type: keyword + + - name: netscaler_http_req_method + type: keyword + + - name: netscaler_http_req_host + type: keyword + + - name: netscaler_http_req_user_agent + type: keyword + + - name: netscaler_http_rsp_status + type: integer + + - name: netscaler_http_rsp_len + type: long + + - name: netscaler_server_ttfb + type: long + + - name: netscaler_server_ttlb + type: long + + - name: netscaler_app_name_incarnation_number + type: long + + - name: netscaler_app_name_app_id + type: long + + - name: netscaler_app_name + type: keyword + + - name: netscaler_http_req_rcv_fb + type: long + + - name: netscaler_http_req_forw_fb + type: long + + - name: netscaler_http_res_rcv_fb + type: long + + - name: netscaler_http_res_forw_fb + type: long + + - name: netscaler_http_req_rcv_lb + type: long + + - name: netscaler_http_req_forw_lb + type: long + + - name: netscaler_main_page_id + type: long + + - name: netscaler_main_page_core_id + type: long + + - name: netscaler_http_client_interaction_start_time + type: keyword + + - name: netscaler_http_client_render_end_time + type: keyword + + - name: netscaler_http_client_render_start_time + type: keyword + + - name: netscaler_app_template_name + type: keyword + + - name: netscaler_http_client_interaction_end_time + type: keyword + + - name: netscaler_http_res_rcv_lb + type: long + + - name: netscaler_http_res_forw_lb + type: long + + - name: netscaler_app_unit_name_app_id + type: long + + - name: netscaler_db_login_flags + type: long + + - name: netscaler_db_req_type + type: short + + - name: netscaler_db_protocol_name + type: short + + - name: netscaler_db_user_name + type: keyword + + - name: netscaler_db_database_name + type: keyword + + - name: netscaler_db_clt_host_name + type: keyword + + - name: netscaler_db_req_string + type: keyword + + - name: netscaler_db_resp_status_string + type: keyword + + - name: netscaler_db_resp_status + type: long + + - name: netscaler_db_resp_length + type: long + + - name: netscaler_client_rtt + type: long + + - name: netscaler_http_content_type + type: keyword + + - name: netscaler_http_req_authorization + type: keyword + + - name: netscaler_http_req_via + type: keyword + + - name: netscaler_http_res_location + type: keyword + + - name: netscaler_http_res_set_cookie + type: keyword + + - name: netscaler_http_res_set_cookie2 + type: keyword + + - name: netscaler_http_req_xforwarded_for + type: keyword + + - name: netscaler_connection_chain_id + type: short + + - name: netscaler_connection_chain_hop_count + type: long + + - name: netscaler_ica_session_guid + type: short + + - name: netscale_ica_client_version + type: keyword + + - name: netscaler_ica_client_type + type: integer + + - name: netscaler_ica_client_ip + type: ip + + - name: netscaler_ica_client_host_name + type: keyword + + - name: netscaler_aaa_username + type: keyword + + - name: netscaler_ica_domain_name + type: keyword + + - name: netscaler_ica_client_launcher + type: integer + + - name: netscaler_ica_session_setup_time + type: long + + - name: netscaler_ica_server_name + type: keyword + + - name: netscaler_ica_session_reconnects + type: short + + - name: netscaler_ica_rtt + type: long + + - name: netscaler_ica_clientside_rx_bytes + type: long + + - name: netscaler_ica_clientside_tx_bytes + type: long + + - name: netscaler_ica_clientside_packets_retransmit + type: integer + + - name: netscaler_ica_serverside_packets_retransmit + type: integer + + - name: netscaler_ica_clientside_rtt + type: long + + - name: netscaler_ica_serverside_rtt + type: long + + - name: netscaler_ica_session_update_begin_sec + type: long + + - name: netscaler_ica_session_update_end_sec + type: long + + - name: netscaler_ica_channel_id1 + type: long + + - name: netscaler_ica_channel_id1_bytes + type: long + + - name: netscaler_ica_channel_id2 + type: long + + - name: netscaler_ica_channel_id2_bytes + type: long + + - name: netscaler_ica_channel_id3 + type: long + + - name: netscaler_ica_channel_id3_bytes + type: long + + - name: netscaler_ica_channel_id4 + type: long + + - name: netscaler_ica_channel_id4_bytes + type: long + + - name: netscaler_ica_channel_id5 + type: long + + - name: netscaler_ica_channel_id5_bytes + type: long + + - name: netscaler_ica_connection_priority + type: integer + + - name: netscaler_application_startup_duration + type: long + + - name: netscaler_ica_launch_mechanism + type: integer + + - name: netscaler_ica_application_name + type: keyword + + - name: netscaler_application_startup_time + type: long + + - name: netscaler_ica_application_termination_type + type: integer + + - name: netscaler_ica_application_termination_time + type: long + + - name: netscaler_ica_session_end_time + type: long + + - name: netscaler_ica_clientside_jitter + type: long + + - name: netscaler_ica_serverside_jitter + type: long + + - name: netscaler_ica_app_process_id + type: long + + - name: netscaler_ica_app_module_path + type: keyword + + - name: netscaler_ica_device_serial_no + type: long + + - name: netscaler_msi_client_cookie + type: short + + - name: netscaler_ica_flags + type: long + + - name: netscaler_ica_username + type: keyword + + - name: netscaler_license_type + type: short + + - name: netscaler_max_license_count + type: long + + - name: netscaler_current_license_consumed + type: long + + - name: netscaler_ica_network_update_start_time + type: long + + - name: netscaler_ica_network_update_end_time + type: long + + - name: netscaler_ica_clientside_srtt + type: long + + - name: netscaler_ica_serverside_srtt + type: long + + - name: netscaler_ica_clientside_delay + type: long + + - name: netscaler_ica_serverside_delay + type: long + + - name: netscaler_ica_host_delay + type: long + + - name: netscaler_ica_client_side_window_size + type: integer + + - name: netscaler_ica_server_side_window_size + type: integer + + - name: netscaler_ica_client_side_rto_count + type: integer + + - name: netscaler_ica_server_side_rto_count + type: integer + + - name: netscaler_ica_l7_client_latency + type: long + + - name: netscaler_ica_l7_server_latency + type: long + + - name: netscaler_http_domain_name + type: keyword + + - name: netscaler_cache_redir_client_connection_core_id + type: long + + - name: netscaler_cache_redir_client_connection_transaction_id + type: long + + - name: netscaler_unknown270 + type: long + + - name: netscaler_unknown271 + type: long + + - name: netscaler_unknown272 + type: long + + - name: netscaler_unknown273 + type: long + + - name: netscaler_unknown274 + type: long + + - name: netscaler_unknown275 + type: long + + - name: netscaler_unknown276 + type: long + + - name: netscaler_unknown277 + type: long + + - name: netscaler_unknown278 + type: long + + - name: netscaler_unknown279 + type: long + + - name: netscaler_unknown280 + type: long + + - name: netscaler_unknown281 + type: long + + - name: netscaler_unknown282 + type: long + + - name: netscaler_unknown283 + type: long + + - name: netscaler_unknown284 + type: long + + - name: netscaler_unknown285 + type: long + + - name: netscaler_unknown286 + type: long + + - name: netscaler_unknown287 + type: long + + - name: netscaler_unknown288 + type: long + + - name: netscaler_unknown289 + type: long + + - name: netscaler_unknown290 + type: long + + - name: netscaler_unknown291 + type: long + + - name: netscaler_unknown292 + type: long + + - name: netscaler_unknown293 + type: long + + - name: netscaler_unknown294 + type: long + + - name: netscaler_unknown295 + type: long + + - name: netscaler_unknown296 + type: long + + - name: netscaler_unknown297 + type: long + + - name: netscaler_unknown298 + type: long + + - name: netscaler_unknown299 + type: long + + - name: netscaler_unknown300 + type: long + + - name: netscaler_unknown301 + type: long + + - name: netscaler_unknown302 + type: long + + - name: netscaler_unknown303 + type: long + + - name: netscaler_unknown304 + type: long + + - name: netscaler_unknown305 + type: long + + - name: netscaler_unknown306 + type: long + + - name: netscaler_unknown307 + type: long + + - name: netscaler_unknown308 + type: long + + - name: netscaler_unknown309 + type: long + + - name: netscaler_unknown310 + type: long + + - name: netscaler_unknown311 + type: long + + - name: netscaler_unknown312 + type: long + + - name: netscaler_unknown313 + type: long + + - name: netscaler_unknown314 + type: long + + - name: netscaler_unknown315 + type: long + + - name: netscaler_unknown316 + type: keyword + + - name: netscaler_unknown317 + type: long + + - name: netscaler_unknown318 + type: long + + - name: netscaler_unknown319 + type: keyword + + - name: netscaler_unknown320 + type: integer + + - name: netscaler_unknown321 + type: long + + - name: netscaler_unknown322 + type: long + + - name: netscaler_unknown323 + type: integer + + - name: netscaler_unknown324 + type: integer + + - name: netscaler_unknown325 + type: integer + + - name: netscaler_unknown326 + type: integer + + - name: netscaler_unknown327 + type: long + + - name: netscaler_unknown328 + type: integer + + - name: netscaler_unknown329 + type: integer + + - name: netscaler_unknown330 + type: integer + + - name: netscaler_unknown331 + type: integer + + - name: netscaler_unknown332 + type: long + + - name: netscaler_unknown333 + type: keyword + + - name: netscaler_unknown334 + type: keyword + + - name: netscaler_unknown335 + type: long + + - name: netscaler_unknown336 + type: long + + - name: netscaler_unknown337 + type: long + + - name: netscaler_unknown338 + type: long + + - name: netscaler_unknown339 + type: long + + - name: netscaler_unknown340 + type: long + + - name: netscaler_unknown341 + type: long + + - name: netscaler_unknown342 + type: long + + - name: netscaler_unknown343 + type: long + + - name: netscaler_unknown344 + type: long + + - name: netscaler_unknown345 + type: long + + - name: netscaler_unknown346 + type: long + + - name: netscaler_unknown347 + type: long + + - name: netscaler_unknown348 + type: integer + + - name: netscaler_unknown349 + type: keyword + + - name: netscaler_unknown350 + type: keyword + + - name: netscaler_unknown351 + type: keyword + + - name: netscaler_unknown352 + type: integer + + - name: netscaler_unknown353 + type: long + + - name: netscaler_unknown354 + type: long + + - name: netscaler_unknown355 + type: long + + - name: netscaler_unknown356 + type: long + + - name: netscaler_unknown357 + type: long + + - name: netscaler_unknown363 + type: short + + - name: netscaler_unknown383 + type: short + + - name: netscaler_unknown391 + type: long + + - name: netscaler_unknown398 + type: long + + - name: netscaler_unknown404 + type: long + + - name: netscaler_unknown405 + type: long + + - name: netscaler_unknown427 + type: long + + - name: netscaler_unknown429 + type: short + + - name: netscaler_unknown432 + type: short + + - name: netscaler_unknown433 + type: short + + - name: netscaler_unknown453 + type: long + + - name: netscaler_unknown465 + type: long + + - name: fw_ext_event + type: integer + + - name: fw_event_level + type: long + + - name: fw_event_level_id + type: long + + - name: fw_configured_value + type: long + + - name: fw_cts_src_sgt + type: long + + - name: fw_ext_event_alt + type: long + + - name: fw_blackout_secs + type: long + + - name: fw_half_open_high + type: long + + - name: fw_half_open_rate + type: long + + - name: fw_zone_pair_id + type: long + + - name: fw_max_sessions + type: long + + - name: fw_zone_pair_name + type: long + + - name: fw_ext_event_desc + type: keyword + + - name: fw_summary_pkt_count + type: long + + - name: fw_half_open_count + type: long + + - name: username + type: keyword + + - name: xlate_source_address_ip_v4 + type: ip + + - name: xlate_destination_address_ip_v4 + type: ip + + - name: xlate_source_port + type: integer + + - name: xlate_destination_port + type: integer + + - name: firewall_event + type: short + + - name: nat_inside_svcid + type: integer + + - name: nat_outside_svcid + type: integer + + - name: nat_sub_string + type: keyword + + - name: ixia_l7_app_id + type: long + + - name: ixia_l7_app_name + type: keyword + + - name: ixia_src_country_code + type: keyword + + - name: ixia_src_country_name + type: keyword + + - name: ixia_src_region_code + type: keyword + + - name: ixia_src_region_name + type: keyword + + - name: ixia_src_city_name + type: keyword + + - name: ixia_src_latitude + type: float + + - name: ixia_src_longitude + type: float + + - name: ixia_dst_country_code + type: keyword + + - name: ixia_dst_country_name + type: keyword + + - name: ixia_dst_region_code + type: keyword + + - name: ixia_dst_region_node + type: keyword + + - name: ixia_dst_city_name + type: keyword + + - name: ixia_dst_latitude + type: float + + - name: ixia_dst_longitude + type: float + + - name: ixia_device_id + type: short + + - name: ixia_device_name + type: keyword + + - name: ixia_browser_id + type: short + + - name: ixia_browser_name + type: keyword + + - name: ixia_rev_octet_delta_count + type: long + + - name: ixia_rev_packet_delta_count + type: long + + - name: ixia_encrypt_type + type: keyword + + - name: ixia_encrypt_cipher + type: keyword + + - name: ixia_encrypt_key_length + type: integer + + - name: ixia_imsi_subscriber + type: keyword + + - name: ixia_http_user_agent + type: keyword + + - name: ixia_http_host_name + type: keyword + + - name: ixia_http_uri + type: keyword + + - name: ixia_dns_record_txt + type: keyword + + - name: ixia_src_as_name + type: keyword + + - name: ixia_dst_as_name + type: keyword + + - name: ixia_latency + type: long + + - name: ixia_dns_query + type: keyword + + - name: ixia_dns_answer + type: keyword + + - name: ixia_dns_classes + type: keyword + + - name: ixia_threat_type + type: keyword + + - name: ixia_threat_ipv4 + type: ip + + - name: ixia_threat_ipv6 + type: ip + + - name: vmware_tenant_protocol + type: short + + - name: vmware_tenant_source_ipv4 + type: ip + + - name: vmware_tenant_dest_ipv4 + type: ip + + - name: vmware_tenant_source_ipv6 + type: ip + + - name: vmware_tenant_dest_ipv6 + type: ip + + - name: vmware_tenant_source_port + type: integer + + - name: vmware_tenant_dest_port + type: integer + + - name: vmware_egress_interface_attr + type: integer + + - name: vmware_vxlan_export_role + type: short + + - name: vmware_ingress_interface_attr + type: integer + + - name: afc_protocol + type: integer + + - name: afc_protocol_name + type: keyword + + - name: flow_direction + type: short + + - name: timestamp + type: long + + - name: log_op + type: short + + - name: traffic_type + type: short + + - name: fw_rule + type: keyword + + - name: service_name + type: keyword + + - name: reason + type: long + + - name: reason_text + type: keyword + + - name: bind_ipv4_address + type: ip + + - name: bind_transport_port + type: integer + + - name: conn_ipv4_address + type: ip + + - name: conn_transport_port + type: integer + + - name: audit_counter + type: long + + - name: timestamp + type: long + + - name: log_op + type: short + + - name: traffic_type + type: short + + - name: fw_rule + type: keyword + + - name: service_name + type: keyword + + - name: reason + type: long + + - name: reason_text + type: keyword + + - name: bind_ipv4_address + type: ip + + - name: bind_transport_port + type: integer + + - name: conn_ipv4_address + type: ip + + - name: conn_transport_port + type: integer + + - name: audit_counter + type: long + + - name: procera_service + type: keyword + + - name: procera_base_service + type: keyword + + - name: procera_incoming_octets + type: long + + - name: procera_outgoing_octets + type: long + + - name: procera_incoming_packets + type: long + + - name: procera_outgoing_packets + type: long + + - name: procera_incoming_shaping_latency + type: integer + + - name: procera_outgoing_shaping_latency + type: integer + + - name: procera_incoming_shaping_drops + type: long + + - name: procera_outgoing_shaping_drops + type: long + + - name: procera_internal_rtt + type: integer + + - name: procera_external_rtt + type: integer + + - name: procera_flow_behavior + type: keyword + + - name: procera_content_categories + type: keyword + + - name: procera_property + type: keyword + + - name: procera_server_hostname + type: keyword + + - name: procera_http_request_method + type: keyword + + - name: procera_http_user_agent + type: keyword + + - name: procera_http_content_type + type: keyword + + - name: procera_http_url + type: keyword + + - name: procera_http_referer + type: keyword + + - name: procera_http_response_status + type: integer + + - name: procera_http_file_length + type: long + + - name: procera_http_location + type: keyword + + - name: procera_http_language + type: keyword + + - name: procera_subscriber_identifier + type: keyword + + - name: procera_msisdn + type: long + + - name: procera_imsi + type: long + + - name: procera_rat + type: keyword + + - name: procera_device_id + type: long + + - name: procera_sgsn + type: keyword + + - name: procera_rnc + type: integer + + - name: procera_apn + type: keyword + + - name: procera_user_location_information + type: keyword + + - name: procera_ggsn + type: keyword + + - name: procera_qoe_incoming_internal + type: float + + - name: procera_qoe_incoming_external + type: float + + - name: procera_qoe_outgoing_internal + type: float + + - name: procera_qoe_outgoing_external + type: float + + - name: procera_local_ipv4_host + type: ip + + - name: procera_local_ipv6_host + type: ip + + - name: procera_remote_ipv4_host + type: ip + + - name: procera_remote_ipv6_host + type: ip + + - name: procera_http_request_version + type: keyword + + - name: procera_template_name + type: keyword + + - name: mark + type: long + + - name: conntrack_id + type: long + + - name: reverse_octet_delta_count + type: long + + - name: reverse_packet_delta_count + type: long + + - name: reverse_delta_flow_count + type: long + + - name: reverse_protocol_identifier + type: short + + - name: reverse_ip_class_of_service + type: short + + - name: reverse_tcp_control_bits + type: integer + + - name: reverse_source_transport_port + type: integer + + - name: reverse_source_ipv4_address + type: ip + + - name: reverse_source_ipv4_prefix_length + type: short + + - name: reverse_ingress_interface + type: long + + - name: reverse_destination_transport_port + type: integer + + - name: reverse_destination_ipv4_address + type: ip + + - name: reverse_destination_ipv4_prefix_length + type: short + + - name: reverse_egress_interface + type: long + + - name: reverse_ip_next_hop_ipv4_address + type: ip + + - name: reverse_bgp_source_as_number + type: long + + - name: reverse_bgp_destination_as_number + type: long + + - name: reverse_bgp_next_hop_ipv4_address + type: ip + + - name: reverse_post_mcast_packet_delta_count + type: long + + - name: reverse_post_mcast_octet_delta_count + type: long + + - name: reverse_flow_end_sys_up_time + type: long + + - name: reverse_flow_start_sys_up_time + type: long + + - name: reverse_post_octet_delta_count + type: long + + - name: reverse_post_packet_delta_count + type: long + + - name: reverse_minimum_ip_total_length + type: long + + - name: reverse_maximum_ip_total_length + type: long + + - name: reverse_source_ipv6_address + type: ip + + - name: reverse_destination_ipv6_address + type: ip + + - name: reverse_source_ipv6_prefix_length + type: short + + - name: reverse_destination_ipv6_prefix_length + type: short + + - name: reverse_flow_label_ipv6 + type: long + + - name: reverse_icmp_type_code_ipv4 + type: integer + + - name: reverse_igmp_type + type: short + + - name: reverse_sampling_interval + type: long + + - name: reverse_sampling_algorithm + type: short + + - name: reverse_flow_active_timeout + type: integer + + - name: reverse_flow_idle_timeout + type: integer + + - name: reverse_engine_type + type: short + + - name: reverse_engine_id + type: short + + - name: reverse_ipv4_router_sc + type: ip + + - name: reverse_source_ipv4_prefix + type: ip + + - name: reverse_destination_ipv4_prefix + type: ip + + - name: reverse_mpls_top_label_type + type: short + + - name: reverse_mpls_top_label_ipv4_address + type: ip + + - name: reverse_sampler_id + type: short + + - name: reverse_sampler_mode + type: short + + - name: reverse_sampler_random_interval + type: long + + - name: reverse_class_id + type: short + + - name: reverse_minimum_ttl + type: short + + - name: reverse_maximum_ttl + type: short + + - name: reverse_fragment_identification + type: long + + - name: reverse_post_ip_class_of_service + type: short + + - name: reverse_source_mac_address + type: keyword + + - name: reverse_post_destination_mac_address + type: keyword + + - name: reverse_vlan_id + type: integer + + - name: reverse_post_vlan_id + type: integer + + - name: reverse_ip_version + type: short + + - name: reverse_flow_direction + type: short + + - name: reverse_ip_next_hop_ipv6_address + type: ip + + - name: reverse_bgp_next_hop_ipv6_address + type: ip + + - name: reverse_ipv6_extension_headers + type: long + + - name: reverse_mpls_top_label_stack_section + type: keyword + + - name: reverse_mpls_label_stack_section2 + type: keyword + + - name: reverse_mpls_label_stack_section3 + type: keyword + + - name: reverse_mpls_label_stack_section4 + type: keyword + + - name: reverse_mpls_label_stack_section5 + type: keyword + + - name: reverse_mpls_label_stack_section6 + type: keyword + + - name: reverse_mpls_label_stack_section7 + type: keyword + + - name: reverse_mpls_label_stack_section8 + type: keyword + + - name: reverse_mpls_label_stack_section9 + type: keyword + + - name: reverse_mpls_label_stack_section10 + type: keyword + + - name: reverse_destination_mac_address + type: keyword + + - name: reverse_post_source_mac_address + type: keyword + + - name: reverse_interface_name + type: keyword + + - name: reverse_interface_description + type: keyword + + - name: reverse_sampler_name + type: keyword + + - name: reverse_octet_total_count + type: long + + - name: reverse_packet_total_count + type: long + + - name: reverse_flags_and_sampler_id + type: long + + - name: reverse_fragment_offset + type: integer + + - name: reverse_forwarding_status + type: long + + - name: reverse_mpls_vpn_route_distinguisher + type: keyword + + - name: reverse_mpls_top_label_prefix_length + type: short + + - name: reverse_src_traffic_index + type: long + + - name: reverse_dst_traffic_index + type: long + + - name: reverse_application_description + type: keyword + + - name: reverse_application_id + type: keyword + + - name: reverse_application_name + type: keyword + + - name: reverse_post_ip_diff_serv_code_point + type: short + + - name: reverse_multicast_replication_factor + type: long + + - name: reverse_class_name + type: keyword + + - name: reverse_classification_engine_id + type: short + + - name: reverse_layer2packet_section_offset + type: integer + + - name: reverse_layer2packet_section_size + type: integer + + - name: reverse_layer2packet_section_data + type: keyword + + - name: reverse_bgp_next_adjacent_as_number + type: long + + - name: reverse_bgp_prev_adjacent_as_number + type: long + + - name: reverse_dropped_octet_delta_count + type: long + + - name: reverse_dropped_packet_delta_count + type: long + + - name: reverse_dropped_octet_total_count + type: long + + - name: reverse_dropped_packet_total_count + type: long + + - name: reverse_flow_end_reason + type: short + + - name: reverse_observation_point_id + type: long + + - name: reverse_icmp_type_code_ipv6 + type: integer + + - name: reverse_mpls_top_label_ipv6_address + type: ip + + - name: reverse_line_card_id + type: long + + - name: reverse_port_id + type: long + + - name: reverse_metering_process_id + type: long + + - name: reverse_exporting_process_id + type: long + + - name: reverse_wlan_channel_id + type: short + + - name: reverse_wlan_ssid + type: keyword + + - name: reverse_flow_start_seconds + type: long + + - name: reverse_flow_end_seconds + type: long + + - name: reverse_flow_start_milliseconds + type: long + + - name: reverse_flow_end_milliseconds + type: long + + - name: reverse_flow_start_microseconds + type: long + + - name: reverse_flow_end_microseconds + type: long + + - name: reverse_flow_start_nanoseconds + type: long + + - name: reverse_flow_end_nanoseconds + type: long + + - name: reverse_flow_start_delta_microseconds + type: long + + - name: reverse_flow_end_delta_microseconds + type: long + + - name: reverse_system_init_time_milliseconds + type: long + + - name: reverse_flow_duration_milliseconds + type: long + + - name: reverse_flow_duration_microseconds + type: long + + - name: reverse_destination_ipv6_prefix + type: ip + + - name: reverse_source_ipv6_prefix + type: ip + + - name: reverse_post_octet_total_count + type: long + + - name: reverse_post_packet_total_count + type: long + + - name: reverse_post_mcast_packet_total_count + type: long + + - name: reverse_post_mcast_octet_total_count + type: long + + - name: reverse_icmp_type_ipv4 + type: short + + - name: reverse_icmp_code_ipv4 + type: short + + - name: reverse_icmp_type_ipv6 + type: short + + - name: reverse_icmp_code_ipv6 + type: short + + - name: reverse_udp_source_port + type: integer + + - name: reverse_udp_destination_port + type: integer + + - name: reverse_tcp_source_port + type: integer + + - name: reverse_tcp_destination_port + type: integer + + - name: reverse_tcp_sequence_number + type: long + + - name: reverse_tcp_acknowledgement_number + type: long + + - name: reverse_tcp_window_size + type: integer + + - name: reverse_tcp_urgent_pointer + type: integer + + - name: reverse_tcp_header_length + type: short + + - name: reverse_ip_header_length + type: short + + - name: reverse_total_length_ipv4 + type: integer + + - name: reverse_payload_length_ipv6 + type: integer + + - name: reverse_ip_ttl + type: short + + - name: reverse_next_header_ipv6 + type: short + + - name: reverse_mpls_payload_length + type: long + + - name: reverse_ip_diff_serv_code_point + type: short + + - name: reverse_ip_precedence + type: short + + - name: reverse_fragment_flags + type: short + + - name: reverse_octet_delta_sum_of_squares + type: long + + - name: reverse_octet_total_sum_of_squares + type: long + + - name: reverse_mpls_top_label_ttl + type: short + + - name: reverse_mpls_label_stack_length + type: long + + - name: reverse_mpls_label_stack_depth + type: long + + - name: reverse_mpls_top_label_exp + type: short + + - name: reverse_ip_payload_length + type: long + + - name: reverse_udp_message_length + type: integer + + - name: reverse_is_multicast + type: short + + - name: reverse_ipv4_ihl + type: short + + - name: reverse_ipv4_options + type: long + + - name: reverse_tcp_options + type: long + + - name: reverse_tcp_syn_total_count + type: long + + - name: reverse_tcp_fin_total_count + type: long + + - name: reverse_tcp_rst_total_count + type: long + + - name: reverse_tcp_psh_total_count + type: long + + - name: reverse_tcp_ack_total_count + type: long + + - name: reverse_tcp_urg_total_count + type: long + + - name: reverse_ip_total_length + type: long + + - name: reverse_post_nat_source_ipv4_address + type: ip + + - name: reverse_post_nat_destination_ipv4_address + type: ip + + - name: reverse_post_napt_source_transport_port + type: integer + + - name: reverse_post_napt_destination_transport_port + type: integer + + - name: reverse_nat_originating_address_realm + type: short + + - name: reverse_nat_event + type: short + + - name: reverse_initiator_octets + type: long + + - name: reverse_responder_octets + type: long + + - name: reverse_firewall_event + type: short + + - name: reverse_ingress_vrfid + type: long + + - name: reverse_egress_vrfid + type: long + + - name: reverse_vr_fname + type: keyword + + - name: reverse_post_mpls_top_label_exp + type: short + + - name: reverse_tcp_window_scale + type: integer + + - name: reverse_ethernet_header_length + type: short + + - name: reverse_ethernet_payload_length + type: integer + + - name: reverse_ethernet_total_length + type: integer + + - name: reverse_dot1q_vlan_id + type: integer + + - name: reverse_dot1q_priority + type: short + + - name: reverse_dot1q_customer_vlan_id + type: integer + + - name: reverse_dot1q_customer_priority + type: short + + - name: reverse_metro_evc_id + type: keyword + + - name: reverse_metro_evc_type + type: short + + - name: reverse_pseudo_wire_id + type: long + + - name: reverse_pseudo_wire_type + type: integer + + - name: reverse_pseudo_wire_control_word + type: long + + - name: reverse_ingress_physical_interface + type: long + + - name: reverse_egress_physical_interface + type: long + + - name: reverse_post_dot1q_vlan_id + type: integer + + - name: reverse_post_dot1q_customer_vlan_id + type: integer + + - name: reverse_ethernet_type + type: integer + + - name: reverse_post_ip_precedence + type: short + + - name: reverse_collection_time_milliseconds + type: long + + - name: reverse_export_sctp_stream_id + type: integer + + - name: reverse_max_export_seconds + type: long + + - name: reverse_max_flow_end_seconds + type: long + + - name: reverse_message_md5_checksum + type: keyword + + - name: reverse_message_scope + type: short + + - name: reverse_min_export_seconds + type: long + + - name: reverse_min_flow_start_seconds + type: long + + - name: reverse_opaque_octets + type: keyword + + - name: reverse_session_scope + type: short + + - name: reverse_max_flow_end_microseconds + type: long + + - name: reverse_max_flow_end_milliseconds + type: long + + - name: reverse_max_flow_end_nanoseconds + type: long + + - name: reverse_min_flow_start_microseconds + type: long + + - name: reverse_min_flow_start_milliseconds + type: long + + - name: reverse_min_flow_start_nanoseconds + type: long + + - name: reverse_collector_certificate + type: keyword + + - name: reverse_exporter_certificate + type: keyword + + - name: reverse_data_records_reliability + type: short + + - name: reverse_observation_point_type + type: short + + - name: reverse_new_connection_delta_count + type: long + + - name: reverse_connection_sum_duration_seconds + type: long + + - name: reverse_connection_transaction_id + type: long + + - name: reverse_post_nat_source_ipv6_address + type: ip + + - name: reverse_post_nat_destination_ipv6_address + type: ip + + - name: reverse_nat_pool_id + type: long + + - name: reverse_nat_pool_name + type: keyword + + - name: reverse_anonymization_flags + type: integer + + - name: reverse_anonymization_technique + type: integer + + - name: reverse_information_element_index + type: integer + + - name: reverse_p2p_technology + type: keyword + + - name: reverse_tunnel_technology + type: keyword + + - name: reverse_encrypted_technology + type: keyword + + - name: reverse_bgp_validity_state + type: short + + - name: reverse_ip_sec_spi + type: long + + - name: reverse_gre_key + type: long + + - name: reverse_nat_type + type: short + + - name: reverse_initiator_packets + type: long + + - name: reverse_responder_packets + type: long + + - name: reverse_observation_domain_name + type: keyword + + - name: reverse_selection_sequence_id + type: long + + - name: reverse_selector_id + type: long + + - name: reverse_information_element_id + type: integer + + - name: reverse_selector_algorithm + type: integer + + - name: reverse_sampling_packet_interval + type: long + + - name: reverse_sampling_packet_space + type: long + + - name: reverse_sampling_time_interval + type: long + + - name: reverse_sampling_time_space + type: long + + - name: reverse_sampling_size + type: long + + - name: reverse_sampling_population + type: long + + - name: reverse_sampling_probability + type: double + + - name: reverse_data_link_frame_size + type: integer + + - name: reverse_ip_header_packet_section + type: keyword + + - name: reverse_ip_payload_packet_section + type: keyword + + - name: reverse_data_link_frame_section + type: keyword + + - name: reverse_mpls_label_stack_section + type: keyword + + - name: reverse_mpls_payload_packet_section + type: keyword + + - name: reverse_selector_id_total_pkts_observed + type: long + + - name: reverse_selector_id_total_pkts_selected + type: long + + - name: reverse_absolute_error + type: double + + - name: reverse_relative_error + type: double + + - name: reverse_observation_time_seconds + type: long + + - name: reverse_observation_time_milliseconds + type: long + + - name: reverse_observation_time_microseconds + type: long + + - name: reverse_observation_time_nanoseconds + type: long + + - name: reverse_digest_hash_value + type: long + + - name: reverse_hash_ip_payload_offset + type: long + + - name: reverse_hash_ip_payload_size + type: long + + - name: reverse_hash_output_range_min + type: long + + - name: reverse_hash_output_range_max + type: long + + - name: reverse_hash_selected_range_min + type: long + + - name: reverse_hash_selected_range_max + type: long + + - name: reverse_hash_digest_output + type: short + + - name: reverse_hash_initialiser_value + type: long + + - name: reverse_selector_name + type: keyword + + - name: reverse_upper_ci_limit + type: double + + - name: reverse_lower_ci_limit + type: double + + - name: reverse_confidence_level + type: double + + - name: reverse_information_element_data_type + type: short + + - name: reverse_information_element_description + type: keyword + + - name: reverse_information_element_name + type: keyword + + - name: reverse_information_element_range_begin + type: long + + - name: reverse_information_element_range_end + type: long + + - name: reverse_information_element_semantics + type: short + + - name: reverse_information_element_units + type: integer + + - name: reverse_private_enterprise_number + type: long + + - name: reverse_virtual_station_interface_id + type: keyword + + - name: reverse_virtual_station_interface_name + type: keyword + + - name: reverse_virtual_station_uuid + type: keyword + + - name: reverse_virtual_station_name + type: keyword + + - name: reverse_layer2_segment_id + type: long + + - name: reverse_layer2_octet_delta_count + type: long + + - name: reverse_layer2_octet_total_count + type: long + + - name: reverse_ingress_unicast_packet_total_count + type: long + + - name: reverse_ingress_multicast_packet_total_count + type: long + + - name: reverse_ingress_broadcast_packet_total_count + type: long + + - name: reverse_egress_unicast_packet_total_count + type: long + + - name: reverse_egress_broadcast_packet_total_count + type: long + + - name: reverse_monitoring_interval_start_milli_seconds + type: long + + - name: reverse_monitoring_interval_end_milli_seconds + type: long + + - name: reverse_port_range_start + type: integer + + - name: reverse_port_range_end + type: integer + + - name: reverse_port_range_step_size + type: integer + + - name: reverse_port_range_num_ports + type: integer + + - name: reverse_sta_mac_address + type: keyword + + - name: reverse_sta_ipv4_address + type: ip + + - name: reverse_wtp_mac_address + type: keyword + + - name: reverse_ingress_interface_type + type: long + + - name: reverse_egress_interface_type + type: long + + - name: reverse_rtp_sequence_number + type: integer + + - name: reverse_user_name + type: keyword + + - name: reverse_application_category_name + type: keyword + + - name: reverse_application_sub_category_name + type: keyword + + - name: reverse_application_group_name + type: keyword + + - name: reverse_original_flows_present + type: long + + - name: reverse_original_flows_initiated + type: long + + - name: reverse_original_flows_completed + type: long + + - name: reverse_distinct_count_of_source_ip_address + type: long + + - name: reverse_distinct_count_of_destination_ip_address + type: long + + - name: reverse_distinct_count_of_source_ipv4_address + type: long + + - name: reverse_distinct_count_of_destination_ipv4_address + type: long + + - name: reverse_distinct_count_of_source_ipv6_address + type: long + + - name: reverse_distinct_count_of_destination_ipv6_address + type: long + + - name: reverse_value_distribution_method + type: short + + - name: reverse_rfc3550_jitter_milliseconds + type: long + + - name: reverse_rfc3550_jitter_microseconds + type: long + + - name: reverse_rfc3550_jitter_nanoseconds + type: long + + - name: reverse_dot1q_dei + type: short + + - name: reverse_dot1q_customer_dei + type: short + + - name: reverse_flow_selector_algorithm + type: integer + + - name: reverse_flow_selected_octet_delta_count + type: long + + - name: reverse_flow_selected_packet_delta_count + type: long + + - name: reverse_flow_selected_flow_delta_count + type: long + + - name: reverse_selector_id_total_flows_observed + type: long + + - name: reverse_selector_id_total_flows_selected + type: long + + - name: reverse_sampling_flow_interval + type: long + + - name: reverse_sampling_flow_spacing + type: long + + - name: reverse_flow_sampling_time_interval + type: long + + - name: reverse_flow_sampling_time_spacing + type: long + + - name: reverse_hash_flow_domain + type: integer + + - name: reverse_transport_octet_delta_count + type: long + + - name: reverse_transport_packet_delta_count + type: long + + - name: reverse_original_exporter_ipv4_address + type: ip + + - name: reverse_original_exporter_ipv6_address + type: ip + + - name: reverse_original_observation_domain_id + type: long + + - name: reverse_intermediate_process_id + type: long + + - name: reverse_ignored_data_record_total_count + type: long + + - name: reverse_data_link_frame_type + type: integer + + - name: reverse_section_offset + type: integer + + - name: reverse_section_exported_octets + type: integer + + - name: reverse_dot1q_service_instance_tag + type: keyword + + - name: reverse_dot1q_service_instance_id + type: long + + - name: reverse_dot1q_service_instance_priority + type: short + + - name: reverse_dot1q_customer_source_mac_address + type: keyword + + - name: reverse_dot1q_customer_destination_mac_address + type: keyword + + - name: reverse_post_layer2_octet_delta_count + type: long + + - name: reverse_post_mcast_layer2_octet_delta_count + type: long + + - name: reverse_post_layer2_octet_total_count + type: long + + - name: reverse_post_mcast_layer2_octet_total_count + type: long + + - name: reverse_minimum_layer2_total_length + type: long + + - name: reverse_maximum_layer2_total_length + type: long + + - name: reverse_dropped_layer2_octet_delta_count + type: long + + - name: reverse_dropped_layer2_octet_total_count + type: long + + - name: reverse_ignored_layer2_octet_total_count + type: long + + - name: reverse_not_sent_layer2_octet_total_count + type: long + + - name: reverse_layer2_octet_delta_sum_of_squares + type: long + + - name: reverse_layer2_octet_total_sum_of_squares + type: long + + - name: reverse_layer2_frame_delta_count + type: long + + - name: reverse_layer2_frame_total_count + type: long + + - name: reverse_pseudo_wire_destination_ipv4_address + type: ip + + - name: reverse_ignored_layer2_frame_total_count + type: long + + - name: viptela_vpn_id + type: long + diff --git a/x-pack/filebeat/input/netflow/decoder/fields/gen.go b/x-pack/filebeat/input/netflow/decoder/fields/gen.go index 743c1a062cbe..2f5d04b28ad1 100644 --- a/x-pack/filebeat/input/netflow/decoder/fields/gen.go +++ b/x-pack/filebeat/input/netflow/decoder/fields/gen.go @@ -131,6 +131,11 @@ func main() { filtered.WriteByte('\n') } } + if scanner.Err() != nil { + fmt.Fprintf(os.Stderr, "Failed reading from %s: %v\n", *header, err) + os.Exit(2) + } + reader := csv.NewReader(filtered) for lineNum := 1; ; lineNum++ { record, err := reader.Read() diff --git a/x-pack/filebeat/input/netflow/doc.go b/x-pack/filebeat/input/netflow/doc.go index 371e8cd66859..042c1e6f4d2c 100644 --- a/x-pack/filebeat/input/netflow/doc.go +++ b/x-pack/filebeat/input/netflow/doc.go @@ -5,3 +5,6 @@ package netflow //go:generate go run fields_gen.go -output _meta/fields.yml --column-name=2 --column-type=3 --header _meta/fields.header.yml decoder/fields/ipfix-information-elements.csv +//go:generate go run fields_gen.go -output _meta/fields.yml --append --column-name=3 --column-type=4 --header _meta/fields.header.yml decoder/fields/cert_pen6871.csv +//go:generate go run fields_gen.go -output _meta/fields.yml --append --column-name=1 --column-type=4 --header _meta/fields.header.yml decoder/fields/cisco.csv +//go:generate go run fields_gen.go -output _meta/fields.yml --append --column-name=3 --column-type=4 --header _meta/fields.header.yml decoder/fields/assorted.csv diff --git a/x-pack/filebeat/input/netflow/fields.go b/x-pack/filebeat/input/netflow/fields.go index c1b9fcf244e3..cd2a4ddcff42 100644 --- a/x-pack/filebeat/input/netflow/fields.go +++ b/x-pack/filebeat/input/netflow/fields.go @@ -19,5 +19,5 @@ func init() { // AssetNetflow returns asset data. // This is the base64 encoded gzipped contents of input/netflow. func AssetNetflow() string { - return "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" + return "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" } diff --git a/x-pack/filebeat/input/netflow/fields_gen.go b/x-pack/filebeat/input/netflow/fields_gen.go index 5e41a3087660..3f6081ea1b5c 100644 --- a/x-pack/filebeat/input/netflow/fields_gen.go +++ b/x-pack/filebeat/input/netflow/fields_gen.go @@ -26,6 +26,7 @@ var ( typeCol = flag.Int("column-type", 0, "Index of column with field type") indent = flag.Int("indent", 0, "Number of spaces to indent") header = flag.String("header", "fields.header.yml", "File with header fields to prepend") + append = flag.Bool("append", false, "append to existing output file") ) // Mapping from NetFlow datatypes to Elasticsearch datatypes @@ -116,26 +117,33 @@ func main() { } defer fHandle.Close() - outHandle, err := os.Create(*outputFile) + var outHandle *os.File + if *append { + outHandle, err = os.OpenFile(*outputFile, os.O_RDWR|os.O_APPEND, 0644) + } else { + outHandle, err = os.Create(*outputFile) + } if err != nil { - fmt.Fprintf(os.Stderr, "Failed to create %s: %v\n", *outputFile, err) + fmt.Fprintf(os.Stderr, "Failed to open %s: %v\n", *outputFile, err) os.Exit(3) } defer outHandle.Close() - headerHandle, err := os.Open(*header) - if err != nil { - fmt.Fprintf(os.Stderr, "Failed to open %s: %v\n", *header, err) - os.Exit(2) - } - defer headerHandle.Close() + if !*append { + headerHandle, err := os.Open(*header) + if err != nil { + fmt.Fprintf(os.Stderr, "Failed to open %s: %v\n", *header, err) + os.Exit(2) + } + defer headerHandle.Close() - fileHeader, err := ioutil.ReadAll(headerHandle) - if err != nil { - fmt.Fprintf(os.Stderr, "Failed to read %s: %v\n", *header, err) - os.Exit(2) + fileHeader, err := ioutil.ReadAll(headerHandle) + if err != nil { + fmt.Fprintf(os.Stderr, "Failed to read %s: %v\n", *header, err) + os.Exit(2) + } + write(outHandle, string(fileHeader)) } - write(outHandle, string(fileHeader)) filtered := bytes.NewBuffer(nil) scanner := bufio.NewScanner(fHandle) @@ -145,6 +153,11 @@ func main() { filtered.WriteByte('\n') } } + if scanner.Err() != nil { + fmt.Fprintf(os.Stderr, "Failed reading from %s: %v\n", *header, err) + os.Exit(2) + } + reader := csv.NewReader(filtered) for lineNum := 1; ; lineNum++ { record, err := reader.Read() From 037d623120d19578ed35d5d862b95fbdd149bd32 Mon Sep 17 00:00:00 2001 From: Andrew Kroh Date: Mon, 1 Feb 2021 09:07:56 -0500 Subject: [PATCH 2/4] Add default_field: false to netflow --- x-pack/filebeat/input/netflow/_meta/fields.yml | 1 + x-pack/filebeat/input/netflow/fields.go | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/x-pack/filebeat/input/netflow/_meta/fields.yml b/x-pack/filebeat/input/netflow/_meta/fields.yml index 2d971576e65d..2d7eb5c69f43 100644 --- a/x-pack/filebeat/input/netflow/_meta/fields.yml +++ b/x-pack/filebeat/input/netflow/_meta/fields.yml @@ -5,6 +5,7 @@ fields: - name: netflow type: group + default_field: false description: > Fields from NetFlow and IPFIX. fields: diff --git a/x-pack/filebeat/input/netflow/fields.go b/x-pack/filebeat/input/netflow/fields.go index cd2a4ddcff42..ffab1833db2b 100644 --- a/x-pack/filebeat/input/netflow/fields.go +++ b/x-pack/filebeat/input/netflow/fields.go @@ -19,5 +19,5 @@ func init() { // AssetNetflow returns asset data. // This is the base64 encoded gzipped contents of input/netflow. func AssetNetflow() string { - return "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" + return "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" } From a166af7795f7572611998aa55854980aa0a72e3d Mon Sep 17 00:00:00 2001 From: Andrew Kroh Date: Fri, 12 Feb 2021 15:24:38 -0500 Subject: [PATCH 3/4] Refactor generator to merge all fields to remove duplicates --- filebeat/docs/fields.asciidoc | 4551 ++++++++--------- .../input/netflow/_meta/fields.header.yml | 1 + .../filebeat/input/netflow/_meta/fields.yml | 4240 ++++++++------- x-pack/filebeat/input/netflow/doc.go | 6 +- x-pack/filebeat/input/netflow/fields.go | 2 +- x-pack/filebeat/input/netflow/fields_gen.go | 243 +- 6 files changed, 4467 insertions(+), 4576 deletions(-) diff --git a/filebeat/docs/fields.asciidoc b/filebeat/docs/fields.asciidoc index b92dd29a6e7b..6f512c575fa5 100644 --- a/filebeat/docs/fields.asciidoc +++ b/filebeat/docs/fields.asciidoc @@ -94407,7210 +94407,7077 @@ type: integer -- -*`netflow.octet_delta_count`*:: +*`netflow.absolute_error`*:: + -- -type: long +type: double -- -*`netflow.packet_delta_count`*:: +*`netflow.address_pool_high_threshold`*:: + -- type: long -- -*`netflow.delta_flow_count`*:: +*`netflow.address_pool_low_threshold`*:: + -- type: long -- -*`netflow.protocol_identifier`*:: +*`netflow.address_port_mapping_high_threshold`*:: + -- -type: short +type: long -- -*`netflow.ip_class_of_service`*:: +*`netflow.address_port_mapping_low_threshold`*:: + -- -type: short +type: long -- -*`netflow.tcp_control_bits`*:: +*`netflow.address_port_mapping_per_user_high_threshold`*:: + -- -type: integer +type: long -- -*`netflow.source_transport_port`*:: +*`netflow.afc_protocol`*:: + -- type: integer -- -*`netflow.source_ipv4_address`*:: +*`netflow.afc_protocol_name`*:: + -- -type: ip +type: keyword -- -*`netflow.source_ipv4_prefix_length`*:: +*`netflow.anonymization_flags`*:: + -- -type: short +type: integer -- -*`netflow.ingress_interface`*:: +*`netflow.anonymization_technique`*:: + -- -type: long +type: integer -- -*`netflow.destination_transport_port`*:: +*`netflow.application_business-relevance`*:: + -- -type: integer +type: long -- -*`netflow.destination_ipv4_address`*:: +*`netflow.application_category_name`*:: + -- -type: ip +type: keyword -- -*`netflow.destination_ipv4_prefix_length`*:: +*`netflow.application_description`*:: + -- -type: short +type: keyword -- -*`netflow.egress_interface`*:: +*`netflow.application_group_name`*:: + -- -type: long +type: keyword -- -*`netflow.ip_next_hop_ipv4_address`*:: +*`netflow.application_http_uri_statistics`*:: + -- -type: ip +type: short -- -*`netflow.bgp_source_as_number`*:: +*`netflow.application_http_user-agent`*:: + -- -type: long +type: short -- -*`netflow.bgp_destination_as_number`*:: +*`netflow.application_id`*:: + -- -type: long +type: short -- -*`netflow.bgp_next_hop_ipv4_address`*:: +*`netflow.application_name`*:: + -- -type: ip +type: keyword -- -*`netflow.post_mcast_packet_delta_count`*:: +*`netflow.application_sub_category_name`*:: + -- -type: long +type: keyword -- -*`netflow.post_mcast_octet_delta_count`*:: +*`netflow.application_traffic-class`*:: + -- type: long -- -*`netflow.flow_end_sys_up_time`*:: +*`netflow.art_client_network_time_maximum`*:: + -- type: long -- -*`netflow.flow_start_sys_up_time`*:: +*`netflow.art_client_network_time_minimum`*:: + -- type: long -- -*`netflow.post_octet_delta_count`*:: +*`netflow.art_client_network_time_sum`*:: + -- type: long -- -*`netflow.post_packet_delta_count`*:: +*`netflow.art_clientpackets`*:: + -- type: long -- -*`netflow.minimum_ip_total_length`*:: +*`netflow.art_count_late_responses`*:: + -- type: long -- -*`netflow.maximum_ip_total_length`*:: +*`netflow.art_count_new_connections`*:: + -- type: long -- -*`netflow.source_ipv6_address`*:: +*`netflow.art_count_responses`*:: + -- -type: ip +type: long -- -*`netflow.destination_ipv6_address`*:: +*`netflow.art_count_responses_histogram_bucket1`*:: + -- -type: ip +type: long -- -*`netflow.source_ipv6_prefix_length`*:: +*`netflow.art_count_responses_histogram_bucket2`*:: + -- -type: short +type: long -- -*`netflow.destination_ipv6_prefix_length`*:: +*`netflow.art_count_responses_histogram_bucket3`*:: + -- -type: short +type: long -- -*`netflow.flow_label_ipv6`*:: +*`netflow.art_count_responses_histogram_bucket4`*:: + -- type: long -- -*`netflow.icmp_type_code_ipv4`*:: +*`netflow.art_count_responses_histogram_bucket5`*:: + -- -type: integer +type: long -- -*`netflow.igmp_type`*:: +*`netflow.art_count_responses_histogram_bucket6`*:: + -- -type: short +type: long -- -*`netflow.sampling_interval`*:: +*`netflow.art_count_responses_histogram_bucket7`*:: + -- type: long -- -*`netflow.sampling_algorithm`*:: +*`netflow.art_count_retransmissions`*:: + -- -type: short +type: long -- -*`netflow.flow_active_timeout`*:: +*`netflow.art_count_transactions`*:: + -- -type: integer +type: long -- -*`netflow.flow_idle_timeout`*:: +*`netflow.art_network_time_maximum`*:: + -- -type: integer +type: long -- -*`netflow.engine_type`*:: +*`netflow.art_network_time_minimum`*:: + -- -type: short +type: long -- -*`netflow.engine_id`*:: +*`netflow.art_network_time_sum`*:: + -- -type: short +type: long -- -*`netflow.exported_octet_total_count`*:: +*`netflow.art_response_time_maximum`*:: + -- type: long -- -*`netflow.exported_message_total_count`*:: +*`netflow.art_response_time_minimum`*:: + -- type: long -- -*`netflow.exported_flow_record_total_count`*:: +*`netflow.art_response_time_sum`*:: + -- type: long -- -*`netflow.ipv4_router_sc`*:: +*`netflow.art_server_network_time_maximum`*:: + -- -type: ip +type: long -- -*`netflow.source_ipv4_prefix`*:: +*`netflow.art_server_network_time_minimum`*:: + -- -type: ip +type: long -- -*`netflow.destination_ipv4_prefix`*:: +*`netflow.art_server_network_time_sum`*:: + -- -type: ip +type: long -- -*`netflow.mpls_top_label_type`*:: +*`netflow.art_server_response_time_maximum`*:: + -- -type: short +type: long -- -*`netflow.mpls_top_label_ipv4_address`*:: +*`netflow.art_server_response_time_minimum`*:: + -- -type: ip +type: long -- -*`netflow.sampler_id`*:: +*`netflow.art_server_response_time_sum`*:: + -- -type: short +type: long -- -*`netflow.sampler_mode`*:: +*`netflow.art_serverpackets`*:: + -- -type: short +type: long -- -*`netflow.sampler_random_interval`*:: +*`netflow.art_total_response_time_maximum`*:: + -- type: long -- -*`netflow.class_id`*:: +*`netflow.art_total_response_time_minimum`*:: + -- type: long -- -*`netflow.minimum_ttl`*:: +*`netflow.art_total_response_time_sum`*:: + -- -type: short +type: long -- -*`netflow.maximum_ttl`*:: +*`netflow.art_total_transaction_time_maximum`*:: + -- -type: short +type: long -- -*`netflow.fragment_identification`*:: +*`netflow.art_total_transaction_time_minimum`*:: + -- type: long -- -*`netflow.post_ip_class_of_service`*:: +*`netflow.art_total_transaction_time_sum`*:: + -- -type: short +type: long -- -*`netflow.source_mac_address`*:: +*`netflow.assembled_fragment_count`*:: + -- -type: keyword +type: long -- -*`netflow.post_destination_mac_address`*:: +*`netflow.audit_counter`*:: + -- -type: keyword +type: long -- -*`netflow.vlan_id`*:: +*`netflow.average_interarrival_time`*:: + -- -type: integer +type: long -- -*`netflow.post_vlan_id`*:: +*`netflow.bgp_destination_as_number`*:: + -- -type: integer +type: long -- -*`netflow.ip_version`*:: +*`netflow.bgp_next_adjacent_as_number`*:: + -- -type: short +type: long -- -*`netflow.flow_direction`*:: +*`netflow.bgp_next_hop_ipv4_address`*:: + -- -type: short +type: ip -- -*`netflow.ip_next_hop_ipv6_address`*:: +*`netflow.bgp_next_hop_ipv6_address`*:: + -- type: ip -- -*`netflow.bgp_next_hop_ipv6_address`*:: +*`netflow.bgp_prev_adjacent_as_number`*:: + -- -type: ip +type: long -- -*`netflow.ipv6_extension_headers`*:: +*`netflow.bgp_source_as_number`*:: + -- type: long -- -*`netflow.mpls_top_label_stack_section`*:: +*`netflow.bgp_validity_state`*:: + -- type: short -- -*`netflow.mpls_label_stack_section2`*:: +*`netflow.biflow_direction`*:: + -- type: short -- -*`netflow.mpls_label_stack_section3`*:: +*`netflow.bind_ipv4_address`*:: + -- -type: short +type: ip -- -*`netflow.mpls_label_stack_section4`*:: +*`netflow.bind_transport_port`*:: + -- -type: short +type: integer -- -*`netflow.mpls_label_stack_section5`*:: +*`netflow.class_id`*:: + -- -type: short +type: long -- -*`netflow.mpls_label_stack_section6`*:: +*`netflow.class_name`*:: + -- -type: short +type: keyword -- -*`netflow.mpls_label_stack_section7`*:: +*`netflow.classification_engine_id`*:: + -- type: short -- -*`netflow.mpls_label_stack_section8`*:: +*`netflow.collection_time_milliseconds`*:: + -- -type: short +type: date -- -*`netflow.mpls_label_stack_section9`*:: +*`netflow.collector_certificate`*:: + -- type: short -- -*`netflow.mpls_label_stack_section10`*:: +*`netflow.collector_ipv4_address`*:: + -- -type: short +type: ip -- -*`netflow.destination_mac_address`*:: +*`netflow.collector_ipv6_address`*:: + -- -type: keyword +type: ip -- -*`netflow.post_source_mac_address`*:: +*`netflow.collector_transport_port`*:: + -- -type: keyword +type: integer -- -*`netflow.interface_name`*:: +*`netflow.common_properties_id`*:: + -- -type: keyword +type: long -- -*`netflow.interface_description`*:: +*`netflow.confidence_level`*:: + -- -type: keyword +type: double -- -*`netflow.sampler_name`*:: +*`netflow.conn_ipv4_address`*:: + -- -type: keyword +type: ip -- -*`netflow.octet_total_count`*:: +*`netflow.conn_transport_port`*:: + -- -type: long +type: integer -- -*`netflow.packet_total_count`*:: +*`netflow.connection_sum_duration_seconds`*:: + -- type: long -- -*`netflow.flags_and_sampler_id`*:: +*`netflow.connection_transaction_id`*:: + -- type: long -- -*`netflow.fragment_offset`*:: +*`netflow.conntrack_id`*:: + -- -type: integer +type: long -- -*`netflow.forwarding_status`*:: +*`netflow.data_byte_count`*:: + -- -type: short +type: long -- -*`netflow.mpls_vpn_route_distinguisher`*:: +*`netflow.data_link_frame_section`*:: + -- type: short -- -*`netflow.mpls_top_label_prefix_length`*:: +*`netflow.data_link_frame_size`*:: + -- -type: short +type: integer -- -*`netflow.src_traffic_index`*:: +*`netflow.data_link_frame_type`*:: + -- -type: long +type: integer -- -*`netflow.dst_traffic_index`*:: +*`netflow.data_records_reliability`*:: + -- -type: long +type: boolean -- -*`netflow.application_description`*:: +*`netflow.delta_flow_count`*:: + -- -type: keyword +type: long -- -*`netflow.application_id`*:: +*`netflow.destination_ipv4_address`*:: + -- -type: short +type: ip -- -*`netflow.application_name`*:: +*`netflow.destination_ipv4_prefix`*:: + -- -type: keyword +type: ip -- -*`netflow.post_ip_diff_serv_code_point`*:: +*`netflow.destination_ipv4_prefix_length`*:: + -- type: short -- -*`netflow.multicast_replication_factor`*:: +*`netflow.destination_ipv6_address`*:: + -- -type: long +type: ip -- -*`netflow.class_name`*:: +*`netflow.destination_ipv6_prefix`*:: + -- -type: keyword +type: ip -- -*`netflow.classification_engine_id`*:: +*`netflow.destination_ipv6_prefix_length`*:: + -- type: short -- -*`netflow.layer2packet_section_offset`*:: +*`netflow.destination_mac_address`*:: + -- -type: integer +type: keyword -- -*`netflow.layer2packet_section_size`*:: +*`netflow.destination_transport_port`*:: + -- type: integer -- -*`netflow.layer2packet_section_data`*:: -+ --- -type: short - --- - -*`netflow.bgp_next_adjacent_as_number`*:: +*`netflow.digest_hash_value`*:: + -- type: long -- -*`netflow.bgp_prev_adjacent_as_number`*:: +*`netflow.distinct_count_of_destination_ip_address`*:: + -- type: long -- -*`netflow.exporter_ipv4_address`*:: +*`netflow.distinct_count_of_destination_ipv4_address`*:: + -- -type: ip +type: long -- -*`netflow.exporter_ipv6_address`*:: +*`netflow.distinct_count_of_destination_ipv6_address`*:: + -- -type: ip +type: long -- -*`netflow.dropped_octet_delta_count`*:: +*`netflow.distinct_count_of_source_ip_address`*:: + -- type: long -- -*`netflow.dropped_packet_delta_count`*:: +*`netflow.distinct_count_of_source_ipv4_address`*:: + -- type: long -- -*`netflow.dropped_octet_total_count`*:: +*`netflow.distinct_count_of_source_ipv6_address`*:: + -- type: long -- -*`netflow.dropped_packet_total_count`*:: +*`netflow.dns_authoritative`*:: + -- -type: long +type: short -- -*`netflow.flow_end_reason`*:: +*`netflow.dns_cname`*:: + -- -type: short +type: keyword -- -*`netflow.common_properties_id`*:: +*`netflow.dns_id`*:: + -- -type: long +type: integer -- -*`netflow.observation_point_id`*:: +*`netflow.dns_mx_exchange`*:: + -- -type: long +type: keyword -- -*`netflow.icmp_type_code_ipv6`*:: +*`netflow.dns_mx_preference`*:: + -- type: integer -- -*`netflow.mpls_top_label_ipv6_address`*:: +*`netflow.dns_nsd_name`*:: + -- -type: ip +type: keyword -- -*`netflow.line_card_id`*:: +*`netflow.dns_nx_domain`*:: + -- -type: long +type: short -- -*`netflow.port_id`*:: +*`netflow.dns_ptrd_name`*:: + -- -type: long +type: keyword -- -*`netflow.metering_process_id`*:: +*`netflow.dns_qname`*:: + -- -type: long +type: keyword -- -*`netflow.exporting_process_id`*:: +*`netflow.dns_qr_type`*:: + -- -type: long +type: integer -- -*`netflow.template_id`*:: +*`netflow.dns_query_response`*:: + -- -type: integer +type: short -- -*`netflow.wlan_channel_id`*:: +*`netflow.dns_rr_section`*:: + -- type: short -- -*`netflow.wlan_ssid`*:: +*`netflow.dns_soa_expire`*:: + -- -type: keyword +type: long -- -*`netflow.flow_id`*:: +*`netflow.dns_soa_minimum`*:: + -- type: long -- -*`netflow.observation_domain_id`*:: +*`netflow.dns_soa_refresh`*:: + -- type: long -- -*`netflow.flow_start_seconds`*:: +*`netflow.dns_soa_retry`*:: + -- -type: date +type: long -- -*`netflow.flow_end_seconds`*:: +*`netflow.dns_soa_serial`*:: + -- -type: date +type: long -- -*`netflow.flow_start_milliseconds`*:: +*`netflow.dns_soam_name`*:: + -- -type: date +type: keyword -- -*`netflow.flow_end_milliseconds`*:: +*`netflow.dns_soar_name`*:: + -- -type: date +type: keyword -- -*`netflow.flow_start_microseconds`*:: +*`netflow.dns_srv_port`*:: + -- -type: date +type: integer -- -*`netflow.flow_end_microseconds`*:: +*`netflow.dns_srv_priority`*:: + -- -type: date +type: integer -- -*`netflow.flow_start_nanoseconds`*:: +*`netflow.dns_srv_target`*:: + -- -type: date +type: integer -- -*`netflow.flow_end_nanoseconds`*:: +*`netflow.dns_srv_weight`*:: + -- -type: date +type: integer -- -*`netflow.flow_start_delta_microseconds`*:: +*`netflow.dns_ttl`*:: + -- type: long -- -*`netflow.flow_end_delta_microseconds`*:: +*`netflow.dns_txt_data`*:: + -- -type: long +type: keyword -- -*`netflow.system_init_time_milliseconds`*:: +*`netflow.dot1q_customer_dei`*:: + -- -type: date +type: boolean -- -*`netflow.flow_duration_milliseconds`*:: +*`netflow.dot1q_customer_destination_mac_address`*:: + -- -type: long +type: keyword -- -*`netflow.flow_duration_microseconds`*:: +*`netflow.dot1q_customer_priority`*:: + -- -type: long +type: short -- -*`netflow.observed_flow_total_count`*:: +*`netflow.dot1q_customer_source_mac_address`*:: + -- -type: long +type: keyword -- -*`netflow.ignored_packet_total_count`*:: +*`netflow.dot1q_customer_vlan_id`*:: + -- -type: long +type: integer -- -*`netflow.ignored_octet_total_count`*:: +*`netflow.dot1q_dei`*:: + -- -type: long +type: boolean -- -*`netflow.not_sent_flow_total_count`*:: +*`netflow.dot1q_priority`*:: + -- -type: long +type: short -- -*`netflow.not_sent_packet_total_count`*:: +*`netflow.dot1q_service_instance_id`*:: + -- type: long -- -*`netflow.not_sent_octet_total_count`*:: +*`netflow.dot1q_service_instance_priority`*:: + -- -type: long +type: short -- -*`netflow.destination_ipv6_prefix`*:: +*`netflow.dot1q_service_instance_tag`*:: + -- -type: ip +type: short -- -*`netflow.source_ipv6_prefix`*:: +*`netflow.dot1q_vlan_id`*:: + -- -type: ip +type: integer -- -*`netflow.post_octet_total_count`*:: +*`netflow.dropped_layer2_octet_delta_count`*:: + -- type: long -- -*`netflow.post_packet_total_count`*:: +*`netflow.dropped_layer2_octet_total_count`*:: + -- type: long -- -*`netflow.flow_key_indicator`*:: +*`netflow.dropped_octet_delta_count`*:: + -- type: long -- -*`netflow.post_mcast_packet_total_count`*:: +*`netflow.dropped_octet_total_count`*:: + -- type: long -- -*`netflow.post_mcast_octet_total_count`*:: +*`netflow.dropped_packet_delta_count`*:: + -- type: long -- -*`netflow.icmp_type_ipv4`*:: +*`netflow.dropped_packet_total_count`*:: + -- -type: short +type: long -- -*`netflow.icmp_code_ipv4`*:: +*`netflow.dst_traffic_index`*:: + -- -type: short +type: long -- -*`netflow.icmp_type_ipv6`*:: +*`netflow.egress_broadcast_packet_total_count`*:: + -- -type: short +type: long -- -*`netflow.icmp_code_ipv6`*:: +*`netflow.egress_interface`*:: + -- -type: short +type: long -- -*`netflow.udp_source_port`*:: -+ --- -type: integer - --- - -*`netflow.udp_destination_port`*:: -+ --- -type: integer - --- - -*`netflow.tcp_source_port`*:: +*`netflow.egress_interface_type`*:: + -- -type: integer +type: long -- -*`netflow.tcp_destination_port`*:: +*`netflow.egress_physical_interface`*:: + -- -type: integer +type: long -- -*`netflow.tcp_sequence_number`*:: +*`netflow.egress_unicast_packet_total_count`*:: + -- type: long -- -*`netflow.tcp_acknowledgement_number`*:: +*`netflow.egress_vrfid`*:: + -- type: long -- -*`netflow.tcp_window_size`*:: +*`netflow.encrypted_technology`*:: + -- -type: integer +type: keyword -- -*`netflow.tcp_urgent_pointer`*:: +*`netflow.engine_id`*:: + -- -type: integer +type: short -- -*`netflow.tcp_header_length`*:: +*`netflow.engine_type`*:: + -- type: short -- -*`netflow.ip_header_length`*:: +*`netflow.ethernet_header_length`*:: + -- type: short -- -*`netflow.total_length_ipv4`*:: +*`netflow.ethernet_payload_length`*:: + -- type: integer -- -*`netflow.payload_length_ipv6`*:: +*`netflow.ethernet_total_length`*:: + -- type: integer -- -*`netflow.ip_ttl`*:: +*`netflow.ethernet_type`*:: + -- -type: short +type: integer -- -*`netflow.next_header_ipv6`*:: +*`netflow.expired_fragment_count`*:: + -- -type: short +type: long -- -*`netflow.mpls_payload_length`*:: +*`netflow.export_interface`*:: + -- type: long -- -*`netflow.ip_diff_serv_code_point`*:: +*`netflow.export_protocol_version`*:: + -- type: short -- -*`netflow.ip_precedence`*:: +*`netflow.export_sctp_stream_id`*:: + -- -type: short +type: integer -- -*`netflow.fragment_flags`*:: +*`netflow.export_transport_protocol`*:: + -- type: short -- -*`netflow.octet_delta_sum_of_squares`*:: +*`netflow.exported_flow_record_total_count`*:: + -- type: long -- -*`netflow.octet_total_sum_of_squares`*:: +*`netflow.exported_message_total_count`*:: + -- type: long -- -*`netflow.mpls_top_label_ttl`*:: -+ --- -type: short - --- - -*`netflow.mpls_label_stack_length`*:: +*`netflow.exported_octet_total_count`*:: + -- type: long -- -*`netflow.mpls_label_stack_depth`*:: +*`netflow.exporter_certificate`*:: + -- -type: long +type: short -- -*`netflow.mpls_top_label_exp`*:: +*`netflow.exporter_ipv4_address`*:: + -- -type: short +type: ip -- -*`netflow.ip_payload_length`*:: +*`netflow.exporter_ipv6_address`*:: + -- -type: long +type: ip -- -*`netflow.udp_message_length`*:: +*`netflow.exporter_transport_port`*:: + -- type: integer -- -*`netflow.is_multicast`*:: +*`netflow.exporting_process_id`*:: + -- -type: short +type: long -- -*`netflow.ipv4_ihl`*:: +*`netflow.external_address_realm`*:: + -- type: short -- -*`netflow.ipv4_options`*:: -+ --- -type: long - --- - -*`netflow.tcp_options`*:: +*`netflow.firewall_event`*:: + -- -type: long +type: short -- -*`netflow.padding_octets`*:: +*`netflow.first_eight_non_empty_packet_directions`*:: + -- type: short -- -*`netflow.collector_ipv4_address`*:: +*`netflow.first_non_empty_packet_size`*:: + -- -type: ip +type: integer -- -*`netflow.collector_ipv6_address`*:: +*`netflow.first_packet_banner`*:: + -- -type: ip +type: keyword -- -*`netflow.export_interface`*:: +*`netflow.flags_and_sampler_id`*:: + -- type: long -- -*`netflow.export_protocol_version`*:: -+ --- -type: short - --- - -*`netflow.export_transport_protocol`*:: +*`netflow.flow_active_timeout`*:: + -- -type: short +type: integer -- -*`netflow.collector_transport_port`*:: +*`netflow.flow_attributes`*:: + -- type: integer -- -*`netflow.exporter_transport_port`*:: +*`netflow.flow_direction`*:: + -- -type: integer +type: short -- -*`netflow.tcp_syn_total_count`*:: +*`netflow.flow_duration_microseconds`*:: + -- type: long -- -*`netflow.tcp_fin_total_count`*:: +*`netflow.flow_duration_milliseconds`*:: + -- type: long -- -*`netflow.tcp_rst_total_count`*:: +*`netflow.flow_end_delta_microseconds`*:: + -- type: long -- -*`netflow.tcp_psh_total_count`*:: +*`netflow.flow_end_microseconds`*:: + -- -type: long +type: date -- -*`netflow.tcp_ack_total_count`*:: +*`netflow.flow_end_milliseconds`*:: + -- -type: long +type: date -- -*`netflow.tcp_urg_total_count`*:: +*`netflow.flow_end_nanoseconds`*:: + -- -type: long +type: date -- -*`netflow.ip_total_length`*:: +*`netflow.flow_end_reason`*:: + -- -type: long +type: short -- -*`netflow.post_nat_source_ipv4_address`*:: +*`netflow.flow_end_seconds`*:: + -- -type: ip +type: date -- -*`netflow.post_nat_destination_ipv4_address`*:: +*`netflow.flow_end_sys_up_time`*:: + -- -type: ip +type: long -- -*`netflow.post_napt_source_transport_port`*:: +*`netflow.flow_id`*:: + -- -type: integer +type: long -- -*`netflow.post_napt_destination_transport_port`*:: +*`netflow.flow_idle_timeout`*:: + -- type: integer -- -*`netflow.nat_originating_address_realm`*:: +*`netflow.flow_key_indicator`*:: + -- -type: short +type: long -- -*`netflow.nat_event`*:: +*`netflow.flow_label_ipv6`*:: + -- -type: short +type: long -- -*`netflow.initiator_octets`*:: +*`netflow.flow_sampling_time_interval`*:: + -- type: long -- -*`netflow.responder_octets`*:: +*`netflow.flow_sampling_time_spacing`*:: + -- type: long -- -*`netflow.firewall_event`*:: +*`netflow.flow_selected_flow_delta_count`*:: + -- -type: short +type: long -- -*`netflow.ingress_vrfid`*:: +*`netflow.flow_selected_octet_delta_count`*:: + -- type: long -- -*`netflow.egress_vrfid`*:: +*`netflow.flow_selected_packet_delta_count`*:: + -- type: long -- -*`netflow.vr_fname`*:: +*`netflow.flow_selector_algorithm`*:: + -- -type: keyword +type: integer -- -*`netflow.post_mpls_top_label_exp`*:: +*`netflow.flow_start_delta_microseconds`*:: + -- -type: short +type: long -- -*`netflow.tcp_window_scale`*:: +*`netflow.flow_start_microseconds`*:: + -- -type: integer +type: date -- -*`netflow.biflow_direction`*:: +*`netflow.flow_start_milliseconds`*:: + -- -type: short +type: date -- -*`netflow.ethernet_header_length`*:: +*`netflow.flow_start_nanoseconds`*:: + -- -type: short +type: date -- -*`netflow.ethernet_payload_length`*:: +*`netflow.flow_start_seconds`*:: + -- -type: integer +type: date -- -*`netflow.ethernet_total_length`*:: +*`netflow.flow_start_sys_up_time`*:: + -- -type: integer +type: long -- -*`netflow.dot1q_vlan_id`*:: +*`netflow.flow_table_flush_event_count`*:: + -- -type: integer +type: long -- -*`netflow.dot1q_priority`*:: +*`netflow.flow_table_peak_count`*:: + -- -type: short +type: long -- -*`netflow.dot1q_customer_vlan_id`*:: +*`netflow.forwarding_status`*:: + -- -type: integer +type: short -- -*`netflow.dot1q_customer_priority`*:: +*`netflow.fragment_flags`*:: + -- type: short -- -*`netflow.metro_evc_id`*:: +*`netflow.fragment_identification`*:: + -- -type: keyword +type: long -- -*`netflow.metro_evc_type`*:: +*`netflow.fragment_offset`*:: + -- -type: short +type: integer -- -*`netflow.pseudo_wire_id`*:: +*`netflow.fw_blackout_secs`*:: + -- type: long -- -*`netflow.pseudo_wire_type`*:: +*`netflow.fw_configured_value`*:: + -- -type: integer +type: long -- -*`netflow.pseudo_wire_control_word`*:: +*`netflow.fw_cts_src_sgt`*:: + -- type: long -- -*`netflow.ingress_physical_interface`*:: +*`netflow.fw_event_level`*:: + -- type: long -- -*`netflow.egress_physical_interface`*:: +*`netflow.fw_event_level_id`*:: + -- type: long -- -*`netflow.post_dot1q_vlan_id`*:: +*`netflow.fw_ext_event`*:: + -- type: integer -- -*`netflow.post_dot1q_customer_vlan_id`*:: +*`netflow.fw_ext_event_alt`*:: + -- -type: integer +type: long -- -*`netflow.ethernet_type`*:: -+ --- -type: integer - --- - -*`netflow.post_ip_precedence`*:: -+ --- -type: short - --- - -*`netflow.collection_time_milliseconds`*:: -+ --- -type: date - --- - -*`netflow.export_sctp_stream_id`*:: -+ --- -type: integer - --- - -*`netflow.max_export_seconds`*:: -+ --- -type: date - --- - -*`netflow.max_flow_end_seconds`*:: -+ --- -type: date - --- - -*`netflow.message_md5_checksum`*:: -+ --- -type: short - --- - -*`netflow.message_scope`*:: -+ --- -type: short - --- - -*`netflow.min_export_seconds`*:: -+ --- -type: date - --- - -*`netflow.min_flow_start_seconds`*:: +*`netflow.fw_ext_event_desc`*:: + -- -type: date +type: keyword -- -*`netflow.opaque_octets`*:: +*`netflow.fw_half_open_count`*:: + -- -type: short +type: long -- -*`netflow.session_scope`*:: +*`netflow.fw_half_open_high`*:: + -- -type: short +type: long -- -*`netflow.max_flow_end_microseconds`*:: +*`netflow.fw_half_open_rate`*:: + -- -type: date +type: long -- -*`netflow.max_flow_end_milliseconds`*:: +*`netflow.fw_max_sessions`*:: + -- -type: date +type: long -- -*`netflow.max_flow_end_nanoseconds`*:: +*`netflow.fw_rule`*:: + -- -type: date +type: keyword -- -*`netflow.min_flow_start_microseconds`*:: +*`netflow.fw_summary_pkt_count`*:: + -- -type: date +type: long -- -*`netflow.min_flow_start_milliseconds`*:: +*`netflow.fw_zone_pair_id`*:: + -- -type: date +type: long -- -*`netflow.min_flow_start_nanoseconds`*:: +*`netflow.fw_zone_pair_name`*:: + -- -type: date +type: long -- -*`netflow.collector_certificate`*:: +*`netflow.global_address_mapping_high_threshold`*:: + -- -type: short +type: long -- -*`netflow.exporter_certificate`*:: +*`netflow.gre_key`*:: + -- -type: short +type: long -- -*`netflow.data_records_reliability`*:: +*`netflow.hash_digest_output`*:: + -- type: boolean -- -*`netflow.observation_point_type`*:: +*`netflow.hash_flow_domain`*:: + -- -type: short +type: integer -- -*`netflow.new_connection_delta_count`*:: +*`netflow.hash_initialiser_value`*:: + -- type: long -- -*`netflow.connection_sum_duration_seconds`*:: +*`netflow.hash_ip_payload_offset`*:: + -- type: long -- -*`netflow.connection_transaction_id`*:: +*`netflow.hash_ip_payload_size`*:: + -- type: long -- -*`netflow.post_nat_source_ipv6_address`*:: -+ --- -type: ip - --- - -*`netflow.post_nat_destination_ipv6_address`*:: -+ --- -type: ip - --- - -*`netflow.nat_pool_id`*:: +*`netflow.hash_output_range_max`*:: + -- type: long -- -*`netflow.nat_pool_name`*:: -+ --- -type: keyword - --- - -*`netflow.anonymization_flags`*:: +*`netflow.hash_output_range_min`*:: + -- -type: integer +type: long -- -*`netflow.anonymization_technique`*:: +*`netflow.hash_selected_range_max`*:: + -- -type: integer +type: long -- -*`netflow.information_element_index`*:: +*`netflow.hash_selected_range_min`*:: + -- -type: integer +type: long -- -*`netflow.p2p_technology`*:: +*`netflow.http_content_type`*:: + -- type: keyword -- -*`netflow.tunnel_technology`*:: +*`netflow.http_message_version`*:: + -- type: keyword -- -*`netflow.encrypted_technology`*:: +*`netflow.http_reason_phrase`*:: + -- type: keyword -- -*`netflow.bgp_validity_state`*:: -+ --- -type: short - --- - -*`netflow.ip_sec_spi`*:: -+ --- -type: long - --- - -*`netflow.gre_key`*:: +*`netflow.http_request_host`*:: + -- -type: long +type: keyword -- -*`netflow.nat_type`*:: +*`netflow.http_request_method`*:: + -- -type: short +type: keyword -- -*`netflow.initiator_packets`*:: +*`netflow.http_request_target`*:: + -- -type: long +type: keyword -- -*`netflow.responder_packets`*:: +*`netflow.http_status_code`*:: + -- -type: long +type: integer -- -*`netflow.observation_domain_name`*:: +*`netflow.http_user_agent`*:: + -- type: keyword -- -*`netflow.selection_sequence_id`*:: +*`netflow.icmp_code_ipv4`*:: + -- -type: long +type: short -- -*`netflow.selector_id`*:: +*`netflow.icmp_code_ipv6`*:: + -- -type: long +type: short -- -*`netflow.information_element_id`*:: +*`netflow.icmp_type_code_ipv4`*:: + -- type: integer -- -*`netflow.selector_algorithm`*:: +*`netflow.icmp_type_code_ipv6`*:: + -- type: integer -- -*`netflow.sampling_packet_interval`*:: +*`netflow.icmp_type_ipv4`*:: + -- -type: long +type: short -- -*`netflow.sampling_packet_space`*:: +*`netflow.icmp_type_ipv6`*:: + -- -type: long +type: short -- -*`netflow.sampling_time_interval`*:: +*`netflow.igmp_type`*:: + -- -type: long +type: short -- -*`netflow.sampling_time_space`*:: +*`netflow.ignored_data_record_total_count`*:: + -- type: long -- -*`netflow.sampling_size`*:: +*`netflow.ignored_layer2_frame_total_count`*:: + -- type: long -- -*`netflow.sampling_population`*:: +*`netflow.ignored_layer2_octet_total_count`*:: + -- type: long -- -*`netflow.sampling_probability`*:: +*`netflow.ignored_octet_total_count`*:: + -- -type: double +type: long -- -*`netflow.data_link_frame_size`*:: +*`netflow.ignored_packet_total_count`*:: + -- -type: integer +type: long -- -*`netflow.ip_header_packet_section`*:: +*`netflow.information_element_data_type`*:: + -- type: short -- -*`netflow.ip_payload_packet_section`*:: +*`netflow.information_element_description`*:: + -- -type: short +type: keyword -- -*`netflow.data_link_frame_section`*:: +*`netflow.information_element_id`*:: + -- -type: short +type: integer -- -*`netflow.mpls_label_stack_section`*:: +*`netflow.information_element_index`*:: + -- -type: short +type: integer -- -*`netflow.mpls_payload_packet_section`*:: +*`netflow.information_element_name`*:: + -- -type: short +type: keyword -- -*`netflow.selector_id_total_pkts_observed`*:: +*`netflow.information_element_range_begin`*:: + -- type: long -- -*`netflow.selector_id_total_pkts_selected`*:: +*`netflow.information_element_range_end`*:: + -- type: long -- -*`netflow.absolute_error`*:: +*`netflow.information_element_semantics`*:: + -- -type: double +type: short -- -*`netflow.relative_error`*:: +*`netflow.information_element_units`*:: + -- -type: double +type: integer -- -*`netflow.observation_time_seconds`*:: +*`netflow.ingress_broadcast_packet_total_count`*:: + -- -type: date +type: long -- -*`netflow.observation_time_milliseconds`*:: +*`netflow.ingress_interface`*:: + -- -type: date +type: long -- -*`netflow.observation_time_microseconds`*:: +*`netflow.ingress_interface_type`*:: + -- -type: date +type: long -- -*`netflow.observation_time_nanoseconds`*:: +*`netflow.ingress_multicast_packet_total_count`*:: + -- -type: date +type: long -- -*`netflow.digest_hash_value`*:: +*`netflow.ingress_physical_interface`*:: + -- type: long -- -*`netflow.hash_ip_payload_offset`*:: +*`netflow.ingress_unicast_packet_total_count`*:: + -- type: long -- -*`netflow.hash_ip_payload_size`*:: +*`netflow.ingress_vrfid`*:: + -- type: long -- -*`netflow.hash_output_range_min`*:: +*`netflow.initial_tcp_flags`*:: + -- -type: long +type: short -- -*`netflow.hash_output_range_max`*:: +*`netflow.initiator_octets`*:: + -- type: long -- -*`netflow.hash_selected_range_min`*:: +*`netflow.initiator_packets`*:: + -- type: long -- -*`netflow.hash_selected_range_max`*:: +*`netflow.interface_description`*:: + -- -type: long +type: keyword -- -*`netflow.hash_digest_output`*:: +*`netflow.interface_name`*:: + -- -type: boolean +type: keyword -- -*`netflow.hash_initialiser_value`*:: +*`netflow.intermediate_process_id`*:: + -- type: long -- -*`netflow.selector_name`*:: +*`netflow.internal_address_realm`*:: + -- -type: keyword +type: short -- -*`netflow.upper_ci_limit`*:: +*`netflow.ip_class_of_service`*:: + -- -type: double +type: short -- -*`netflow.lower_ci_limit`*:: +*`netflow.ip_diff_serv_code_point`*:: + -- -type: double +type: short -- -*`netflow.confidence_level`*:: +*`netflow.ip_header_length`*:: + -- -type: double +type: short -- -*`netflow.information_element_data_type`*:: +*`netflow.ip_header_packet_section`*:: + -- type: short -- -*`netflow.information_element_description`*:: +*`netflow.ip_next_hop_ipv4_address`*:: + -- -type: keyword +type: ip -- -*`netflow.information_element_name`*:: +*`netflow.ip_next_hop_ipv6_address`*:: + -- -type: keyword +type: ip -- -*`netflow.information_element_range_begin`*:: +*`netflow.ip_payload_length`*:: + -- type: long -- -*`netflow.information_element_range_end`*:: +*`netflow.ip_payload_packet_section`*:: + -- -type: long +type: short -- -*`netflow.information_element_semantics`*:: +*`netflow.ip_precedence`*:: + -- type: short -- -*`netflow.information_element_units`*:: +*`netflow.ip_sec_spi`*:: + -- -type: integer +type: long -- -*`netflow.private_enterprise_number`*:: +*`netflow.ip_total_length`*:: + -- type: long -- -*`netflow.virtual_station_interface_id`*:: +*`netflow.ip_ttl`*:: + -- type: short -- -*`netflow.virtual_station_interface_name`*:: -+ --- -type: keyword - --- - -*`netflow.virtual_station_uuid`*:: +*`netflow.ip_version`*:: + -- type: short -- -*`netflow.virtual_station_name`*:: -+ --- -type: keyword - --- - -*`netflow.layer2_segment_id`*:: +*`netflow.ipv4_ihl`*:: + -- -type: long +type: short -- -*`netflow.layer2_octet_delta_count`*:: +*`netflow.ipv4_options`*:: + -- type: long -- -*`netflow.layer2_octet_total_count`*:: +*`netflow.ipv4_router_sc`*:: + -- -type: long +type: ip -- -*`netflow.ingress_unicast_packet_total_count`*:: +*`netflow.ipv6_extension_headers`*:: + -- type: long -- -*`netflow.ingress_multicast_packet_total_count`*:: +*`netflow.is_multicast`*:: + -- -type: long +type: short -- -*`netflow.ingress_broadcast_packet_total_count`*:: +*`netflow.ixia_browser_id`*:: + -- -type: long +type: short -- -*`netflow.egress_unicast_packet_total_count`*:: +*`netflow.ixia_browser_name`*:: + -- -type: long +type: keyword -- -*`netflow.egress_broadcast_packet_total_count`*:: +*`netflow.ixia_device_id`*:: + -- -type: long +type: short -- -*`netflow.monitoring_interval_start_milli_seconds`*:: +*`netflow.ixia_device_name`*:: + -- -type: date +type: keyword -- -*`netflow.monitoring_interval_end_milli_seconds`*:: +*`netflow.ixia_dns_answer`*:: + -- -type: date +type: keyword -- -*`netflow.port_range_start`*:: +*`netflow.ixia_dns_classes`*:: + -- -type: integer +type: keyword -- -*`netflow.port_range_end`*:: +*`netflow.ixia_dns_query`*:: + -- -type: integer +type: keyword -- -*`netflow.port_range_step_size`*:: +*`netflow.ixia_dns_record_txt`*:: + -- -type: integer +type: keyword -- -*`netflow.port_range_num_ports`*:: +*`netflow.ixia_dst_as_name`*:: + -- -type: integer +type: keyword -- -*`netflow.sta_mac_address`*:: +*`netflow.ixia_dst_city_name`*:: + -- type: keyword -- -*`netflow.sta_ipv4_address`*:: +*`netflow.ixia_dst_country_code`*:: + -- -type: ip +type: keyword -- -*`netflow.wtp_mac_address`*:: +*`netflow.ixia_dst_country_name`*:: + -- type: keyword -- -*`netflow.ingress_interface_type`*:: +*`netflow.ixia_dst_latitude`*:: + -- -type: long +type: float -- -*`netflow.egress_interface_type`*:: +*`netflow.ixia_dst_longitude`*:: + -- -type: long +type: float -- -*`netflow.rtp_sequence_number`*:: +*`netflow.ixia_dst_region_code`*:: + -- -type: integer +type: keyword -- -*`netflow.user_name`*:: +*`netflow.ixia_dst_region_node`*:: + -- type: keyword -- -*`netflow.application_category_name`*:: +*`netflow.ixia_encrypt_cipher`*:: + -- type: keyword -- -*`netflow.application_sub_category_name`*:: +*`netflow.ixia_encrypt_key_length`*:: + -- -type: keyword +type: integer -- -*`netflow.application_group_name`*:: +*`netflow.ixia_encrypt_type`*:: + -- type: keyword -- -*`netflow.original_flows_present`*:: +*`netflow.ixia_http_host_name`*:: + -- -type: long +type: keyword -- -*`netflow.original_flows_initiated`*:: +*`netflow.ixia_http_uri`*:: + -- -type: long +type: keyword -- -*`netflow.original_flows_completed`*:: +*`netflow.ixia_http_user_agent`*:: + -- -type: long +type: keyword -- -*`netflow.distinct_count_of_source_ip_address`*:: +*`netflow.ixia_imsi_subscriber`*:: + -- -type: long +type: keyword -- -*`netflow.distinct_count_of_destination_ip_address`*:: +*`netflow.ixia_l7_app_id`*:: + -- type: long -- -*`netflow.distinct_count_of_source_ipv4_address`*:: +*`netflow.ixia_l7_app_name`*:: + -- -type: long +type: keyword -- -*`netflow.distinct_count_of_destination_ipv4_address`*:: +*`netflow.ixia_latency`*:: + -- type: long -- -*`netflow.distinct_count_of_source_ipv6_address`*:: +*`netflow.ixia_rev_octet_delta_count`*:: + -- type: long -- -*`netflow.distinct_count_of_destination_ipv6_address`*:: +*`netflow.ixia_rev_packet_delta_count`*:: + -- type: long -- -*`netflow.value_distribution_method`*:: +*`netflow.ixia_src_as_name`*:: + -- -type: short +type: keyword -- -*`netflow.rfc3550_jitter_milliseconds`*:: +*`netflow.ixia_src_city_name`*:: + -- -type: long +type: keyword -- -*`netflow.rfc3550_jitter_microseconds`*:: +*`netflow.ixia_src_country_code`*:: + -- -type: long +type: keyword -- -*`netflow.rfc3550_jitter_nanoseconds`*:: +*`netflow.ixia_src_country_name`*:: + -- -type: long +type: keyword -- -*`netflow.dot1q_dei`*:: +*`netflow.ixia_src_latitude`*:: + -- -type: boolean +type: float -- -*`netflow.dot1q_customer_dei`*:: +*`netflow.ixia_src_longitude`*:: + -- -type: boolean +type: float -- -*`netflow.flow_selector_algorithm`*:: +*`netflow.ixia_src_region_code`*:: + -- -type: integer +type: keyword -- -*`netflow.flow_selected_octet_delta_count`*:: +*`netflow.ixia_src_region_name`*:: + -- -type: long +type: keyword -- -*`netflow.flow_selected_packet_delta_count`*:: +*`netflow.ixia_threat_ipv4`*:: + -- -type: long +type: ip -- -*`netflow.flow_selected_flow_delta_count`*:: +*`netflow.ixia_threat_ipv6`*:: + -- -type: long +type: ip -- -*`netflow.selector_id_total_flows_observed`*:: +*`netflow.ixia_threat_type`*:: + -- -type: long +type: keyword -- -*`netflow.selector_id_total_flows_selected`*:: +*`netflow.large_packet_count`*:: + -- type: long -- -*`netflow.sampling_flow_interval`*:: +*`netflow.layer2_frame_delta_count`*:: + -- type: long -- -*`netflow.sampling_flow_spacing`*:: +*`netflow.layer2_frame_total_count`*:: + -- type: long -- -*`netflow.flow_sampling_time_interval`*:: +*`netflow.layer2_octet_delta_count`*:: + -- type: long -- -*`netflow.flow_sampling_time_spacing`*:: +*`netflow.layer2_octet_delta_sum_of_squares`*:: + -- type: long -- -*`netflow.hash_flow_domain`*:: +*`netflow.layer2_octet_total_count`*:: + -- -type: integer +type: long -- -*`netflow.transport_octet_delta_count`*:: +*`netflow.layer2_octet_total_sum_of_squares`*:: + -- type: long -- -*`netflow.transport_packet_delta_count`*:: +*`netflow.layer2_segment_id`*:: + -- type: long -- -*`netflow.original_exporter_ipv4_address`*:: +*`netflow.layer2packet_section_data`*:: + -- -type: ip +type: short -- -*`netflow.original_exporter_ipv6_address`*:: +*`netflow.layer2packet_section_offset`*:: + -- -type: ip +type: integer -- -*`netflow.original_observation_domain_id`*:: +*`netflow.layer2packet_section_size`*:: + -- -type: long +type: integer -- -*`netflow.intermediate_process_id`*:: +*`netflow.line_card_id`*:: + -- type: long -- -*`netflow.ignored_data_record_total_count`*:: +*`netflow.log_op`*:: + -- -type: long +type: short -- -*`netflow.data_link_frame_type`*:: +*`netflow.lower_ci_limit`*:: + -- -type: integer +type: double -- -*`netflow.section_offset`*:: +*`netflow.mark`*:: + -- -type: integer +type: long -- -*`netflow.section_exported_octets`*:: +*`netflow.max_bib_entries`*:: + -- -type: integer +type: long -- -*`netflow.dot1q_service_instance_tag`*:: +*`netflow.max_entries_per_user`*:: + -- -type: short +type: long -- -*`netflow.dot1q_service_instance_id`*:: +*`netflow.max_export_seconds`*:: + -- -type: long +type: date -- -*`netflow.dot1q_service_instance_priority`*:: +*`netflow.max_flow_end_microseconds`*:: + -- -type: short +type: date -- -*`netflow.dot1q_customer_source_mac_address`*:: +*`netflow.max_flow_end_milliseconds`*:: + -- -type: keyword +type: date -- -*`netflow.dot1q_customer_destination_mac_address`*:: +*`netflow.max_flow_end_nanoseconds`*:: + -- -type: keyword +type: date -- -*`netflow.post_layer2_octet_delta_count`*:: +*`netflow.max_flow_end_seconds`*:: + -- -type: long +type: date -- -*`netflow.post_mcast_layer2_octet_delta_count`*:: +*`netflow.max_fragments_pending_reassembly`*:: + -- type: long -- -*`netflow.post_layer2_octet_total_count`*:: +*`netflow.max_packet_size`*:: + -- -type: long +type: integer -- -*`netflow.post_mcast_layer2_octet_total_count`*:: +*`netflow.max_session_entries`*:: + -- type: long -- -*`netflow.minimum_layer2_total_length`*:: +*`netflow.max_subscribers`*:: + -- type: long -- -*`netflow.maximum_layer2_total_length`*:: +*`netflow.maximum_ip_total_length`*:: + -- type: long -- -*`netflow.dropped_layer2_octet_delta_count`*:: +*`netflow.maximum_layer2_total_length`*:: + -- type: long -- -*`netflow.dropped_layer2_octet_total_count`*:: +*`netflow.maximum_ttl`*:: + -- -type: long +type: short -- -*`netflow.ignored_layer2_octet_total_count`*:: +*`netflow.mean_flow_rate`*:: + -- type: long -- -*`netflow.not_sent_layer2_octet_total_count`*:: +*`netflow.mean_packet_rate`*:: + -- type: long -- -*`netflow.layer2_octet_delta_sum_of_squares`*:: +*`netflow.message_md5_checksum`*:: + -- -type: long +type: short -- -*`netflow.layer2_octet_total_sum_of_squares`*:: +*`netflow.message_scope`*:: + -- -type: long +type: short -- -*`netflow.layer2_frame_delta_count`*:: +*`netflow.metering_process_id`*:: + -- type: long -- -*`netflow.layer2_frame_total_count`*:: +*`netflow.metro_evc_id`*:: + -- -type: long +type: keyword -- -*`netflow.pseudo_wire_destination_ipv4_address`*:: +*`netflow.metro_evc_type`*:: + -- -type: ip +type: short -- -*`netflow.ignored_layer2_frame_total_count`*:: +*`netflow.mib_capture_time_semantics`*:: + -- -type: long +type: short -- -*`netflow.mib_object_value_integer`*:: +*`netflow.mib_context_engine_id`*:: + -- -type: integer +type: short -- -*`netflow.mib_object_value_octet_string`*:: +*`netflow.mib_context_name`*:: + -- -type: short +type: keyword -- -*`netflow.mib_object_value_oid`*:: +*`netflow.mib_index_indicator`*:: + -- -type: short +type: long -- -*`netflow.mib_object_value_bits`*:: +*`netflow.mib_module_name`*:: + -- -type: short +type: keyword -- -*`netflow.mib_object_value_ip_address`*:: +*`netflow.mib_object_description`*:: + -- -type: ip +type: keyword -- -*`netflow.mib_object_value_counter`*:: +*`netflow.mib_object_identifier`*:: + -- -type: long +type: short -- -*`netflow.mib_object_value_gauge`*:: +*`netflow.mib_object_name`*:: + -- -type: long +type: keyword -- -*`netflow.mib_object_value_time_ticks`*:: +*`netflow.mib_object_syntax`*:: + -- -type: long +type: keyword -- -*`netflow.mib_object_value_unsigned`*:: +*`netflow.mib_object_value_bits`*:: + -- -type: long +type: short -- -*`netflow.mib_object_identifier`*:: +*`netflow.mib_object_value_counter`*:: + -- -type: short +type: long -- -*`netflow.mib_sub_identifier`*:: +*`netflow.mib_object_value_gauge`*:: + -- type: long -- -*`netflow.mib_index_indicator`*:: +*`netflow.mib_object_value_integer`*:: + -- -type: long +type: integer -- -*`netflow.mib_capture_time_semantics`*:: +*`netflow.mib_object_value_ip_address`*:: + -- -type: short +type: ip -- -*`netflow.mib_context_engine_id`*:: +*`netflow.mib_object_value_octet_string`*:: + -- type: short -- -*`netflow.mib_context_name`*:: +*`netflow.mib_object_value_oid`*:: + -- -type: keyword +type: short -- -*`netflow.mib_object_name`*:: +*`netflow.mib_object_value_time_ticks`*:: + -- -type: keyword +type: long -- -*`netflow.mib_object_description`*:: +*`netflow.mib_object_value_unsigned`*:: + -- -type: keyword +type: long -- -*`netflow.mib_object_syntax`*:: +*`netflow.mib_sub_identifier`*:: + -- -type: keyword +type: long -- -*`netflow.mib_module_name`*:: +*`netflow.min_export_seconds`*:: + -- -type: keyword +type: date -- -*`netflow.mobile_imsi`*:: +*`netflow.min_flow_start_microseconds`*:: + -- -type: keyword +type: date -- -*`netflow.mobile_msisdn`*:: +*`netflow.min_flow_start_milliseconds`*:: + -- -type: keyword +type: date -- -*`netflow.http_status_code`*:: +*`netflow.min_flow_start_nanoseconds`*:: + -- -type: integer +type: date -- -*`netflow.source_transport_ports_limit`*:: +*`netflow.min_flow_start_seconds`*:: + -- -type: integer +type: date -- -*`netflow.http_request_method`*:: +*`netflow.minimum_ip_total_length`*:: + -- -type: keyword +type: long -- -*`netflow.http_request_host`*:: +*`netflow.minimum_layer2_total_length`*:: + -- -type: keyword +type: long -- -*`netflow.http_request_target`*:: +*`netflow.minimum_ttl`*:: + -- -type: keyword +type: short -- -*`netflow.http_message_version`*:: +*`netflow.mobile_imsi`*:: + -- type: keyword -- -*`netflow.nat_instance_id`*:: +*`netflow.mobile_msisdn`*:: + -- -type: long +type: keyword -- -*`netflow.internal_address_realm`*:: +*`netflow.monitoring_interval_end_milli_seconds`*:: + -- -type: short +type: date -- -*`netflow.external_address_realm`*:: +*`netflow.monitoring_interval_start_milli_seconds`*:: + -- -type: short +type: date -- -*`netflow.nat_quota_exceeded_event`*:: +*`netflow.mpls_label_stack_depth`*:: + -- type: long -- -*`netflow.nat_threshold_event`*:: +*`netflow.mpls_label_stack_length`*:: + -- type: long -- -*`netflow.http_user_agent`*:: +*`netflow.mpls_label_stack_section`*:: + -- -type: keyword +type: short -- -*`netflow.http_content_type`*:: +*`netflow.mpls_label_stack_section10`*:: + -- -type: keyword +type: short -- -*`netflow.http_reason_phrase`*:: +*`netflow.mpls_label_stack_section2`*:: + -- -type: keyword +type: short -- -*`netflow.max_session_entries`*:: +*`netflow.mpls_label_stack_section3`*:: + -- -type: long +type: short -- -*`netflow.max_bib_entries`*:: +*`netflow.mpls_label_stack_section4`*:: + -- -type: long +type: short -- -*`netflow.max_entries_per_user`*:: +*`netflow.mpls_label_stack_section5`*:: + -- -type: long +type: short -- -*`netflow.max_subscribers`*:: +*`netflow.mpls_label_stack_section6`*:: + -- -type: long +type: short -- -*`netflow.max_fragments_pending_reassembly`*:: +*`netflow.mpls_label_stack_section7`*:: + -- -type: long +type: short -- -*`netflow.address_pool_high_threshold`*:: +*`netflow.mpls_label_stack_section8`*:: + -- -type: long +type: short -- -*`netflow.address_pool_low_threshold`*:: +*`netflow.mpls_label_stack_section9`*:: + -- -type: long +type: short -- -*`netflow.address_port_mapping_high_threshold`*:: +*`netflow.mpls_payload_length`*:: + -- type: long -- -*`netflow.address_port_mapping_low_threshold`*:: +*`netflow.mpls_payload_packet_section`*:: + -- -type: long +type: short -- -*`netflow.address_port_mapping_per_user_high_threshold`*:: +*`netflow.mpls_top_label_exp`*:: + -- -type: long +type: short -- -*`netflow.global_address_mapping_high_threshold`*:: +*`netflow.mpls_top_label_ipv4_address`*:: + -- -type: long +type: ip -- -*`netflow.vpn_identifier`*:: +*`netflow.mpls_top_label_ipv6_address`*:: + -- -type: short +type: ip -- -*`netflow.initial_tcp_flags`*:: +*`netflow.mpls_top_label_prefix_length`*:: + -- type: short -- -*`netflow.union_tcp_flags`*:: +*`netflow.mpls_top_label_stack_section`*:: + -- type: short -- -*`netflow.payload`*:: +*`netflow.mpls_top_label_ttl`*:: + -- -type: keyword +type: short -- -*`netflow.reverse_flow_delta_milliseconds`*:: +*`netflow.mpls_top_label_type`*:: + -- -type: long +type: short -- -*`netflow.silk_app_label`*:: +*`netflow.mpls_vpn_route_distinguisher`*:: + -- -type: integer +type: short -- -*`netflow.payload_entropy`*:: +*`netflow.mptcp_address_id`*:: + -- type: short -- -*`netflow.os_name`*:: +*`netflow.mptcp_flags`*:: + -- -type: keyword +type: short -- -*`netflow.os_version`*:: +*`netflow.mptcp_initial_data_sequence_number`*:: + -- -type: keyword +type: long -- -*`netflow.first_packet_banner`*:: +*`netflow.mptcp_maximum_segment_size`*:: + -- -type: keyword +type: integer -- -*`netflow.second_packet_banner`*:: +*`netflow.mptcp_receiver_token`*:: + -- -type: keyword +type: long -- -*`netflow.flow_attributes`*:: +*`netflow.multicast_replication_factor`*:: + -- -type: integer +type: long -- -*`netflow.expired_fragment_count`*:: +*`netflow.nat_event`*:: + -- -type: long +type: short -- -*`netflow.assembled_fragment_count`*:: +*`netflow.nat_inside_svcid`*:: + -- -type: long +type: integer -- -*`netflow.mean_flow_rate`*:: +*`netflow.nat_instance_id`*:: + -- type: long -- -*`netflow.mean_packet_rate`*:: +*`netflow.nat_originating_address_realm`*:: + -- -type: long +type: short -- -*`netflow.flow_table_flush_event_count`*:: +*`netflow.nat_outside_svcid`*:: + -- -type: long +type: integer -- -*`netflow.flow_table_peak_count`*:: +*`netflow.nat_pool_id`*:: + -- type: long -- -*`netflow.os_finger_print`*:: +*`netflow.nat_pool_name`*:: + -- type: keyword -- -*`netflow.tftp_filename`*:: +*`netflow.nat_quota_exceeded_event`*:: + -- -type: keyword +type: long -- -*`netflow.tftp_mode`*:: +*`netflow.nat_sub_string`*:: + -- type: keyword -- -*`netflow.dns_query_response`*:: +*`netflow.nat_threshold_event`*:: + -- -type: short +type: long -- -*`netflow.dns_qr_type`*:: +*`netflow.nat_type`*:: + -- -type: integer +type: short -- -*`netflow.dns_authoritative`*:: +*`netflow.netscale_ica_client_version`*:: + -- -type: short +type: keyword -- -*`netflow.dns_nx_domain`*:: +*`netflow.netscaler_aaa_username`*:: + -- -type: short +type: keyword -- -*`netflow.dns_rr_section`*:: +*`netflow.netscaler_app_name`*:: + -- -type: short +type: keyword -- -*`netflow.dns_qname`*:: +*`netflow.netscaler_app_name_app_id`*:: + -- -type: keyword +type: long -- -*`netflow.dns_cname`*:: +*`netflow.netscaler_app_name_incarnation_number`*:: + -- -type: keyword +type: long -- -*`netflow.dns_mx_preference`*:: +*`netflow.netscaler_app_template_name`*:: + -- -type: integer +type: keyword -- -*`netflow.dns_mx_exchange`*:: +*`netflow.netscaler_app_unit_name_app_id`*:: + -- -type: keyword +type: long -- -*`netflow.dns_nsd_name`*:: +*`netflow.netscaler_application_startup_duration`*:: + -- -type: keyword +type: long -- -*`netflow.dns_ptrd_name`*:: +*`netflow.netscaler_application_startup_time`*:: + -- -type: keyword +type: long -- -*`netflow.ssl_cipher`*:: +*`netflow.netscaler_cache_redir_client_connection_core_id`*:: + -- -type: keyword +type: long -- -*`netflow.ssl_client_version`*:: +*`netflow.netscaler_cache_redir_client_connection_transaction_id`*:: + -- -type: short +type: long -- -*`netflow.ssl_server_cipher`*:: +*`netflow.netscaler_client_rtt`*:: + -- type: long -- -*`netflow.ssl_compression_method`*:: +*`netflow.netscaler_connection_chain_hop_count`*:: + -- -type: short +type: long -- -*`netflow.ssl_cert_version`*:: +*`netflow.netscaler_connection_chain_id`*:: + -- type: short -- -*`netflow.ssl_cert_signature`*:: +*`netflow.netscaler_connection_id`*:: + -- -type: keyword +type: long -- -*`netflow.dns_ttl`*:: +*`netflow.netscaler_current_license_consumed`*:: + -- type: long -- -*`netflow.dns_txt_data`*:: +*`netflow.netscaler_db_clt_host_name`*:: + -- type: keyword -- -*`netflow.dns_soa_serial`*:: +*`netflow.netscaler_db_database_name`*:: + -- -type: long +type: keyword -- -*`netflow.dns_soa_refresh`*:: +*`netflow.netscaler_db_login_flags`*:: + -- type: long -- -*`netflow.dns_soa_retry`*:: +*`netflow.netscaler_db_protocol_name`*:: + -- -type: long +type: short -- -*`netflow.dns_soa_expire`*:: +*`netflow.netscaler_db_req_string`*:: + -- -type: long +type: keyword -- -*`netflow.dns_soa_minimum`*:: +*`netflow.netscaler_db_req_type`*:: + -- -type: long +type: short -- -*`netflow.dns_soam_name`*:: +*`netflow.netscaler_db_resp_length`*:: + -- -type: keyword +type: long -- -*`netflow.dns_soar_name`*:: +*`netflow.netscaler_db_resp_status`*:: + -- -type: keyword +type: long -- -*`netflow.dns_srv_priority`*:: +*`netflow.netscaler_db_resp_status_string`*:: + -- -type: integer +type: keyword -- -*`netflow.dns_srv_weight`*:: +*`netflow.netscaler_db_user_name`*:: + -- -type: integer +type: keyword -- -*`netflow.dns_srv_port`*:: +*`netflow.netscaler_flow_flags`*:: + -- -type: integer +type: long -- -*`netflow.dns_srv_target`*:: +*`netflow.netscaler_http_client_interaction_end_time`*:: + -- -type: integer +type: keyword -- -*`netflow.tcp_urg_total_count`*:: +*`netflow.netscaler_http_client_interaction_start_time`*:: + -- -type: long +type: keyword -- -*`netflow.dns_id`*:: +*`netflow.netscaler_http_client_render_end_time`*:: + -- -type: integer +type: keyword -- -*`netflow.ssl_cert_serial_number`*:: +*`netflow.netscaler_http_client_render_start_time`*:: + -- type: keyword -- -*`netflow.ssl_object_type`*:: +*`netflow.netscaler_http_content_type`*:: + -- type: keyword -- -*`netflow.ssl_object_value`*:: +*`netflow.netscaler_http_domain_name`*:: + -- type: keyword -- -*`netflow.ssl_cert_validity_not_before`*:: +*`netflow.netscaler_http_req_authorization`*:: + -- type: keyword -- -*`netflow.ssl_cert_validity_not_after`*:: +*`netflow.netscaler_http_req_cookie`*:: + -- type: keyword -- -*`netflow.ssl_public_key_algorithm`*:: +*`netflow.netscaler_http_req_forw_fb`*:: + -- -type: keyword +type: long -- -*`netflow.ssl_public_key_length`*:: +*`netflow.netscaler_http_req_forw_lb`*:: + -- -type: keyword +type: long -- -*`netflow.rtp_payload_type`*:: +*`netflow.netscaler_http_req_host`*:: + -- -type: short +type: keyword -- -*`netflow.reverse_rtp_payload_type`*:: +*`netflow.netscaler_http_req_method`*:: + -- -type: short +type: keyword -- -*`netflow.mptcp_initial_data_sequence_number`*:: +*`netflow.netscaler_http_req_rcv_fb`*:: + -- type: long -- -*`netflow.mptcp_receiver_token`*:: +*`netflow.netscaler_http_req_rcv_lb`*:: + -- type: long -- -*`netflow.mptcp_maximum_segment_size`*:: +*`netflow.netscaler_http_req_referer`*:: + -- -type: integer +type: keyword -- -*`netflow.mptcp_address_id`*:: +*`netflow.netscaler_http_req_url`*:: + -- -type: short +type: keyword -- -*`netflow.mptcp_flags`*:: +*`netflow.netscaler_http_req_user_agent`*:: + -- -type: short +type: keyword -- -*`netflow.ssl_server_name`*:: +*`netflow.netscaler_http_req_via`*:: + -- type: keyword -- -*`netflow.ssl_certificate_hash`*:: +*`netflow.netscaler_http_req_xforwarded_for`*:: + -- type: keyword -- -*`netflow.small_packet_count`*:: +*`netflow.netscaler_http_res_forw_fb`*:: + -- type: long -- -*`netflow.non_empty_packet_count`*:: +*`netflow.netscaler_http_res_forw_lb`*:: + -- type: long -- -*`netflow.data_byte_count`*:: +*`netflow.netscaler_http_res_location`*:: + -- -type: long +type: keyword -- -*`netflow.average_interarrival_time`*:: +*`netflow.netscaler_http_res_rcv_fb`*:: + -- type: long -- -*`netflow.standard_deviation_interarrival_time`*:: +*`netflow.netscaler_http_res_rcv_lb`*:: + -- type: long -- -*`netflow.first_non_empty_packet_size`*:: +*`netflow.netscaler_http_res_set_cookie`*:: + -- -type: integer +type: keyword -- -*`netflow.max_packet_size`*:: +*`netflow.netscaler_http_res_set_cookie2`*:: + -- -type: integer +type: keyword -- -*`netflow.first_eight_non_empty_packet_directions`*:: +*`netflow.netscaler_http_rsp_len`*:: + -- -type: short +type: long -- -*`netflow.standard_deviation_payload_length`*:: +*`netflow.netscaler_http_rsp_status`*:: + -- -type: short +type: integer -- -*`netflow.large_packet_count`*:: +*`netflow.netscaler_ica_app_module_path`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_initial_tcp_flags`*:: +*`netflow.netscaler_ica_app_process_id`*:: + -- -type: short +type: long -- -*`netflow.reverse_union_tcp_flags`*:: +*`netflow.netscaler_ica_application_name`*:: + -- -type: short +type: keyword -- -*`netflow.reverse_payload`*:: +*`netflow.netscaler_ica_application_termination_time`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_payload_entropy`*:: +*`netflow.netscaler_ica_application_termination_type`*:: + -- -type: short +type: integer -- -*`netflow.reverse_os_name`*:: +*`netflow.netscaler_ica_channel_id1`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_os_version`*:: +*`netflow.netscaler_ica_channel_id1_bytes`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_first_packet_banner`*:: +*`netflow.netscaler_ica_channel_id2`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_second_packet_banner`*:: +*`netflow.netscaler_ica_channel_id2_bytes`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_flow_attributes`*:: +*`netflow.netscaler_ica_channel_id3`*:: + -- -type: integer +type: long -- -*`netflow.reverse_os_finger_print`*:: +*`netflow.netscaler_ica_channel_id3_bytes`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_rtp_payload_type`*:: +*`netflow.netscaler_ica_channel_id4`*:: + -- -type: short +type: long -- -*`netflow.reverse_small_packet_count`*:: +*`netflow.netscaler_ica_channel_id4_bytes`*:: + -- type: long -- -*`netflow.reverse_non_empty_packet_count`*:: +*`netflow.netscaler_ica_channel_id5`*:: + -- type: long -- -*`netflow.reverse_data_byte_count`*:: +*`netflow.netscaler_ica_channel_id5_bytes`*:: + -- type: long -- -*`netflow.reverse_average_interarrival_time`*:: +*`netflow.netscaler_ica_client_host_name`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_standard_deviation_interarrival_time`*:: +*`netflow.netscaler_ica_client_ip`*:: + -- -type: long +type: ip -- -*`netflow.reverse_first_non_empty_packet_size`*:: +*`netflow.netscaler_ica_client_launcher`*:: + -- type: integer -- -*`netflow.reverse_max_packet_size`*:: +*`netflow.netscaler_ica_client_side_rto_count`*:: + -- type: integer -- -*`netflow.reverse_standard_deviation_payload_length`*:: +*`netflow.netscaler_ica_client_side_window_size`*:: + -- type: integer -- -*`netflow.reverse_large_packet_count`*:: +*`netflow.netscaler_ica_client_type`*:: + -- -type: long +type: integer -- -*`netflow.policy_qos_classification_hierarchy`*:: +*`netflow.netscaler_ica_clientside_delay`*:: + -- type: long -- -*`netflow.waasoptimization_segment`*:: +*`netflow.netscaler_ica_clientside_jitter`*:: + -- -type: short +type: long -- -*`netflow.art_clientpackets`*:: +*`netflow.netscaler_ica_clientside_packets_retransmit`*:: + -- -type: long +type: integer -- -*`netflow.art_serverpackets`*:: +*`netflow.netscaler_ica_clientside_rtt`*:: + -- type: long -- -*`netflow.art_count_retransmissions`*:: +*`netflow.netscaler_ica_clientside_rx_bytes`*:: + -- type: long -- -*`netflow.art_count_transactions`*:: +*`netflow.netscaler_ica_clientside_srtt`*:: + -- type: long -- -*`netflow.art_total_transaction_time_sum`*:: +*`netflow.netscaler_ica_clientside_tx_bytes`*:: + -- type: long -- -*`netflow.art_total_transaction_time_maximum`*:: +*`netflow.netscaler_ica_connection_priority`*:: + -- -type: long +type: integer -- -*`netflow.art_total_transaction_time_minimum`*:: +*`netflow.netscaler_ica_device_serial_no`*:: + -- type: long -- -*`netflow.art_count_new_connections`*:: +*`netflow.netscaler_ica_domain_name`*:: + -- -type: long +type: keyword -- -*`netflow.art_count_responses`*:: +*`netflow.netscaler_ica_flags`*:: + -- type: long -- -*`netflow.art_count_responses_histogram_bucket1`*:: +*`netflow.netscaler_ica_host_delay`*:: + -- type: long -- -*`netflow.art_count_responses_histogram_bucket2`*:: +*`netflow.netscaler_ica_l7_client_latency`*:: + -- type: long -- -*`netflow.art_count_responses_histogram_bucket3`*:: +*`netflow.netscaler_ica_l7_server_latency`*:: + -- type: long -- -*`netflow.art_count_responses_histogram_bucket4`*:: +*`netflow.netscaler_ica_launch_mechanism`*:: + -- -type: long +type: integer -- -*`netflow.art_count_responses_histogram_bucket5`*:: +*`netflow.netscaler_ica_network_update_end_time`*:: + -- type: long -- -*`netflow.art_count_responses_histogram_bucket6`*:: +*`netflow.netscaler_ica_network_update_start_time`*:: + -- type: long -- -*`netflow.art_count_responses_histogram_bucket7`*:: +*`netflow.netscaler_ica_rtt`*:: + -- type: long -- -*`netflow.art_count_late_responses`*:: +*`netflow.netscaler_ica_server_name`*:: + -- -type: long +type: keyword -- -*`netflow.art_response_time_sum`*:: +*`netflow.netscaler_ica_server_side_rto_count`*:: + -- -type: long +type: integer -- -*`netflow.art_response_time_maximum`*:: +*`netflow.netscaler_ica_server_side_window_size`*:: + -- -type: long +type: integer -- -*`netflow.art_response_time_minimum`*:: +*`netflow.netscaler_ica_serverside_delay`*:: + -- type: long -- -*`netflow.art_server_response_time_sum`*:: +*`netflow.netscaler_ica_serverside_jitter`*:: + -- type: long -- -*`netflow.art_server_response_time_maximum`*:: +*`netflow.netscaler_ica_serverside_packets_retransmit`*:: + -- -type: long +type: integer -- -*`netflow.art_server_response_time_minimum`*:: +*`netflow.netscaler_ica_serverside_rtt`*:: + -- type: long -- -*`netflow.art_total_response_time_sum`*:: +*`netflow.netscaler_ica_serverside_srtt`*:: + -- type: long -- -*`netflow.art_total_response_time_maximum`*:: +*`netflow.netscaler_ica_session_end_time`*:: + -- type: long -- -*`netflow.art_total_response_time_minimum`*:: +*`netflow.netscaler_ica_session_guid`*:: + -- -type: long +type: short -- -*`netflow.art_network_time_sum`*:: +*`netflow.netscaler_ica_session_reconnects`*:: + -- -type: long +type: short -- -*`netflow.art_network_time_maximum`*:: +*`netflow.netscaler_ica_session_setup_time`*:: + -- type: long -- -*`netflow.art_network_time_minimum`*:: +*`netflow.netscaler_ica_session_update_begin_sec`*:: + -- type: long -- -*`netflow.art_client_network_time_sum`*:: +*`netflow.netscaler_ica_session_update_end_sec`*:: + -- type: long -- -*`netflow.art_client_network_time_maximum`*:: +*`netflow.netscaler_ica_username`*:: + -- -type: long +type: keyword -- -*`netflow.art_client_network_time_minimum`*:: +*`netflow.netscaler_license_type`*:: + -- -type: long +type: short -- -*`netflow.art_server_network_time_sum`*:: +*`netflow.netscaler_main_page_core_id`*:: + -- type: long -- -*`netflow.art_server_network_time_maximum`*:: +*`netflow.netscaler_main_page_id`*:: + -- type: long -- -*`netflow.art_server_network_time_minimum`*:: +*`netflow.netscaler_max_license_count`*:: + -- type: long -- -*`netflow.application_http_uri_statistics`*:: +*`netflow.netscaler_msi_client_cookie`*:: + -- type: short -- -*`netflow.policy_qos_queueindex`*:: +*`netflow.netscaler_round_trip_time`*:: + -- type: long -- -*`netflow.policy_qos_queue_index`*:: +*`netflow.netscaler_server_ttfb`*:: + -- type: long -- -*`netflow.policy_qos_queuedrops`*:: +*`netflow.netscaler_server_ttlb`*:: + -- type: long -- -*`netflow.application_category_name`*:: +*`netflow.netscaler_syslog_message`*:: + -- -type: long +type: keyword -- -*`netflow.application_sub_category_name`*:: +*`netflow.netscaler_syslog_priority`*:: + -- -type: long +type: short -- -*`netflow.application_group_name`*:: +*`netflow.netscaler_syslog_timestamp`*:: + -- type: long -- -*`netflow.application_http_user-agent`*:: +*`netflow.netscaler_transaction_id`*:: + -- -type: short +type: long -- -*`netflow.application_traffic-class`*:: +*`netflow.netscaler_unknown270`*:: + -- type: long -- -*`netflow.application_business-relevance`*:: +*`netflow.netscaler_unknown271`*:: + -- type: long -- -*`netflow.timestamp_absolute_monitoring-interval`*:: +*`netflow.netscaler_unknown272`*:: + -- type: long -- -*`netflow.netscaler_round_trip_time`*:: +*`netflow.netscaler_unknown273`*:: + -- type: long -- -*`netflow.netscaler_transaction_id`*:: +*`netflow.netscaler_unknown274`*:: + -- type: long -- -*`netflow.netscaler_http_req_url`*:: +*`netflow.netscaler_unknown275`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_http_req_cookie`*:: +*`netflow.netscaler_unknown276`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_flow_flags`*:: +*`netflow.netscaler_unknown277`*:: + -- type: long -- -*`netflow.netscaler_connection_id`*:: +*`netflow.netscaler_unknown278`*:: + -- type: long -- -*`netflow.netscaler_syslog_priority`*:: +*`netflow.netscaler_unknown279`*:: + -- -type: short +type: long -- -*`netflow.netscaler_syslog_message`*:: +*`netflow.netscaler_unknown280`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_syslog_timestamp`*:: +*`netflow.netscaler_unknown281`*:: + -- type: long -- -*`netflow.netscaler_http_req_referer`*:: +*`netflow.netscaler_unknown282`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_http_req_method`*:: +*`netflow.netscaler_unknown283`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_http_req_host`*:: +*`netflow.netscaler_unknown284`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_http_req_user_agent`*:: +*`netflow.netscaler_unknown285`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_http_rsp_status`*:: +*`netflow.netscaler_unknown286`*:: + -- -type: integer +type: long -- -*`netflow.netscaler_http_rsp_len`*:: +*`netflow.netscaler_unknown287`*:: + -- type: long -- -*`netflow.netscaler_server_ttfb`*:: +*`netflow.netscaler_unknown288`*:: + -- type: long -- -*`netflow.netscaler_server_ttlb`*:: +*`netflow.netscaler_unknown289`*:: + -- type: long -- -*`netflow.netscaler_app_name_incarnation_number`*:: +*`netflow.netscaler_unknown290`*:: + -- type: long -- -*`netflow.netscaler_app_name_app_id`*:: +*`netflow.netscaler_unknown291`*:: + -- type: long -- -*`netflow.netscaler_app_name`*:: +*`netflow.netscaler_unknown292`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_http_req_rcv_fb`*:: +*`netflow.netscaler_unknown293`*:: + -- type: long -- -*`netflow.netscaler_http_req_forw_fb`*:: +*`netflow.netscaler_unknown294`*:: + -- type: long -- -*`netflow.netscaler_http_res_rcv_fb`*:: +*`netflow.netscaler_unknown295`*:: + -- type: long -- -*`netflow.netscaler_http_res_forw_fb`*:: +*`netflow.netscaler_unknown296`*:: + -- type: long -- -*`netflow.netscaler_http_req_rcv_lb`*:: +*`netflow.netscaler_unknown297`*:: + -- type: long -- -*`netflow.netscaler_http_req_forw_lb`*:: +*`netflow.netscaler_unknown298`*:: + -- type: long -- -*`netflow.netscaler_main_page_id`*:: +*`netflow.netscaler_unknown299`*:: + -- type: long -- -*`netflow.netscaler_main_page_core_id`*:: +*`netflow.netscaler_unknown300`*:: + -- type: long -- -*`netflow.netscaler_http_client_interaction_start_time`*:: +*`netflow.netscaler_unknown301`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_http_client_render_end_time`*:: +*`netflow.netscaler_unknown302`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_http_client_render_start_time`*:: +*`netflow.netscaler_unknown303`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_app_template_name`*:: +*`netflow.netscaler_unknown304`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_http_client_interaction_end_time`*:: +*`netflow.netscaler_unknown305`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_http_res_rcv_lb`*:: +*`netflow.netscaler_unknown306`*:: + -- type: long -- -*`netflow.netscaler_http_res_forw_lb`*:: +*`netflow.netscaler_unknown307`*:: + -- type: long -- -*`netflow.netscaler_app_unit_name_app_id`*:: +*`netflow.netscaler_unknown308`*:: + -- type: long -- -*`netflow.netscaler_db_login_flags`*:: +*`netflow.netscaler_unknown309`*:: + -- type: long -- -*`netflow.netscaler_db_req_type`*:: +*`netflow.netscaler_unknown310`*:: + -- -type: short +type: long -- -*`netflow.netscaler_db_protocol_name`*:: +*`netflow.netscaler_unknown311`*:: + -- -type: short +type: long -- -*`netflow.netscaler_db_user_name`*:: +*`netflow.netscaler_unknown312`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_db_database_name`*:: +*`netflow.netscaler_unknown313`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_db_clt_host_name`*:: +*`netflow.netscaler_unknown314`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_db_req_string`*:: +*`netflow.netscaler_unknown315`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_db_resp_status_string`*:: +*`netflow.netscaler_unknown316`*:: + -- type: keyword -- -*`netflow.netscaler_db_resp_status`*:: +*`netflow.netscaler_unknown317`*:: + -- type: long -- -*`netflow.netscaler_db_resp_length`*:: +*`netflow.netscaler_unknown318`*:: + -- type: long -- -*`netflow.netscaler_client_rtt`*:: +*`netflow.netscaler_unknown319`*:: + -- -type: long +type: keyword -- -*`netflow.netscaler_http_content_type`*:: +*`netflow.netscaler_unknown320`*:: + -- -type: keyword +type: integer -- -*`netflow.netscaler_http_req_authorization`*:: +*`netflow.netscaler_unknown321`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_http_req_via`*:: +*`netflow.netscaler_unknown322`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_http_res_location`*:: +*`netflow.netscaler_unknown323`*:: + -- -type: keyword +type: integer -- -*`netflow.netscaler_http_res_set_cookie`*:: +*`netflow.netscaler_unknown324`*:: + -- -type: keyword +type: integer -- -*`netflow.netscaler_http_res_set_cookie2`*:: +*`netflow.netscaler_unknown325`*:: + -- -type: keyword +type: integer -- -*`netflow.netscaler_http_req_xforwarded_for`*:: +*`netflow.netscaler_unknown326`*:: + -- -type: keyword +type: integer -- -*`netflow.netscaler_connection_chain_id`*:: +*`netflow.netscaler_unknown327`*:: + -- -type: short +type: long -- -*`netflow.netscaler_connection_chain_hop_count`*:: +*`netflow.netscaler_unknown328`*:: + -- -type: long +type: integer -- -*`netflow.netscaler_ica_session_guid`*:: +*`netflow.netscaler_unknown329`*:: + -- -type: short +type: integer -- -*`netflow.netscale_ica_client_version`*:: +*`netflow.netscaler_unknown330`*:: + -- -type: keyword +type: integer -- -*`netflow.netscaler_ica_client_type`*:: +*`netflow.netscaler_unknown331`*:: + -- type: integer -- -*`netflow.netscaler_ica_client_ip`*:: +*`netflow.netscaler_unknown332`*:: + -- -type: ip +type: long -- -*`netflow.netscaler_ica_client_host_name`*:: +*`netflow.netscaler_unknown333`*:: + -- type: keyword -- -*`netflow.netscaler_aaa_username`*:: +*`netflow.netscaler_unknown334`*:: + -- type: keyword -- -*`netflow.netscaler_ica_domain_name`*:: +*`netflow.netscaler_unknown335`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_ica_client_launcher`*:: +*`netflow.netscaler_unknown336`*:: + -- -type: integer +type: long -- -*`netflow.netscaler_ica_session_setup_time`*:: +*`netflow.netscaler_unknown337`*:: + -- type: long -- -*`netflow.netscaler_ica_server_name`*:: +*`netflow.netscaler_unknown338`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_ica_session_reconnects`*:: +*`netflow.netscaler_unknown339`*:: + -- -type: short +type: long + +-- + +*`netflow.netscaler_unknown340`*:: ++ +-- +type: long -- -*`netflow.netscaler_ica_rtt`*:: +*`netflow.netscaler_unknown341`*:: + -- type: long -- -*`netflow.netscaler_ica_clientside_rx_bytes`*:: +*`netflow.netscaler_unknown342`*:: + -- type: long -- -*`netflow.netscaler_ica_clientside_tx_bytes`*:: +*`netflow.netscaler_unknown343`*:: + -- type: long -- -*`netflow.netscaler_ica_clientside_packets_retransmit`*:: +*`netflow.netscaler_unknown344`*:: + -- -type: integer +type: long -- -*`netflow.netscaler_ica_serverside_packets_retransmit`*:: +*`netflow.netscaler_unknown345`*:: + -- -type: integer +type: long -- -*`netflow.netscaler_ica_clientside_rtt`*:: +*`netflow.netscaler_unknown346`*:: + -- type: long -- -*`netflow.netscaler_ica_serverside_rtt`*:: +*`netflow.netscaler_unknown347`*:: + -- type: long -- -*`netflow.netscaler_ica_session_update_begin_sec`*:: +*`netflow.netscaler_unknown348`*:: + -- -type: long +type: integer -- -*`netflow.netscaler_ica_session_update_end_sec`*:: +*`netflow.netscaler_unknown349`*:: + -- -type: long +type: keyword -- -*`netflow.netscaler_ica_channel_id1`*:: +*`netflow.netscaler_unknown350`*:: + -- -type: long +type: keyword -- -*`netflow.netscaler_ica_channel_id1_bytes`*:: +*`netflow.netscaler_unknown351`*:: + -- -type: long +type: keyword -- -*`netflow.netscaler_ica_channel_id2`*:: +*`netflow.netscaler_unknown352`*:: + -- -type: long +type: integer -- -*`netflow.netscaler_ica_channel_id2_bytes`*:: +*`netflow.netscaler_unknown353`*:: + -- type: long -- -*`netflow.netscaler_ica_channel_id3`*:: +*`netflow.netscaler_unknown354`*:: + -- type: long -- -*`netflow.netscaler_ica_channel_id3_bytes`*:: +*`netflow.netscaler_unknown355`*:: + -- type: long -- -*`netflow.netscaler_ica_channel_id4`*:: +*`netflow.netscaler_unknown356`*:: + -- type: long -- -*`netflow.netscaler_ica_channel_id4_bytes`*:: +*`netflow.netscaler_unknown357`*:: + -- type: long -- -*`netflow.netscaler_ica_channel_id5`*:: +*`netflow.netscaler_unknown363`*:: + -- -type: long +type: short -- -*`netflow.netscaler_ica_channel_id5_bytes`*:: +*`netflow.netscaler_unknown383`*:: + -- -type: long +type: short -- -*`netflow.netscaler_ica_connection_priority`*:: +*`netflow.netscaler_unknown391`*:: + -- -type: integer +type: long -- -*`netflow.netscaler_application_startup_duration`*:: +*`netflow.netscaler_unknown398`*:: + -- type: long -- -*`netflow.netscaler_ica_launch_mechanism`*:: +*`netflow.netscaler_unknown404`*:: + -- -type: integer +type: long -- -*`netflow.netscaler_ica_application_name`*:: +*`netflow.netscaler_unknown405`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_application_startup_time`*:: +*`netflow.netscaler_unknown427`*:: + -- type: long -- -*`netflow.netscaler_ica_application_termination_type`*:: +*`netflow.netscaler_unknown429`*:: + -- -type: integer +type: short -- -*`netflow.netscaler_ica_application_termination_time`*:: +*`netflow.netscaler_unknown432`*:: + -- -type: long +type: short -- -*`netflow.netscaler_ica_session_end_time`*:: +*`netflow.netscaler_unknown433`*:: + -- -type: long +type: short -- -*`netflow.netscaler_ica_clientside_jitter`*:: +*`netflow.netscaler_unknown453`*:: + -- type: long -- -*`netflow.netscaler_ica_serverside_jitter`*:: +*`netflow.netscaler_unknown465`*:: + -- type: long -- -*`netflow.netscaler_ica_app_process_id`*:: +*`netflow.new_connection_delta_count`*:: + -- type: long -- -*`netflow.netscaler_ica_app_module_path`*:: +*`netflow.next_header_ipv6`*:: + -- -type: keyword +type: short -- -*`netflow.netscaler_ica_device_serial_no`*:: +*`netflow.non_empty_packet_count`*:: + -- type: long -- -*`netflow.netscaler_msi_client_cookie`*:: +*`netflow.not_sent_flow_total_count`*:: + -- -type: short +type: long -- -*`netflow.netscaler_ica_flags`*:: +*`netflow.not_sent_layer2_octet_total_count`*:: + -- type: long -- -*`netflow.netscaler_ica_username`*:: +*`netflow.not_sent_octet_total_count`*:: + -- -type: keyword +type: long -- -*`netflow.netscaler_license_type`*:: +*`netflow.not_sent_packet_total_count`*:: + -- -type: short +type: long -- -*`netflow.netscaler_max_license_count`*:: +*`netflow.observation_domain_id`*:: + -- type: long -- -*`netflow.netscaler_current_license_consumed`*:: +*`netflow.observation_domain_name`*:: + -- -type: long +type: keyword -- -*`netflow.netscaler_ica_network_update_start_time`*:: +*`netflow.observation_point_id`*:: + -- type: long -- -*`netflow.netscaler_ica_network_update_end_time`*:: +*`netflow.observation_point_type`*:: + -- -type: long +type: short -- -*`netflow.netscaler_ica_clientside_srtt`*:: +*`netflow.observation_time_microseconds`*:: + -- -type: long +type: date -- -*`netflow.netscaler_ica_serverside_srtt`*:: +*`netflow.observation_time_milliseconds`*:: + -- -type: long +type: date -- -*`netflow.netscaler_ica_clientside_delay`*:: +*`netflow.observation_time_nanoseconds`*:: + -- -type: long +type: date -- -*`netflow.netscaler_ica_serverside_delay`*:: +*`netflow.observation_time_seconds`*:: + -- -type: long +type: date -- -*`netflow.netscaler_ica_host_delay`*:: +*`netflow.observed_flow_total_count`*:: + -- type: long -- -*`netflow.netscaler_ica_client_side_window_size`*:: +*`netflow.octet_delta_count`*:: + -- -type: integer +type: long -- -*`netflow.netscaler_ica_server_side_window_size`*:: +*`netflow.octet_delta_sum_of_squares`*:: + -- -type: integer +type: long -- -*`netflow.netscaler_ica_client_side_rto_count`*:: +*`netflow.octet_total_count`*:: + -- -type: integer +type: long -- -*`netflow.netscaler_ica_server_side_rto_count`*:: +*`netflow.octet_total_sum_of_squares`*:: + -- -type: integer +type: long -- -*`netflow.netscaler_ica_l7_client_latency`*:: +*`netflow.opaque_octets`*:: + -- -type: long +type: short -- -*`netflow.netscaler_ica_l7_server_latency`*:: +*`netflow.original_exporter_ipv4_address`*:: + -- -type: long +type: ip -- -*`netflow.netscaler_http_domain_name`*:: +*`netflow.original_exporter_ipv6_address`*:: + -- -type: keyword +type: ip -- -*`netflow.netscaler_cache_redir_client_connection_core_id`*:: +*`netflow.original_flows_completed`*:: + -- type: long -- -*`netflow.netscaler_cache_redir_client_connection_transaction_id`*:: +*`netflow.original_flows_initiated`*:: + -- type: long -- -*`netflow.netscaler_unknown270`*:: +*`netflow.original_flows_present`*:: + -- type: long -- -*`netflow.netscaler_unknown271`*:: +*`netflow.original_observation_domain_id`*:: + -- type: long -- -*`netflow.netscaler_unknown272`*:: +*`netflow.os_finger_print`*:: + -- -type: long +type: keyword -- -*`netflow.netscaler_unknown273`*:: +*`netflow.os_name`*:: + -- -type: long +type: keyword -- -*`netflow.netscaler_unknown274`*:: +*`netflow.os_version`*:: + -- -type: long +type: keyword -- -*`netflow.netscaler_unknown275`*:: +*`netflow.p2p_technology`*:: + -- -type: long +type: keyword -- -*`netflow.netscaler_unknown276`*:: +*`netflow.packet_delta_count`*:: + -- type: long -- -*`netflow.netscaler_unknown277`*:: +*`netflow.packet_total_count`*:: + -- type: long -- -*`netflow.netscaler_unknown278`*:: +*`netflow.padding_octets`*:: + -- -type: long +type: short -- -*`netflow.netscaler_unknown279`*:: +*`netflow.payload`*:: + -- -type: long +type: keyword -- -*`netflow.netscaler_unknown280`*:: +*`netflow.payload_entropy`*:: + -- -type: long +type: short -- -*`netflow.netscaler_unknown281`*:: +*`netflow.payload_length_ipv6`*:: + -- -type: long +type: integer -- -*`netflow.netscaler_unknown282`*:: +*`netflow.policy_qos_classification_hierarchy`*:: + -- type: long -- -*`netflow.netscaler_unknown283`*:: +*`netflow.policy_qos_queue_index`*:: + -- type: long -- -*`netflow.netscaler_unknown284`*:: +*`netflow.policy_qos_queuedrops`*:: + -- type: long -- -*`netflow.netscaler_unknown285`*:: +*`netflow.policy_qos_queueindex`*:: + -- type: long -- -*`netflow.netscaler_unknown286`*:: +*`netflow.port_id`*:: + -- type: long -- -*`netflow.netscaler_unknown287`*:: +*`netflow.port_range_end`*:: + -- -type: long +type: integer -- -*`netflow.netscaler_unknown288`*:: +*`netflow.port_range_num_ports`*:: + -- -type: long +type: integer -- -*`netflow.netscaler_unknown289`*:: +*`netflow.port_range_start`*:: + -- -type: long +type: integer -- -*`netflow.netscaler_unknown290`*:: +*`netflow.port_range_step_size`*:: + -- -type: long +type: integer -- -*`netflow.netscaler_unknown291`*:: +*`netflow.post_destination_mac_address`*:: + -- -type: long +type: keyword -- -*`netflow.netscaler_unknown292`*:: +*`netflow.post_dot1q_customer_vlan_id`*:: + -- -type: long +type: integer -- -*`netflow.netscaler_unknown293`*:: +*`netflow.post_dot1q_vlan_id`*:: + -- -type: long +type: integer -- -*`netflow.netscaler_unknown294`*:: +*`netflow.post_ip_class_of_service`*:: + -- -type: long +type: short -- -*`netflow.netscaler_unknown295`*:: +*`netflow.post_ip_diff_serv_code_point`*:: + -- -type: long +type: short -- -*`netflow.netscaler_unknown296`*:: +*`netflow.post_ip_precedence`*:: + -- -type: long +type: short -- -*`netflow.netscaler_unknown297`*:: +*`netflow.post_layer2_octet_delta_count`*:: + -- type: long -- -*`netflow.netscaler_unknown298`*:: +*`netflow.post_layer2_octet_total_count`*:: + -- type: long -- -*`netflow.netscaler_unknown299`*:: +*`netflow.post_mcast_layer2_octet_delta_count`*:: + -- type: long -- -*`netflow.netscaler_unknown300`*:: +*`netflow.post_mcast_layer2_octet_total_count`*:: + -- type: long -- -*`netflow.netscaler_unknown301`*:: +*`netflow.post_mcast_octet_delta_count`*:: + -- type: long -- -*`netflow.netscaler_unknown302`*:: +*`netflow.post_mcast_octet_total_count`*:: + -- type: long -- -*`netflow.netscaler_unknown303`*:: +*`netflow.post_mcast_packet_delta_count`*:: + -- type: long -- -*`netflow.netscaler_unknown304`*:: +*`netflow.post_mcast_packet_total_count`*:: + -- type: long -- -*`netflow.netscaler_unknown305`*:: +*`netflow.post_mpls_top_label_exp`*:: + -- -type: long +type: short -- -*`netflow.netscaler_unknown306`*:: +*`netflow.post_napt_destination_transport_port`*:: + -- -type: long +type: integer -- -*`netflow.netscaler_unknown307`*:: +*`netflow.post_napt_source_transport_port`*:: + -- -type: long +type: integer -- -*`netflow.netscaler_unknown308`*:: +*`netflow.post_nat_destination_ipv4_address`*:: + -- -type: long +type: ip -- -*`netflow.netscaler_unknown309`*:: +*`netflow.post_nat_destination_ipv6_address`*:: + -- -type: long +type: ip -- -*`netflow.netscaler_unknown310`*:: +*`netflow.post_nat_source_ipv4_address`*:: + -- -type: long +type: ip -- -*`netflow.netscaler_unknown311`*:: +*`netflow.post_nat_source_ipv6_address`*:: + -- -type: long +type: ip -- -*`netflow.netscaler_unknown312`*:: +*`netflow.post_octet_delta_count`*:: + -- type: long -- -*`netflow.netscaler_unknown313`*:: +*`netflow.post_octet_total_count`*:: + -- type: long -- -*`netflow.netscaler_unknown314`*:: +*`netflow.post_packet_delta_count`*:: + -- type: long -- -*`netflow.netscaler_unknown315`*:: +*`netflow.post_packet_total_count`*:: + -- type: long -- -*`netflow.netscaler_unknown316`*:: +*`netflow.post_source_mac_address`*:: + -- type: keyword -- -*`netflow.netscaler_unknown317`*:: +*`netflow.post_vlan_id`*:: + -- -type: long +type: integer -- -*`netflow.netscaler_unknown318`*:: +*`netflow.private_enterprise_number`*:: + -- type: long -- -*`netflow.netscaler_unknown319`*:: +*`netflow.procera_apn`*:: + -- type: keyword -- -*`netflow.netscaler_unknown320`*:: +*`netflow.procera_base_service`*:: + -- -type: integer +type: keyword -- -*`netflow.netscaler_unknown321`*:: +*`netflow.procera_content_categories`*:: + -- -type: long +type: keyword -- -*`netflow.netscaler_unknown322`*:: +*`netflow.procera_device_id`*:: + -- type: long -- -*`netflow.netscaler_unknown323`*:: +*`netflow.procera_external_rtt`*:: + -- type: integer -- -*`netflow.netscaler_unknown324`*:: +*`netflow.procera_flow_behavior`*:: + -- -type: integer +type: keyword -- -*`netflow.netscaler_unknown325`*:: +*`netflow.procera_ggsn`*:: + -- -type: integer +type: keyword -- -*`netflow.netscaler_unknown326`*:: +*`netflow.procera_http_content_type`*:: + -- -type: integer +type: keyword -- -*`netflow.netscaler_unknown327`*:: +*`netflow.procera_http_file_length`*:: + -- type: long -- -*`netflow.netscaler_unknown328`*:: +*`netflow.procera_http_language`*:: + -- -type: integer +type: keyword -- -*`netflow.netscaler_unknown329`*:: +*`netflow.procera_http_location`*:: + -- -type: integer +type: keyword -- -*`netflow.netscaler_unknown330`*:: +*`netflow.procera_http_referer`*:: + -- -type: integer +type: keyword -- -*`netflow.netscaler_unknown331`*:: +*`netflow.procera_http_request_method`*:: + -- -type: integer +type: keyword -- -*`netflow.netscaler_unknown332`*:: +*`netflow.procera_http_request_version`*:: + -- -type: long +type: keyword -- -*`netflow.netscaler_unknown333`*:: +*`netflow.procera_http_response_status`*:: + -- -type: keyword +type: integer -- -*`netflow.netscaler_unknown334`*:: +*`netflow.procera_http_url`*:: + -- type: keyword -- -*`netflow.netscaler_unknown335`*:: +*`netflow.procera_http_user_agent`*:: + -- -type: long +type: keyword -- -*`netflow.netscaler_unknown336`*:: +*`netflow.procera_imsi`*:: + -- type: long -- -*`netflow.netscaler_unknown337`*:: +*`netflow.procera_incoming_octets`*:: + -- type: long -- -*`netflow.netscaler_unknown338`*:: +*`netflow.procera_incoming_packets`*:: + -- type: long -- -*`netflow.netscaler_unknown339`*:: +*`netflow.procera_incoming_shaping_drops`*:: + -- type: long -- -*`netflow.netscaler_unknown340`*:: +*`netflow.procera_incoming_shaping_latency`*:: + -- -type: long +type: integer -- -*`netflow.netscaler_unknown341`*:: +*`netflow.procera_internal_rtt`*:: + -- -type: long +type: integer -- -*`netflow.netscaler_unknown342`*:: +*`netflow.procera_local_ipv4_host`*:: + -- -type: long +type: ip -- -*`netflow.netscaler_unknown343`*:: +*`netflow.procera_local_ipv6_host`*:: + -- -type: long +type: ip -- -*`netflow.netscaler_unknown344`*:: +*`netflow.procera_msisdn`*:: + -- type: long -- -*`netflow.netscaler_unknown345`*:: +*`netflow.procera_outgoing_octets`*:: + -- type: long -- -*`netflow.netscaler_unknown346`*:: +*`netflow.procera_outgoing_packets`*:: + -- type: long -- -*`netflow.netscaler_unknown347`*:: +*`netflow.procera_outgoing_shaping_drops`*:: + -- type: long -- -*`netflow.netscaler_unknown348`*:: +*`netflow.procera_outgoing_shaping_latency`*:: + -- type: integer -- -*`netflow.netscaler_unknown349`*:: +*`netflow.procera_property`*:: + -- type: keyword -- -*`netflow.netscaler_unknown350`*:: +*`netflow.procera_qoe_incoming_external`*:: + -- -type: keyword +type: float -- -*`netflow.netscaler_unknown351`*:: +*`netflow.procera_qoe_incoming_internal`*:: + -- -type: keyword +type: float -- -*`netflow.netscaler_unknown352`*:: +*`netflow.procera_qoe_outgoing_external`*:: + -- -type: integer +type: float -- -*`netflow.netscaler_unknown353`*:: +*`netflow.procera_qoe_outgoing_internal`*:: + -- -type: long +type: float -- -*`netflow.netscaler_unknown354`*:: +*`netflow.procera_rat`*:: + -- -type: long +type: keyword -- -*`netflow.netscaler_unknown355`*:: +*`netflow.procera_remote_ipv4_host`*:: + -- -type: long +type: ip -- -*`netflow.netscaler_unknown356`*:: +*`netflow.procera_remote_ipv6_host`*:: + -- -type: long +type: ip -- -*`netflow.netscaler_unknown357`*:: +*`netflow.procera_rnc`*:: + -- -type: long +type: integer -- -*`netflow.netscaler_unknown363`*:: +*`netflow.procera_server_hostname`*:: + -- -type: short +type: keyword -- -*`netflow.netscaler_unknown383`*:: +*`netflow.procera_service`*:: + -- -type: short +type: keyword -- -*`netflow.netscaler_unknown391`*:: +*`netflow.procera_sgsn`*:: + -- -type: long +type: keyword -- -*`netflow.netscaler_unknown398`*:: +*`netflow.procera_subscriber_identifier`*:: + -- -type: long +type: keyword -- -*`netflow.netscaler_unknown404`*:: +*`netflow.procera_template_name`*:: + -- -type: long +type: keyword -- -*`netflow.netscaler_unknown405`*:: +*`netflow.procera_user_location_information`*:: + -- -type: long +type: keyword -- -*`netflow.netscaler_unknown427`*:: +*`netflow.protocol_identifier`*:: + -- -type: long +type: short -- -*`netflow.netscaler_unknown429`*:: +*`netflow.pseudo_wire_control_word`*:: + -- -type: short +type: long -- -*`netflow.netscaler_unknown432`*:: +*`netflow.pseudo_wire_destination_ipv4_address`*:: + -- -type: short +type: ip -- -*`netflow.netscaler_unknown433`*:: +*`netflow.pseudo_wire_id`*:: + -- -type: short +type: long -- -*`netflow.netscaler_unknown453`*:: +*`netflow.pseudo_wire_type`*:: + -- -type: long +type: integer -- -*`netflow.netscaler_unknown465`*:: +*`netflow.reason`*:: + -- type: long -- -*`netflow.fw_ext_event`*:: +*`netflow.reason_text`*:: + -- -type: integer +type: keyword -- -*`netflow.fw_event_level`*:: +*`netflow.relative_error`*:: + -- -type: long +type: double -- -*`netflow.fw_event_level_id`*:: +*`netflow.responder_octets`*:: + -- type: long -- -*`netflow.fw_configured_value`*:: +*`netflow.responder_packets`*:: + -- type: long -- -*`netflow.fw_cts_src_sgt`*:: +*`netflow.reverse_absolute_error`*:: + -- -type: long +type: double -- -*`netflow.fw_ext_event_alt`*:: +*`netflow.reverse_anonymization_flags`*:: + -- -type: long +type: integer -- -*`netflow.fw_blackout_secs`*:: +*`netflow.reverse_anonymization_technique`*:: + -- -type: long +type: integer -- -*`netflow.fw_half_open_high`*:: +*`netflow.reverse_application_category_name`*:: + -- -type: long +type: keyword -- -*`netflow.fw_half_open_rate`*:: +*`netflow.reverse_application_description`*:: + -- -type: long +type: keyword -- -*`netflow.fw_zone_pair_id`*:: +*`netflow.reverse_application_group_name`*:: + -- -type: long +type: keyword -- -*`netflow.fw_max_sessions`*:: +*`netflow.reverse_application_id`*:: + -- -type: long +type: keyword -- -*`netflow.fw_zone_pair_name`*:: +*`netflow.reverse_application_name`*:: + -- -type: long +type: keyword -- -*`netflow.fw_ext_event_desc`*:: +*`netflow.reverse_application_sub_category_name`*:: + -- type: keyword -- -*`netflow.fw_summary_pkt_count`*:: +*`netflow.reverse_average_interarrival_time`*:: + -- type: long -- -*`netflow.fw_half_open_count`*:: +*`netflow.reverse_bgp_destination_as_number`*:: + -- type: long -- -*`netflow.username`*:: +*`netflow.reverse_bgp_next_adjacent_as_number`*:: + -- -type: keyword +type: long -- -*`netflow.xlate_source_address_ip_v4`*:: +*`netflow.reverse_bgp_next_hop_ipv4_address`*:: + -- type: ip -- -*`netflow.xlate_destination_address_ip_v4`*:: +*`netflow.reverse_bgp_next_hop_ipv6_address`*:: + -- type: ip -- -*`netflow.xlate_source_port`*:: +*`netflow.reverse_bgp_prev_adjacent_as_number`*:: + -- -type: integer +type: long -- -*`netflow.xlate_destination_port`*:: +*`netflow.reverse_bgp_source_as_number`*:: + -- -type: integer +type: long -- -*`netflow.firewall_event`*:: +*`netflow.reverse_bgp_validity_state`*:: + -- type: short -- -*`netflow.nat_inside_svcid`*:: +*`netflow.reverse_class_id`*:: + -- -type: integer +type: short -- -*`netflow.nat_outside_svcid`*:: +*`netflow.reverse_class_name`*:: + -- -type: integer +type: keyword -- -*`netflow.nat_sub_string`*:: +*`netflow.reverse_classification_engine_id`*:: + -- -type: keyword +type: short -- -*`netflow.ixia_l7_app_id`*:: +*`netflow.reverse_collection_time_milliseconds`*:: + -- type: long -- -*`netflow.ixia_l7_app_name`*:: +*`netflow.reverse_collector_certificate`*:: + -- type: keyword -- -*`netflow.ixia_src_country_code`*:: +*`netflow.reverse_confidence_level`*:: + -- -type: keyword +type: double -- -*`netflow.ixia_src_country_name`*:: +*`netflow.reverse_connection_sum_duration_seconds`*:: + -- -type: keyword +type: long -- -*`netflow.ixia_src_region_code`*:: +*`netflow.reverse_connection_transaction_id`*:: + -- -type: keyword +type: long -- -*`netflow.ixia_src_region_name`*:: +*`netflow.reverse_data_byte_count`*:: + -- -type: keyword +type: long -- -*`netflow.ixia_src_city_name`*:: +*`netflow.reverse_data_link_frame_section`*:: + -- type: keyword -- -*`netflow.ixia_src_latitude`*:: +*`netflow.reverse_data_link_frame_size`*:: + -- -type: float +type: integer -- -*`netflow.ixia_src_longitude`*:: +*`netflow.reverse_data_link_frame_type`*:: + -- -type: float +type: integer -- -*`netflow.ixia_dst_country_code`*:: +*`netflow.reverse_data_records_reliability`*:: + -- -type: keyword +type: short -- -*`netflow.ixia_dst_country_name`*:: +*`netflow.reverse_delta_flow_count`*:: + -- -type: keyword +type: long -- -*`netflow.ixia_dst_region_code`*:: +*`netflow.reverse_destination_ipv4_address`*:: + -- -type: keyword +type: ip -- -*`netflow.ixia_dst_region_node`*:: +*`netflow.reverse_destination_ipv4_prefix`*:: + -- -type: keyword +type: ip -- -*`netflow.ixia_dst_city_name`*:: +*`netflow.reverse_destination_ipv4_prefix_length`*:: + -- -type: keyword +type: short -- -*`netflow.ixia_dst_latitude`*:: +*`netflow.reverse_destination_ipv6_address`*:: + -- -type: float +type: ip -- -*`netflow.ixia_dst_longitude`*:: +*`netflow.reverse_destination_ipv6_prefix`*:: + -- -type: float +type: ip -- -*`netflow.ixia_device_id`*:: +*`netflow.reverse_destination_ipv6_prefix_length`*:: + -- type: short -- -*`netflow.ixia_device_name`*:: +*`netflow.reverse_destination_mac_address`*:: + -- type: keyword -- -*`netflow.ixia_browser_id`*:: +*`netflow.reverse_destination_transport_port`*:: + -- -type: short +type: integer -- -*`netflow.ixia_browser_name`*:: +*`netflow.reverse_digest_hash_value`*:: + -- -type: keyword +type: long -- -*`netflow.ixia_rev_octet_delta_count`*:: +*`netflow.reverse_distinct_count_of_destination_ip_address`*:: + -- type: long -- -*`netflow.ixia_rev_packet_delta_count`*:: +*`netflow.reverse_distinct_count_of_destination_ipv4_address`*:: + -- type: long -- -*`netflow.ixia_encrypt_type`*:: +*`netflow.reverse_distinct_count_of_destination_ipv6_address`*:: + -- -type: keyword +type: long -- -*`netflow.ixia_encrypt_cipher`*:: +*`netflow.reverse_distinct_count_of_source_ip_address`*:: + -- -type: keyword +type: long -- -*`netflow.ixia_encrypt_key_length`*:: +*`netflow.reverse_distinct_count_of_source_ipv4_address`*:: + -- -type: integer +type: long -- -*`netflow.ixia_imsi_subscriber`*:: +*`netflow.reverse_distinct_count_of_source_ipv6_address`*:: + -- -type: keyword +type: long -- -*`netflow.ixia_http_user_agent`*:: +*`netflow.reverse_dot1q_customer_dei`*:: + -- -type: keyword +type: short -- -*`netflow.ixia_http_host_name`*:: +*`netflow.reverse_dot1q_customer_destination_mac_address`*:: + -- type: keyword -- -*`netflow.ixia_http_uri`*:: +*`netflow.reverse_dot1q_customer_priority`*:: + -- -type: keyword +type: short -- -*`netflow.ixia_dns_record_txt`*:: +*`netflow.reverse_dot1q_customer_source_mac_address`*:: + -- type: keyword -- -*`netflow.ixia_src_as_name`*:: +*`netflow.reverse_dot1q_customer_vlan_id`*:: + -- -type: keyword +type: integer -- -*`netflow.ixia_dst_as_name`*:: +*`netflow.reverse_dot1q_dei`*:: + -- -type: keyword +type: short -- -*`netflow.ixia_latency`*:: +*`netflow.reverse_dot1q_priority`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_dot1q_service_instance_id`*:: + -- type: long -- -*`netflow.ixia_dns_query`*:: +*`netflow.reverse_dot1q_service_instance_priority`*:: + -- -type: keyword +type: short -- -*`netflow.ixia_dns_answer`*:: +*`netflow.reverse_dot1q_service_instance_tag`*:: + -- type: keyword -- -*`netflow.ixia_dns_classes`*:: +*`netflow.reverse_dot1q_vlan_id`*:: + -- -type: keyword +type: integer -- -*`netflow.ixia_threat_type`*:: +*`netflow.reverse_dropped_layer2_octet_delta_count`*:: + -- -type: keyword +type: long -- -*`netflow.ixia_threat_ipv4`*:: +*`netflow.reverse_dropped_layer2_octet_total_count`*:: + -- -type: ip +type: long -- -*`netflow.ixia_threat_ipv6`*:: +*`netflow.reverse_dropped_octet_delta_count`*:: + -- -type: ip +type: long -- -*`netflow.vmware_tenant_protocol`*:: +*`netflow.reverse_dropped_octet_total_count`*:: + -- -type: short +type: long -- -*`netflow.vmware_tenant_source_ipv4`*:: +*`netflow.reverse_dropped_packet_delta_count`*:: + -- -type: ip +type: long -- -*`netflow.vmware_tenant_dest_ipv4`*:: +*`netflow.reverse_dropped_packet_total_count`*:: + -- -type: ip +type: long -- -*`netflow.vmware_tenant_source_ipv6`*:: +*`netflow.reverse_dst_traffic_index`*:: + -- -type: ip +type: long -- -*`netflow.vmware_tenant_dest_ipv6`*:: +*`netflow.reverse_egress_broadcast_packet_total_count`*:: + -- -type: ip +type: long -- -*`netflow.vmware_tenant_source_port`*:: +*`netflow.reverse_egress_interface`*:: + -- -type: integer +type: long -- -*`netflow.vmware_tenant_dest_port`*:: +*`netflow.reverse_egress_interface_type`*:: + -- -type: integer +type: long -- -*`netflow.vmware_egress_interface_attr`*:: +*`netflow.reverse_egress_physical_interface`*:: + -- -type: integer +type: long -- -*`netflow.vmware_vxlan_export_role`*:: +*`netflow.reverse_egress_unicast_packet_total_count`*:: + -- -type: short +type: long -- -*`netflow.vmware_ingress_interface_attr`*:: +*`netflow.reverse_egress_vrfid`*:: + -- -type: integer +type: long -- -*`netflow.afc_protocol`*:: +*`netflow.reverse_encrypted_technology`*:: + -- -type: integer +type: keyword -- -*`netflow.afc_protocol_name`*:: +*`netflow.reverse_engine_id`*:: ++ +-- +type: short + +-- + +*`netflow.reverse_engine_type`*:: + -- -type: keyword +type: short -- -*`netflow.flow_direction`*:: +*`netflow.reverse_ethernet_header_length`*:: + -- type: short -- -*`netflow.timestamp`*:: +*`netflow.reverse_ethernet_payload_length`*:: + -- -type: long +type: integer -- -*`netflow.log_op`*:: +*`netflow.reverse_ethernet_total_length`*:: + -- -type: short +type: integer -- -*`netflow.traffic_type`*:: +*`netflow.reverse_ethernet_type`*:: + -- -type: short +type: integer -- -*`netflow.fw_rule`*:: +*`netflow.reverse_export_sctp_stream_id`*:: + -- -type: keyword +type: integer -- -*`netflow.service_name`*:: +*`netflow.reverse_exporter_certificate`*:: + -- type: keyword -- -*`netflow.reason`*:: +*`netflow.reverse_exporting_process_id`*:: + -- type: long -- -*`netflow.reason_text`*:: +*`netflow.reverse_firewall_event`*:: + -- -type: keyword +type: short -- -*`netflow.bind_ipv4_address`*:: +*`netflow.reverse_first_non_empty_packet_size`*:: + -- -type: ip +type: integer -- -*`netflow.bind_transport_port`*:: +*`netflow.reverse_first_packet_banner`*:: + -- -type: integer +type: keyword -- -*`netflow.conn_ipv4_address`*:: +*`netflow.reverse_flags_and_sampler_id`*:: + -- -type: ip +type: long -- -*`netflow.conn_transport_port`*:: +*`netflow.reverse_flow_active_timeout`*:: + -- type: integer -- -*`netflow.audit_counter`*:: +*`netflow.reverse_flow_attributes`*:: + -- -type: long +type: integer -- -*`netflow.timestamp`*:: +*`netflow.reverse_flow_delta_milliseconds`*:: + -- type: long -- -*`netflow.log_op`*:: +*`netflow.reverse_flow_direction`*:: + -- type: short -- -*`netflow.traffic_type`*:: +*`netflow.reverse_flow_duration_microseconds`*:: + -- -type: short +type: long -- -*`netflow.fw_rule`*:: +*`netflow.reverse_flow_duration_milliseconds`*:: + -- -type: keyword +type: long -- -*`netflow.service_name`*:: +*`netflow.reverse_flow_end_delta_microseconds`*:: + -- -type: keyword +type: long -- -*`netflow.reason`*:: +*`netflow.reverse_flow_end_microseconds`*:: + -- type: long -- -*`netflow.reason_text`*:: +*`netflow.reverse_flow_end_milliseconds`*:: + -- -type: keyword +type: long -- -*`netflow.bind_ipv4_address`*:: +*`netflow.reverse_flow_end_nanoseconds`*:: + -- -type: ip +type: long -- -*`netflow.bind_transport_port`*:: +*`netflow.reverse_flow_end_reason`*:: + -- -type: integer +type: short -- -*`netflow.conn_ipv4_address`*:: +*`netflow.reverse_flow_end_seconds`*:: + -- -type: ip +type: long -- -*`netflow.conn_transport_port`*:: +*`netflow.reverse_flow_end_sys_up_time`*:: + -- -type: integer +type: long -- -*`netflow.audit_counter`*:: +*`netflow.reverse_flow_idle_timeout`*:: + -- -type: long +type: integer -- -*`netflow.procera_service`*:: +*`netflow.reverse_flow_label_ipv6`*:: + -- -type: keyword +type: long -- -*`netflow.procera_base_service`*:: +*`netflow.reverse_flow_sampling_time_interval`*:: + -- -type: keyword +type: long -- -*`netflow.procera_incoming_octets`*:: +*`netflow.reverse_flow_sampling_time_spacing`*:: + -- type: long -- -*`netflow.procera_outgoing_octets`*:: +*`netflow.reverse_flow_selected_flow_delta_count`*:: + -- type: long -- -*`netflow.procera_incoming_packets`*:: +*`netflow.reverse_flow_selected_octet_delta_count`*:: + -- type: long -- -*`netflow.procera_outgoing_packets`*:: +*`netflow.reverse_flow_selected_packet_delta_count`*:: + -- type: long -- -*`netflow.procera_incoming_shaping_latency`*:: +*`netflow.reverse_flow_selector_algorithm`*:: + -- type: integer -- -*`netflow.procera_outgoing_shaping_latency`*:: +*`netflow.reverse_flow_start_delta_microseconds`*:: + -- -type: integer +type: long -- -*`netflow.procera_incoming_shaping_drops`*:: +*`netflow.reverse_flow_start_microseconds`*:: + -- type: long -- -*`netflow.procera_outgoing_shaping_drops`*:: +*`netflow.reverse_flow_start_milliseconds`*:: + -- type: long -- -*`netflow.procera_internal_rtt`*:: +*`netflow.reverse_flow_start_nanoseconds`*:: + -- -type: integer +type: long -- -*`netflow.procera_external_rtt`*:: +*`netflow.reverse_flow_start_seconds`*:: + -- -type: integer +type: long -- -*`netflow.procera_flow_behavior`*:: +*`netflow.reverse_flow_start_sys_up_time`*:: + -- -type: keyword +type: long -- -*`netflow.procera_content_categories`*:: +*`netflow.reverse_forwarding_status`*:: + -- -type: keyword +type: long -- -*`netflow.procera_property`*:: +*`netflow.reverse_fragment_flags`*:: + -- -type: keyword +type: short -- -*`netflow.procera_server_hostname`*:: +*`netflow.reverse_fragment_identification`*:: + -- -type: keyword +type: long -- -*`netflow.procera_http_request_method`*:: +*`netflow.reverse_fragment_offset`*:: + -- -type: keyword +type: integer -- -*`netflow.procera_http_user_agent`*:: +*`netflow.reverse_gre_key`*:: + -- -type: keyword +type: long -- -*`netflow.procera_http_content_type`*:: +*`netflow.reverse_hash_digest_output`*:: + -- -type: keyword +type: short -- -*`netflow.procera_http_url`*:: +*`netflow.reverse_hash_flow_domain`*:: + -- -type: keyword +type: integer -- -*`netflow.procera_http_referer`*:: +*`netflow.reverse_hash_initialiser_value`*:: + -- -type: keyword +type: long -- -*`netflow.procera_http_response_status`*:: +*`netflow.reverse_hash_ip_payload_offset`*:: + -- -type: integer +type: long -- -*`netflow.procera_http_file_length`*:: +*`netflow.reverse_hash_ip_payload_size`*:: + -- type: long -- -*`netflow.procera_http_location`*:: +*`netflow.reverse_hash_output_range_max`*:: + -- -type: keyword +type: long -- -*`netflow.procera_http_language`*:: +*`netflow.reverse_hash_output_range_min`*:: + -- -type: keyword +type: long -- -*`netflow.procera_subscriber_identifier`*:: +*`netflow.reverse_hash_selected_range_max`*:: + -- -type: keyword +type: long -- -*`netflow.procera_msisdn`*:: +*`netflow.reverse_hash_selected_range_min`*:: + -- type: long -- -*`netflow.procera_imsi`*:: +*`netflow.reverse_icmp_code_ipv4`*:: + -- -type: long +type: short -- -*`netflow.procera_rat`*:: +*`netflow.reverse_icmp_code_ipv6`*:: + -- -type: keyword +type: short -- -*`netflow.procera_device_id`*:: +*`netflow.reverse_icmp_type_code_ipv4`*:: + -- -type: long +type: integer -- -*`netflow.procera_sgsn`*:: +*`netflow.reverse_icmp_type_code_ipv6`*:: + -- -type: keyword +type: integer -- -*`netflow.procera_rnc`*:: +*`netflow.reverse_icmp_type_ipv4`*:: + -- -type: integer +type: short -- -*`netflow.procera_apn`*:: +*`netflow.reverse_icmp_type_ipv6`*:: + -- -type: keyword +type: short -- -*`netflow.procera_user_location_information`*:: +*`netflow.reverse_igmp_type`*:: + -- -type: keyword +type: short -- -*`netflow.procera_ggsn`*:: +*`netflow.reverse_ignored_data_record_total_count`*:: + -- -type: keyword +type: long -- -*`netflow.procera_qoe_incoming_internal`*:: +*`netflow.reverse_ignored_layer2_frame_total_count`*:: + -- -type: float +type: long -- -*`netflow.procera_qoe_incoming_external`*:: +*`netflow.reverse_ignored_layer2_octet_total_count`*:: + -- -type: float +type: long -- -*`netflow.procera_qoe_outgoing_internal`*:: +*`netflow.reverse_information_element_data_type`*:: + -- -type: float +type: short -- -*`netflow.procera_qoe_outgoing_external`*:: +*`netflow.reverse_information_element_description`*:: + -- -type: float +type: keyword -- -*`netflow.procera_local_ipv4_host`*:: +*`netflow.reverse_information_element_id`*:: + -- -type: ip +type: integer -- -*`netflow.procera_local_ipv6_host`*:: +*`netflow.reverse_information_element_index`*:: + -- -type: ip +type: integer -- -*`netflow.procera_remote_ipv4_host`*:: +*`netflow.reverse_information_element_name`*:: + -- -type: ip +type: keyword -- -*`netflow.procera_remote_ipv6_host`*:: +*`netflow.reverse_information_element_range_begin`*:: + -- -type: ip +type: long -- -*`netflow.procera_http_request_version`*:: +*`netflow.reverse_information_element_range_end`*:: + -- -type: keyword +type: long -- -*`netflow.procera_template_name`*:: +*`netflow.reverse_information_element_semantics`*:: + -- -type: keyword +type: short -- -*`netflow.mark`*:: +*`netflow.reverse_information_element_units`*:: + -- -type: long +type: integer -- -*`netflow.conntrack_id`*:: +*`netflow.reverse_ingress_broadcast_packet_total_count`*:: + -- type: long -- -*`netflow.reverse_octet_delta_count`*:: +*`netflow.reverse_ingress_interface`*:: + -- type: long -- -*`netflow.reverse_packet_delta_count`*:: +*`netflow.reverse_ingress_interface_type`*:: + -- type: long -- -*`netflow.reverse_delta_flow_count`*:: +*`netflow.reverse_ingress_multicast_packet_total_count`*:: + -- type: long -- -*`netflow.reverse_protocol_identifier`*:: +*`netflow.reverse_ingress_physical_interface`*:: + -- -type: short +type: long -- -*`netflow.reverse_ip_class_of_service`*:: +*`netflow.reverse_ingress_unicast_packet_total_count`*:: + -- -type: short +type: long -- -*`netflow.reverse_tcp_control_bits`*:: +*`netflow.reverse_ingress_vrfid`*:: + -- -type: integer +type: long -- -*`netflow.reverse_source_transport_port`*:: +*`netflow.reverse_initial_tcp_flags`*:: + -- -type: integer +type: short -- -*`netflow.reverse_source_ipv4_address`*:: +*`netflow.reverse_initiator_octets`*:: + -- -type: ip +type: long -- -*`netflow.reverse_source_ipv4_prefix_length`*:: +*`netflow.reverse_initiator_packets`*:: + -- -type: short +type: long -- -*`netflow.reverse_ingress_interface`*:: +*`netflow.reverse_interface_description`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_destination_transport_port`*:: +*`netflow.reverse_interface_name`*:: + -- -type: integer +type: keyword -- -*`netflow.reverse_destination_ipv4_address`*:: +*`netflow.reverse_intermediate_process_id`*:: + -- -type: ip +type: long -- -*`netflow.reverse_destination_ipv4_prefix_length`*:: +*`netflow.reverse_ip_class_of_service`*:: + -- type: short -- -*`netflow.reverse_egress_interface`*:: +*`netflow.reverse_ip_diff_serv_code_point`*:: + -- -type: long +type: short -- -*`netflow.reverse_ip_next_hop_ipv4_address`*:: +*`netflow.reverse_ip_header_length`*:: + -- -type: ip +type: short -- -*`netflow.reverse_bgp_source_as_number`*:: +*`netflow.reverse_ip_header_packet_section`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_bgp_destination_as_number`*:: +*`netflow.reverse_ip_next_hop_ipv4_address`*:: + -- -type: long +type: ip -- -*`netflow.reverse_bgp_next_hop_ipv4_address`*:: +*`netflow.reverse_ip_next_hop_ipv6_address`*:: + -- type: ip -- -*`netflow.reverse_post_mcast_packet_delta_count`*:: +*`netflow.reverse_ip_payload_length`*:: + -- type: long -- -*`netflow.reverse_post_mcast_octet_delta_count`*:: +*`netflow.reverse_ip_payload_packet_section`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_flow_end_sys_up_time`*:: +*`netflow.reverse_ip_precedence`*:: + -- -type: long +type: short -- -*`netflow.reverse_flow_start_sys_up_time`*:: +*`netflow.reverse_ip_sec_spi`*:: + -- type: long -- -*`netflow.reverse_post_octet_delta_count`*:: +*`netflow.reverse_ip_total_length`*:: + -- type: long -- -*`netflow.reverse_post_packet_delta_count`*:: +*`netflow.reverse_ip_ttl`*:: + -- -type: long +type: short -- -*`netflow.reverse_minimum_ip_total_length`*:: +*`netflow.reverse_ip_version`*:: + -- -type: long +type: short -- -*`netflow.reverse_maximum_ip_total_length`*:: +*`netflow.reverse_ipv4_ihl`*:: + -- -type: long +type: short -- -*`netflow.reverse_source_ipv6_address`*:: +*`netflow.reverse_ipv4_options`*:: + -- -type: ip +type: long -- -*`netflow.reverse_destination_ipv6_address`*:: +*`netflow.reverse_ipv4_router_sc`*:: + -- type: ip -- -*`netflow.reverse_source_ipv6_prefix_length`*:: +*`netflow.reverse_ipv6_extension_headers`*:: + -- -type: short +type: long -- -*`netflow.reverse_destination_ipv6_prefix_length`*:: +*`netflow.reverse_is_multicast`*:: + -- type: short -- -*`netflow.reverse_flow_label_ipv6`*:: +*`netflow.reverse_large_packet_count`*:: + -- type: long -- -*`netflow.reverse_icmp_type_code_ipv4`*:: +*`netflow.reverse_layer2_frame_delta_count`*:: + -- -type: integer +type: long -- -*`netflow.reverse_igmp_type`*:: +*`netflow.reverse_layer2_frame_total_count`*:: + -- -type: short +type: long -- -*`netflow.reverse_sampling_interval`*:: +*`netflow.reverse_layer2_octet_delta_count`*:: + -- type: long -- -*`netflow.reverse_sampling_algorithm`*:: +*`netflow.reverse_layer2_octet_delta_sum_of_squares`*:: + -- -type: short +type: long -- -*`netflow.reverse_flow_active_timeout`*:: +*`netflow.reverse_layer2_octet_total_count`*:: + -- -type: integer +type: long -- -*`netflow.reverse_flow_idle_timeout`*:: +*`netflow.reverse_layer2_octet_total_sum_of_squares`*:: + -- -type: integer +type: long -- -*`netflow.reverse_engine_type`*:: +*`netflow.reverse_layer2_segment_id`*:: + -- -type: short +type: long -- -*`netflow.reverse_engine_id`*:: +*`netflow.reverse_layer2packet_section_data`*:: + -- -type: short +type: keyword -- -*`netflow.reverse_ipv4_router_sc`*:: +*`netflow.reverse_layer2packet_section_offset`*:: + -- -type: ip +type: integer -- -*`netflow.reverse_source_ipv4_prefix`*:: +*`netflow.reverse_layer2packet_section_size`*:: + -- -type: ip +type: integer -- -*`netflow.reverse_destination_ipv4_prefix`*:: +*`netflow.reverse_line_card_id`*:: + -- -type: ip +type: long -- -*`netflow.reverse_mpls_top_label_type`*:: +*`netflow.reverse_lower_ci_limit`*:: + -- -type: short +type: double -- -*`netflow.reverse_mpls_top_label_ipv4_address`*:: +*`netflow.reverse_max_export_seconds`*:: + -- -type: ip +type: long -- -*`netflow.reverse_sampler_id`*:: +*`netflow.reverse_max_flow_end_microseconds`*:: + -- -type: short +type: long -- -*`netflow.reverse_sampler_mode`*:: +*`netflow.reverse_max_flow_end_milliseconds`*:: + -- -type: short +type: long -- -*`netflow.reverse_sampler_random_interval`*:: +*`netflow.reverse_max_flow_end_nanoseconds`*:: + -- type: long -- -*`netflow.reverse_class_id`*:: +*`netflow.reverse_max_flow_end_seconds`*:: + -- -type: short +type: long -- -*`netflow.reverse_minimum_ttl`*:: +*`netflow.reverse_max_packet_size`*:: + -- -type: short +type: integer -- -*`netflow.reverse_maximum_ttl`*:: +*`netflow.reverse_maximum_ip_total_length`*:: + -- -type: short +type: long -- -*`netflow.reverse_fragment_identification`*:: +*`netflow.reverse_maximum_layer2_total_length`*:: + -- type: long -- -*`netflow.reverse_post_ip_class_of_service`*:: +*`netflow.reverse_maximum_ttl`*:: + -- type: short -- -*`netflow.reverse_source_mac_address`*:: +*`netflow.reverse_message_md5_checksum`*:: + -- type: keyword -- -*`netflow.reverse_post_destination_mac_address`*:: +*`netflow.reverse_message_scope`*:: + -- -type: keyword +type: short -- -*`netflow.reverse_vlan_id`*:: +*`netflow.reverse_metering_process_id`*:: + -- -type: integer +type: long -- -*`netflow.reverse_post_vlan_id`*:: +*`netflow.reverse_metro_evc_id`*:: + -- -type: integer +type: keyword -- -*`netflow.reverse_ip_version`*:: +*`netflow.reverse_metro_evc_type`*:: + -- type: short -- -*`netflow.reverse_flow_direction`*:: +*`netflow.reverse_min_export_seconds`*:: + -- -type: short +type: long -- -*`netflow.reverse_ip_next_hop_ipv6_address`*:: +*`netflow.reverse_min_flow_start_microseconds`*:: + -- -type: ip +type: long -- -*`netflow.reverse_bgp_next_hop_ipv6_address`*:: +*`netflow.reverse_min_flow_start_milliseconds`*:: + -- -type: ip +type: long -- -*`netflow.reverse_ipv6_extension_headers`*:: +*`netflow.reverse_min_flow_start_nanoseconds`*:: + -- type: long -- -*`netflow.reverse_mpls_top_label_stack_section`*:: +*`netflow.reverse_min_flow_start_seconds`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_mpls_label_stack_section2`*:: +*`netflow.reverse_minimum_ip_total_length`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_mpls_label_stack_section3`*:: +*`netflow.reverse_minimum_layer2_total_length`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_mpls_label_stack_section4`*:: +*`netflow.reverse_minimum_ttl`*:: + -- -type: keyword +type: short -- -*`netflow.reverse_mpls_label_stack_section5`*:: +*`netflow.reverse_monitoring_interval_end_milli_seconds`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_mpls_label_stack_section6`*:: +*`netflow.reverse_monitoring_interval_start_milli_seconds`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_mpls_label_stack_section7`*:: +*`netflow.reverse_mpls_label_stack_depth`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_mpls_label_stack_section8`*:: +*`netflow.reverse_mpls_label_stack_length`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_mpls_label_stack_section9`*:: +*`netflow.reverse_mpls_label_stack_section`*:: + -- type: keyword @@ -101624,220 +101491,206 @@ type: keyword -- -*`netflow.reverse_destination_mac_address`*:: -+ --- -type: keyword - --- - -*`netflow.reverse_post_source_mac_address`*:: +*`netflow.reverse_mpls_label_stack_section2`*:: + -- type: keyword -- -*`netflow.reverse_interface_name`*:: +*`netflow.reverse_mpls_label_stack_section3`*:: + -- type: keyword -- -*`netflow.reverse_interface_description`*:: +*`netflow.reverse_mpls_label_stack_section4`*:: + -- type: keyword -- -*`netflow.reverse_sampler_name`*:: +*`netflow.reverse_mpls_label_stack_section5`*:: + -- type: keyword -- -*`netflow.reverse_octet_total_count`*:: +*`netflow.reverse_mpls_label_stack_section6`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_packet_total_count`*:: +*`netflow.reverse_mpls_label_stack_section7`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_flags_and_sampler_id`*:: +*`netflow.reverse_mpls_label_stack_section8`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_fragment_offset`*:: +*`netflow.reverse_mpls_label_stack_section9`*:: + -- -type: integer +type: keyword -- -*`netflow.reverse_forwarding_status`*:: +*`netflow.reverse_mpls_payload_length`*:: + -- type: long -- -*`netflow.reverse_mpls_vpn_route_distinguisher`*:: +*`netflow.reverse_mpls_payload_packet_section`*:: + -- type: keyword -- -*`netflow.reverse_mpls_top_label_prefix_length`*:: +*`netflow.reverse_mpls_top_label_exp`*:: + -- type: short -- -*`netflow.reverse_src_traffic_index`*:: +*`netflow.reverse_mpls_top_label_ipv4_address`*:: + -- -type: long +type: ip -- -*`netflow.reverse_dst_traffic_index`*:: +*`netflow.reverse_mpls_top_label_ipv6_address`*:: + -- -type: long +type: ip -- -*`netflow.reverse_application_description`*:: +*`netflow.reverse_mpls_top_label_prefix_length`*:: + -- -type: keyword +type: short -- -*`netflow.reverse_application_id`*:: +*`netflow.reverse_mpls_top_label_stack_section`*:: + -- type: keyword -- -*`netflow.reverse_application_name`*:: +*`netflow.reverse_mpls_top_label_ttl`*:: + -- -type: keyword +type: short -- -*`netflow.reverse_post_ip_diff_serv_code_point`*:: +*`netflow.reverse_mpls_top_label_type`*:: + -- type: short -- -*`netflow.reverse_multicast_replication_factor`*:: +*`netflow.reverse_mpls_vpn_route_distinguisher`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_class_name`*:: +*`netflow.reverse_multicast_replication_factor`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_classification_engine_id`*:: +*`netflow.reverse_nat_event`*:: + -- type: short -- -*`netflow.reverse_layer2packet_section_offset`*:: +*`netflow.reverse_nat_originating_address_realm`*:: + -- -type: integer +type: short -- -*`netflow.reverse_layer2packet_section_size`*:: +*`netflow.reverse_nat_pool_id`*:: + -- -type: integer +type: long -- -*`netflow.reverse_layer2packet_section_data`*:: +*`netflow.reverse_nat_pool_name`*:: + -- type: keyword -- -*`netflow.reverse_bgp_next_adjacent_as_number`*:: -+ --- -type: long - --- - -*`netflow.reverse_bgp_prev_adjacent_as_number`*:: +*`netflow.reverse_nat_type`*:: + -- -type: long +type: short -- -*`netflow.reverse_dropped_octet_delta_count`*:: +*`netflow.reverse_new_connection_delta_count`*:: + -- type: long -- -*`netflow.reverse_dropped_packet_delta_count`*:: +*`netflow.reverse_next_header_ipv6`*:: + -- -type: long +type: short -- -*`netflow.reverse_dropped_octet_total_count`*:: +*`netflow.reverse_non_empty_packet_count`*:: + -- type: long -- -*`netflow.reverse_dropped_packet_total_count`*:: +*`netflow.reverse_not_sent_layer2_octet_total_count`*:: + -- type: long -- -*`netflow.reverse_flow_end_reason`*:: +*`netflow.reverse_observation_domain_name`*:: + -- -type: short +type: keyword -- @@ -101848,920 +101701,927 @@ type: long -- -*`netflow.reverse_icmp_type_code_ipv6`*:: +*`netflow.reverse_observation_point_type`*:: + -- -type: integer +type: short -- -*`netflow.reverse_mpls_top_label_ipv6_address`*:: +*`netflow.reverse_observation_time_microseconds`*:: + -- -type: ip +type: long -- -*`netflow.reverse_line_card_id`*:: +*`netflow.reverse_observation_time_milliseconds`*:: + -- type: long -- -*`netflow.reverse_port_id`*:: +*`netflow.reverse_observation_time_nanoseconds`*:: + -- type: long -- -*`netflow.reverse_metering_process_id`*:: +*`netflow.reverse_observation_time_seconds`*:: + -- type: long -- -*`netflow.reverse_exporting_process_id`*:: +*`netflow.reverse_octet_delta_count`*:: + -- type: long -- -*`netflow.reverse_wlan_channel_id`*:: +*`netflow.reverse_octet_delta_sum_of_squares`*:: + -- -type: short +type: long -- -*`netflow.reverse_wlan_ssid`*:: +*`netflow.reverse_octet_total_count`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_flow_start_seconds`*:: +*`netflow.reverse_octet_total_sum_of_squares`*:: + -- type: long -- -*`netflow.reverse_flow_end_seconds`*:: +*`netflow.reverse_opaque_octets`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_flow_start_milliseconds`*:: +*`netflow.reverse_original_exporter_ipv4_address`*:: + -- -type: long +type: ip -- -*`netflow.reverse_flow_end_milliseconds`*:: +*`netflow.reverse_original_exporter_ipv6_address`*:: + -- -type: long +type: ip -- -*`netflow.reverse_flow_start_microseconds`*:: +*`netflow.reverse_original_flows_completed`*:: + -- type: long -- -*`netflow.reverse_flow_end_microseconds`*:: +*`netflow.reverse_original_flows_initiated`*:: + -- type: long -- -*`netflow.reverse_flow_start_nanoseconds`*:: +*`netflow.reverse_original_flows_present`*:: + -- type: long -- -*`netflow.reverse_flow_end_nanoseconds`*:: +*`netflow.reverse_original_observation_domain_id`*:: + -- type: long -- -*`netflow.reverse_flow_start_delta_microseconds`*:: +*`netflow.reverse_os_finger_print`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_flow_end_delta_microseconds`*:: +*`netflow.reverse_os_name`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_system_init_time_milliseconds`*:: +*`netflow.reverse_os_version`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_flow_duration_milliseconds`*:: +*`netflow.reverse_p2p_technology`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_flow_duration_microseconds`*:: +*`netflow.reverse_packet_delta_count`*:: + -- type: long -- -*`netflow.reverse_destination_ipv6_prefix`*:: +*`netflow.reverse_packet_total_count`*:: + -- -type: ip +type: long -- -*`netflow.reverse_source_ipv6_prefix`*:: +*`netflow.reverse_payload`*:: + -- -type: ip +type: keyword -- -*`netflow.reverse_post_octet_total_count`*:: +*`netflow.reverse_payload_entropy`*:: + -- -type: long +type: short -- -*`netflow.reverse_post_packet_total_count`*:: +*`netflow.reverse_payload_length_ipv6`*:: + -- -type: long +type: integer -- -*`netflow.reverse_post_mcast_packet_total_count`*:: +*`netflow.reverse_port_id`*:: + -- type: long -- -*`netflow.reverse_post_mcast_octet_total_count`*:: +*`netflow.reverse_port_range_end`*:: + -- -type: long +type: integer -- -*`netflow.reverse_icmp_type_ipv4`*:: +*`netflow.reverse_port_range_num_ports`*:: + -- -type: short +type: integer -- -*`netflow.reverse_icmp_code_ipv4`*:: +*`netflow.reverse_port_range_start`*:: + -- -type: short +type: integer -- -*`netflow.reverse_icmp_type_ipv6`*:: +*`netflow.reverse_port_range_step_size`*:: + -- -type: short +type: integer -- -*`netflow.reverse_icmp_code_ipv6`*:: +*`netflow.reverse_post_destination_mac_address`*:: + -- -type: short +type: keyword -- -*`netflow.reverse_udp_source_port`*:: +*`netflow.reverse_post_dot1q_customer_vlan_id`*:: + -- type: integer -- -*`netflow.reverse_udp_destination_port`*:: +*`netflow.reverse_post_dot1q_vlan_id`*:: + -- type: integer -- -*`netflow.reverse_tcp_source_port`*:: +*`netflow.reverse_post_ip_class_of_service`*:: + -- -type: integer +type: short -- -*`netflow.reverse_tcp_destination_port`*:: +*`netflow.reverse_post_ip_diff_serv_code_point`*:: + -- -type: integer +type: short -- -*`netflow.reverse_tcp_sequence_number`*:: +*`netflow.reverse_post_ip_precedence`*:: + -- -type: long +type: short -- -*`netflow.reverse_tcp_acknowledgement_number`*:: +*`netflow.reverse_post_layer2_octet_delta_count`*:: + -- type: long -- -*`netflow.reverse_tcp_window_size`*:: +*`netflow.reverse_post_layer2_octet_total_count`*:: + -- -type: integer +type: long -- -*`netflow.reverse_tcp_urgent_pointer`*:: +*`netflow.reverse_post_mcast_layer2_octet_delta_count`*:: + -- -type: integer +type: long -- -*`netflow.reverse_tcp_header_length`*:: +*`netflow.reverse_post_mcast_layer2_octet_total_count`*:: + -- -type: short +type: long -- -*`netflow.reverse_ip_header_length`*:: +*`netflow.reverse_post_mcast_octet_delta_count`*:: + -- -type: short +type: long -- -*`netflow.reverse_total_length_ipv4`*:: +*`netflow.reverse_post_mcast_octet_total_count`*:: + -- -type: integer +type: long -- -*`netflow.reverse_payload_length_ipv6`*:: +*`netflow.reverse_post_mcast_packet_delta_count`*:: + -- -type: integer +type: long -- -*`netflow.reverse_ip_ttl`*:: +*`netflow.reverse_post_mcast_packet_total_count`*:: + -- -type: short +type: long -- -*`netflow.reverse_next_header_ipv6`*:: +*`netflow.reverse_post_mpls_top_label_exp`*:: + -- type: short -- -*`netflow.reverse_mpls_payload_length`*:: +*`netflow.reverse_post_napt_destination_transport_port`*:: + -- -type: long +type: integer -- -*`netflow.reverse_ip_diff_serv_code_point`*:: +*`netflow.reverse_post_napt_source_transport_port`*:: + -- -type: short +type: integer -- -*`netflow.reverse_ip_precedence`*:: +*`netflow.reverse_post_nat_destination_ipv4_address`*:: + -- -type: short +type: ip -- -*`netflow.reverse_fragment_flags`*:: +*`netflow.reverse_post_nat_destination_ipv6_address`*:: + -- -type: short +type: ip -- -*`netflow.reverse_octet_delta_sum_of_squares`*:: +*`netflow.reverse_post_nat_source_ipv4_address`*:: + -- -type: long +type: ip -- -*`netflow.reverse_octet_total_sum_of_squares`*:: +*`netflow.reverse_post_nat_source_ipv6_address`*:: + -- -type: long +type: ip -- -*`netflow.reverse_mpls_top_label_ttl`*:: +*`netflow.reverse_post_octet_delta_count`*:: + -- -type: short +type: long -- -*`netflow.reverse_mpls_label_stack_length`*:: +*`netflow.reverse_post_octet_total_count`*:: + -- type: long -- -*`netflow.reverse_mpls_label_stack_depth`*:: +*`netflow.reverse_post_packet_delta_count`*:: + -- type: long -- -*`netflow.reverse_mpls_top_label_exp`*:: +*`netflow.reverse_post_packet_total_count`*:: + -- -type: short +type: long -- -*`netflow.reverse_ip_payload_length`*:: +*`netflow.reverse_post_source_mac_address`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_udp_message_length`*:: +*`netflow.reverse_post_vlan_id`*:: + -- type: integer -- -*`netflow.reverse_is_multicast`*:: +*`netflow.reverse_private_enterprise_number`*:: + -- -type: short +type: long -- -*`netflow.reverse_ipv4_ihl`*:: +*`netflow.reverse_protocol_identifier`*:: + -- type: short -- -*`netflow.reverse_ipv4_options`*:: +*`netflow.reverse_pseudo_wire_control_word`*:: + -- type: long -- -*`netflow.reverse_tcp_options`*:: +*`netflow.reverse_pseudo_wire_destination_ipv4_address`*:: + -- -type: long +type: ip -- -*`netflow.reverse_tcp_syn_total_count`*:: +*`netflow.reverse_pseudo_wire_id`*:: + -- type: long -- -*`netflow.reverse_tcp_fin_total_count`*:: +*`netflow.reverse_pseudo_wire_type`*:: + -- -type: long +type: integer -- -*`netflow.reverse_tcp_rst_total_count`*:: +*`netflow.reverse_relative_error`*:: + -- -type: long +type: double -- -*`netflow.reverse_tcp_psh_total_count`*:: +*`netflow.reverse_responder_octets`*:: + -- type: long -- -*`netflow.reverse_tcp_ack_total_count`*:: +*`netflow.reverse_responder_packets`*:: + -- type: long -- -*`netflow.reverse_tcp_urg_total_count`*:: +*`netflow.reverse_rfc3550_jitter_microseconds`*:: + -- type: long -- -*`netflow.reverse_ip_total_length`*:: +*`netflow.reverse_rfc3550_jitter_milliseconds`*:: + -- type: long -- -*`netflow.reverse_post_nat_source_ipv4_address`*:: +*`netflow.reverse_rfc3550_jitter_nanoseconds`*:: + -- -type: ip +type: long -- -*`netflow.reverse_post_nat_destination_ipv4_address`*:: +*`netflow.reverse_rtp_payload_type`*:: + -- -type: ip +type: short -- -*`netflow.reverse_post_napt_source_transport_port`*:: +*`netflow.reverse_rtp_sequence_number`*:: + -- type: integer -- -*`netflow.reverse_post_napt_destination_transport_port`*:: +*`netflow.reverse_sampler_id`*:: + -- -type: integer +type: short -- -*`netflow.reverse_nat_originating_address_realm`*:: +*`netflow.reverse_sampler_mode`*:: + -- type: short -- -*`netflow.reverse_nat_event`*:: +*`netflow.reverse_sampler_name`*:: + -- -type: short +type: keyword -- -*`netflow.reverse_initiator_octets`*:: +*`netflow.reverse_sampler_random_interval`*:: + -- type: long -- -*`netflow.reverse_responder_octets`*:: +*`netflow.reverse_sampling_algorithm`*:: + -- -type: long +type: short -- -*`netflow.reverse_firewall_event`*:: +*`netflow.reverse_sampling_flow_interval`*:: + -- -type: short +type: long -- -*`netflow.reverse_ingress_vrfid`*:: +*`netflow.reverse_sampling_flow_spacing`*:: + -- type: long -- -*`netflow.reverse_egress_vrfid`*:: +*`netflow.reverse_sampling_interval`*:: + -- type: long -- -*`netflow.reverse_vr_fname`*:: +*`netflow.reverse_sampling_packet_interval`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_post_mpls_top_label_exp`*:: +*`netflow.reverse_sampling_packet_space`*:: + -- -type: short +type: long -- -*`netflow.reverse_tcp_window_scale`*:: +*`netflow.reverse_sampling_population`*:: + -- -type: integer +type: long -- -*`netflow.reverse_ethernet_header_length`*:: +*`netflow.reverse_sampling_probability`*:: + -- -type: short +type: double -- -*`netflow.reverse_ethernet_payload_length`*:: +*`netflow.reverse_sampling_size`*:: + -- -type: integer +type: long -- -*`netflow.reverse_ethernet_total_length`*:: +*`netflow.reverse_sampling_time_interval`*:: + -- -type: integer +type: long -- -*`netflow.reverse_dot1q_vlan_id`*:: +*`netflow.reverse_sampling_time_space`*:: + -- -type: integer +type: long -- -*`netflow.reverse_dot1q_priority`*:: +*`netflow.reverse_second_packet_banner`*:: + -- -type: short +type: keyword -- -*`netflow.reverse_dot1q_customer_vlan_id`*:: +*`netflow.reverse_section_exported_octets`*:: + -- type: integer -- -*`netflow.reverse_dot1q_customer_priority`*:: +*`netflow.reverse_section_offset`*:: + -- -type: short +type: integer -- -*`netflow.reverse_metro_evc_id`*:: +*`netflow.reverse_selection_sequence_id`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_metro_evc_type`*:: +*`netflow.reverse_selector_algorithm`*:: + -- -type: short +type: integer -- -*`netflow.reverse_pseudo_wire_id`*:: +*`netflow.reverse_selector_id`*:: + -- type: long -- -*`netflow.reverse_pseudo_wire_type`*:: +*`netflow.reverse_selector_id_total_flows_observed`*:: + -- -type: integer +type: long -- -*`netflow.reverse_pseudo_wire_control_word`*:: +*`netflow.reverse_selector_id_total_flows_selected`*:: + -- type: long -- -*`netflow.reverse_ingress_physical_interface`*:: +*`netflow.reverse_selector_id_total_pkts_observed`*:: + -- type: long -- -*`netflow.reverse_egress_physical_interface`*:: +*`netflow.reverse_selector_id_total_pkts_selected`*:: + -- type: long -- -*`netflow.reverse_post_dot1q_vlan_id`*:: +*`netflow.reverse_selector_name`*:: + -- -type: integer +type: keyword -- -*`netflow.reverse_post_dot1q_customer_vlan_id`*:: +*`netflow.reverse_session_scope`*:: + -- -type: integer +type: short -- -*`netflow.reverse_ethernet_type`*:: +*`netflow.reverse_small_packet_count`*:: + -- -type: integer +type: long -- -*`netflow.reverse_post_ip_precedence`*:: +*`netflow.reverse_source_ipv4_address`*:: + -- -type: short +type: ip -- -*`netflow.reverse_collection_time_milliseconds`*:: +*`netflow.reverse_source_ipv4_prefix`*:: + -- -type: long +type: ip -- -*`netflow.reverse_export_sctp_stream_id`*:: +*`netflow.reverse_source_ipv4_prefix_length`*:: + -- -type: integer +type: short -- -*`netflow.reverse_max_export_seconds`*:: +*`netflow.reverse_source_ipv6_address`*:: + -- -type: long +type: ip -- -*`netflow.reverse_max_flow_end_seconds`*:: +*`netflow.reverse_source_ipv6_prefix`*:: + -- -type: long +type: ip -- -*`netflow.reverse_message_md5_checksum`*:: +*`netflow.reverse_source_ipv6_prefix_length`*:: + -- -type: keyword +type: short -- -*`netflow.reverse_message_scope`*:: +*`netflow.reverse_source_mac_address`*:: + -- -type: short +type: keyword -- -*`netflow.reverse_min_export_seconds`*:: +*`netflow.reverse_source_transport_port`*:: + -- -type: long +type: integer -- -*`netflow.reverse_min_flow_start_seconds`*:: +*`netflow.reverse_src_traffic_index`*:: + -- type: long -- -*`netflow.reverse_opaque_octets`*:: +*`netflow.reverse_sta_ipv4_address`*:: + -- -type: keyword +type: ip -- -*`netflow.reverse_session_scope`*:: +*`netflow.reverse_sta_mac_address`*:: + -- -type: short +type: keyword -- -*`netflow.reverse_max_flow_end_microseconds`*:: +*`netflow.reverse_standard_deviation_interarrival_time`*:: + -- type: long -- -*`netflow.reverse_max_flow_end_milliseconds`*:: +*`netflow.reverse_standard_deviation_payload_length`*:: + -- -type: long +type: integer -- -*`netflow.reverse_max_flow_end_nanoseconds`*:: +*`netflow.reverse_system_init_time_milliseconds`*:: + -- type: long -- -*`netflow.reverse_min_flow_start_microseconds`*:: +*`netflow.reverse_tcp_ack_total_count`*:: + -- type: long -- -*`netflow.reverse_min_flow_start_milliseconds`*:: +*`netflow.reverse_tcp_acknowledgement_number`*:: + -- type: long -- -*`netflow.reverse_min_flow_start_nanoseconds`*:: +*`netflow.reverse_tcp_control_bits`*:: + -- -type: long +type: integer -- -*`netflow.reverse_collector_certificate`*:: +*`netflow.reverse_tcp_destination_port`*:: + -- -type: keyword +type: integer -- -*`netflow.reverse_exporter_certificate`*:: +*`netflow.reverse_tcp_fin_total_count`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_data_records_reliability`*:: +*`netflow.reverse_tcp_header_length`*:: + -- type: short -- -*`netflow.reverse_observation_point_type`*:: +*`netflow.reverse_tcp_options`*:: + -- -type: short +type: long -- -*`netflow.reverse_new_connection_delta_count`*:: +*`netflow.reverse_tcp_psh_total_count`*:: + -- type: long -- -*`netflow.reverse_connection_sum_duration_seconds`*:: +*`netflow.reverse_tcp_rst_total_count`*:: + -- type: long -- -*`netflow.reverse_connection_transaction_id`*:: +*`netflow.reverse_tcp_sequence_number`*:: + -- type: long -- -*`netflow.reverse_post_nat_source_ipv6_address`*:: +*`netflow.reverse_tcp_source_port`*:: + -- -type: ip +type: integer -- -*`netflow.reverse_post_nat_destination_ipv6_address`*:: +*`netflow.reverse_tcp_syn_total_count`*:: + -- -type: ip +type: long -- -*`netflow.reverse_nat_pool_id`*:: +*`netflow.reverse_tcp_urg_total_count`*:: + -- type: long -- -*`netflow.reverse_nat_pool_name`*:: +*`netflow.reverse_tcp_urgent_pointer`*:: + -- -type: keyword +type: integer + +-- + +*`netflow.reverse_tcp_window_scale`*:: ++ +-- +type: integer -- -*`netflow.reverse_anonymization_flags`*:: +*`netflow.reverse_tcp_window_size`*:: + -- type: integer -- -*`netflow.reverse_anonymization_technique`*:: +*`netflow.reverse_total_length_ipv4`*:: + -- type: integer -- -*`netflow.reverse_information_element_index`*:: +*`netflow.reverse_transport_octet_delta_count`*:: + -- -type: integer +type: long -- -*`netflow.reverse_p2p_technology`*:: +*`netflow.reverse_transport_packet_delta_count`*:: + -- -type: keyword +type: long -- @@ -102772,983 +102632,990 @@ type: keyword -- -*`netflow.reverse_encrypted_technology`*:: +*`netflow.reverse_udp_destination_port`*:: + -- -type: keyword +type: integer -- -*`netflow.reverse_bgp_validity_state`*:: +*`netflow.reverse_udp_message_length`*:: + -- -type: short +type: integer -- -*`netflow.reverse_ip_sec_spi`*:: +*`netflow.reverse_udp_source_port`*:: + -- -type: long +type: integer -- -*`netflow.reverse_gre_key`*:: +*`netflow.reverse_union_tcp_flags`*:: + -- -type: long +type: short -- -*`netflow.reverse_nat_type`*:: +*`netflow.reverse_upper_ci_limit`*:: + -- -type: short +type: double -- -*`netflow.reverse_initiator_packets`*:: +*`netflow.reverse_user_name`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_responder_packets`*:: +*`netflow.reverse_value_distribution_method`*:: + -- -type: long +type: short -- -*`netflow.reverse_observation_domain_name`*:: +*`netflow.reverse_virtual_station_interface_id`*:: + -- type: keyword -- -*`netflow.reverse_selection_sequence_id`*:: +*`netflow.reverse_virtual_station_interface_name`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_selector_id`*:: +*`netflow.reverse_virtual_station_name`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_information_element_id`*:: +*`netflow.reverse_virtual_station_uuid`*:: + -- -type: integer +type: keyword -- -*`netflow.reverse_selector_algorithm`*:: +*`netflow.reverse_vlan_id`*:: + -- type: integer -- -*`netflow.reverse_sampling_packet_interval`*:: +*`netflow.reverse_vr_fname`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_sampling_packet_space`*:: +*`netflow.reverse_wlan_channel_id`*:: + -- -type: long +type: short -- -*`netflow.reverse_sampling_time_interval`*:: +*`netflow.reverse_wlan_ssid`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_sampling_time_space`*:: +*`netflow.reverse_wtp_mac_address`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_sampling_size`*:: +*`netflow.rfc3550_jitter_microseconds`*:: + -- type: long -- -*`netflow.reverse_sampling_population`*:: +*`netflow.rfc3550_jitter_milliseconds`*:: + -- type: long -- -*`netflow.reverse_sampling_probability`*:: +*`netflow.rfc3550_jitter_nanoseconds`*:: + -- -type: double +type: long -- -*`netflow.reverse_data_link_frame_size`*:: +*`netflow.rtp_payload_type`*:: + -- -type: integer +type: short -- -*`netflow.reverse_ip_header_packet_section`*:: +*`netflow.rtp_sequence_number`*:: + -- -type: keyword +type: integer -- -*`netflow.reverse_ip_payload_packet_section`*:: +*`netflow.sampler_id`*:: + -- -type: keyword +type: short -- -*`netflow.reverse_data_link_frame_section`*:: +*`netflow.sampler_mode`*:: + -- -type: keyword +type: short -- -*`netflow.reverse_mpls_label_stack_section`*:: +*`netflow.sampler_name`*:: + -- type: keyword -- -*`netflow.reverse_mpls_payload_packet_section`*:: +*`netflow.sampler_random_interval`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_selector_id_total_pkts_observed`*:: +*`netflow.sampling_algorithm`*:: + -- -type: long +type: short -- -*`netflow.reverse_selector_id_total_pkts_selected`*:: +*`netflow.sampling_flow_interval`*:: + -- type: long -- -*`netflow.reverse_absolute_error`*:: +*`netflow.sampling_flow_spacing`*:: + -- -type: double +type: long -- -*`netflow.reverse_relative_error`*:: +*`netflow.sampling_interval`*:: + -- -type: double +type: long -- -*`netflow.reverse_observation_time_seconds`*:: +*`netflow.sampling_packet_interval`*:: + -- type: long -- -*`netflow.reverse_observation_time_milliseconds`*:: +*`netflow.sampling_packet_space`*:: + -- type: long -- -*`netflow.reverse_observation_time_microseconds`*:: +*`netflow.sampling_population`*:: + -- type: long -- -*`netflow.reverse_observation_time_nanoseconds`*:: +*`netflow.sampling_probability`*:: + -- -type: long +type: double -- -*`netflow.reverse_digest_hash_value`*:: +*`netflow.sampling_size`*:: + -- type: long -- -*`netflow.reverse_hash_ip_payload_offset`*:: +*`netflow.sampling_time_interval`*:: + -- type: long -- -*`netflow.reverse_hash_ip_payload_size`*:: +*`netflow.sampling_time_space`*:: + -- type: long -- -*`netflow.reverse_hash_output_range_min`*:: +*`netflow.second_packet_banner`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_hash_output_range_max`*:: +*`netflow.section_exported_octets`*:: + -- -type: long +type: integer -- -*`netflow.reverse_hash_selected_range_min`*:: +*`netflow.section_offset`*:: + -- -type: long +type: integer -- -*`netflow.reverse_hash_selected_range_max`*:: +*`netflow.selection_sequence_id`*:: + -- type: long -- -*`netflow.reverse_hash_digest_output`*:: +*`netflow.selector_algorithm`*:: + -- -type: short +type: integer -- -*`netflow.reverse_hash_initialiser_value`*:: +*`netflow.selector_id`*:: + -- type: long -- -*`netflow.reverse_selector_name`*:: +*`netflow.selector_id_total_flows_observed`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_upper_ci_limit`*:: +*`netflow.selector_id_total_flows_selected`*:: + -- -type: double +type: long -- -*`netflow.reverse_lower_ci_limit`*:: +*`netflow.selector_id_total_pkts_observed`*:: + -- -type: double +type: long -- -*`netflow.reverse_confidence_level`*:: +*`netflow.selector_id_total_pkts_selected`*:: + -- -type: double +type: long -- -*`netflow.reverse_information_element_data_type`*:: +*`netflow.selector_name`*:: + -- -type: short +type: keyword -- -*`netflow.reverse_information_element_description`*:: +*`netflow.service_name`*:: + -- type: keyword -- -*`netflow.reverse_information_element_name`*:: +*`netflow.session_scope`*:: + -- -type: keyword +type: short -- -*`netflow.reverse_information_element_range_begin`*:: +*`netflow.silk_app_label`*:: + -- -type: long +type: integer -- -*`netflow.reverse_information_element_range_end`*:: +*`netflow.small_packet_count`*:: + -- type: long -- -*`netflow.reverse_information_element_semantics`*:: +*`netflow.source_ipv4_address`*:: + -- -type: short +type: ip -- -*`netflow.reverse_information_element_units`*:: +*`netflow.source_ipv4_prefix`*:: + -- -type: integer +type: ip -- -*`netflow.reverse_private_enterprise_number`*:: +*`netflow.source_ipv4_prefix_length`*:: + -- -type: long +type: short -- -*`netflow.reverse_virtual_station_interface_id`*:: +*`netflow.source_ipv6_address`*:: + -- -type: keyword +type: ip -- -*`netflow.reverse_virtual_station_interface_name`*:: +*`netflow.source_ipv6_prefix`*:: + -- -type: keyword +type: ip -- -*`netflow.reverse_virtual_station_uuid`*:: +*`netflow.source_ipv6_prefix_length`*:: + -- -type: keyword +type: short -- -*`netflow.reverse_virtual_station_name`*:: +*`netflow.source_mac_address`*:: + -- type: keyword -- -*`netflow.reverse_layer2_segment_id`*:: -+ --- -type: long - --- - -*`netflow.reverse_layer2_octet_delta_count`*:: +*`netflow.source_transport_port`*:: + -- -type: long +type: integer -- -*`netflow.reverse_layer2_octet_total_count`*:: +*`netflow.source_transport_ports_limit`*:: + -- -type: long +type: integer -- -*`netflow.reverse_ingress_unicast_packet_total_count`*:: +*`netflow.src_traffic_index`*:: + -- type: long -- -*`netflow.reverse_ingress_multicast_packet_total_count`*:: +*`netflow.ssl_cert_serial_number`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_ingress_broadcast_packet_total_count`*:: +*`netflow.ssl_cert_signature`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_egress_unicast_packet_total_count`*:: +*`netflow.ssl_cert_validity_not_after`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_egress_broadcast_packet_total_count`*:: +*`netflow.ssl_cert_validity_not_before`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_monitoring_interval_start_milli_seconds`*:: +*`netflow.ssl_cert_version`*:: + -- -type: long +type: short -- -*`netflow.reverse_monitoring_interval_end_milli_seconds`*:: +*`netflow.ssl_certificate_hash`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_port_range_start`*:: +*`netflow.ssl_cipher`*:: + -- -type: integer +type: keyword -- -*`netflow.reverse_port_range_end`*:: +*`netflow.ssl_client_version`*:: + -- -type: integer +type: short -- -*`netflow.reverse_port_range_step_size`*:: +*`netflow.ssl_compression_method`*:: + -- -type: integer +type: short -- -*`netflow.reverse_port_range_num_ports`*:: +*`netflow.ssl_object_type`*:: + -- -type: integer +type: keyword -- -*`netflow.reverse_sta_mac_address`*:: +*`netflow.ssl_object_value`*:: + -- type: keyword -- -*`netflow.reverse_sta_ipv4_address`*:: +*`netflow.ssl_public_key_algorithm`*:: + -- -type: ip +type: keyword -- -*`netflow.reverse_wtp_mac_address`*:: +*`netflow.ssl_public_key_length`*:: + -- type: keyword -- -*`netflow.reverse_ingress_interface_type`*:: +*`netflow.ssl_server_cipher`*:: + -- type: long -- -*`netflow.reverse_egress_interface_type`*:: +*`netflow.ssl_server_name`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_rtp_sequence_number`*:: +*`netflow.sta_ipv4_address`*:: + -- -type: integer +type: ip -- -*`netflow.reverse_user_name`*:: +*`netflow.sta_mac_address`*:: + -- type: keyword -- -*`netflow.reverse_application_category_name`*:: +*`netflow.standard_deviation_interarrival_time`*:: + -- -type: keyword +type: long -- -*`netflow.reverse_application_sub_category_name`*:: +*`netflow.standard_deviation_payload_length`*:: + -- -type: keyword +type: short -- -*`netflow.reverse_application_group_name`*:: +*`netflow.system_init_time_milliseconds`*:: + -- -type: keyword +type: date -- -*`netflow.reverse_original_flows_present`*:: +*`netflow.tcp_ack_total_count`*:: + -- type: long -- -*`netflow.reverse_original_flows_initiated`*:: +*`netflow.tcp_acknowledgement_number`*:: + -- type: long -- -*`netflow.reverse_original_flows_completed`*:: +*`netflow.tcp_control_bits`*:: + -- -type: long +type: integer -- -*`netflow.reverse_distinct_count_of_source_ip_address`*:: +*`netflow.tcp_destination_port`*:: + -- -type: long +type: integer -- -*`netflow.reverse_distinct_count_of_destination_ip_address`*:: +*`netflow.tcp_fin_total_count`*:: + -- type: long -- -*`netflow.reverse_distinct_count_of_source_ipv4_address`*:: +*`netflow.tcp_header_length`*:: ++ +-- +type: short + +-- + +*`netflow.tcp_options`*:: + -- type: long -- -*`netflow.reverse_distinct_count_of_destination_ipv4_address`*:: +*`netflow.tcp_psh_total_count`*:: + -- type: long -- -*`netflow.reverse_distinct_count_of_source_ipv6_address`*:: +*`netflow.tcp_rst_total_count`*:: + -- type: long -- -*`netflow.reverse_distinct_count_of_destination_ipv6_address`*:: +*`netflow.tcp_sequence_number`*:: + -- type: long -- -*`netflow.reverse_value_distribution_method`*:: +*`netflow.tcp_source_port`*:: + -- -type: short +type: integer -- -*`netflow.reverse_rfc3550_jitter_milliseconds`*:: +*`netflow.tcp_syn_total_count`*:: + -- type: long -- -*`netflow.reverse_rfc3550_jitter_microseconds`*:: +*`netflow.tcp_urg_total_count`*:: + -- type: long -- -*`netflow.reverse_rfc3550_jitter_nanoseconds`*:: +*`netflow.tcp_urgent_pointer`*:: + -- -type: long +type: integer -- -*`netflow.reverse_dot1q_dei`*:: +*`netflow.tcp_window_scale`*:: + -- -type: short +type: integer -- -*`netflow.reverse_dot1q_customer_dei`*:: +*`netflow.tcp_window_size`*:: + -- -type: short +type: integer -- -*`netflow.reverse_flow_selector_algorithm`*:: +*`netflow.template_id`*:: + -- type: integer -- -*`netflow.reverse_flow_selected_octet_delta_count`*:: +*`netflow.tftp_filename`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_flow_selected_packet_delta_count`*:: +*`netflow.tftp_mode`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_flow_selected_flow_delta_count`*:: +*`netflow.timestamp`*:: + -- type: long -- -*`netflow.reverse_selector_id_total_flows_observed`*:: +*`netflow.timestamp_absolute_monitoring-interval`*:: + -- type: long -- -*`netflow.reverse_selector_id_total_flows_selected`*:: +*`netflow.total_length_ipv4`*:: + -- -type: long +type: integer -- -*`netflow.reverse_sampling_flow_interval`*:: +*`netflow.traffic_type`*:: + -- -type: long +type: short -- -*`netflow.reverse_sampling_flow_spacing`*:: +*`netflow.transport_octet_delta_count`*:: + -- type: long -- -*`netflow.reverse_flow_sampling_time_interval`*:: +*`netflow.transport_packet_delta_count`*:: + -- type: long -- -*`netflow.reverse_flow_sampling_time_spacing`*:: +*`netflow.tunnel_technology`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_hash_flow_domain`*:: +*`netflow.udp_destination_port`*:: + -- type: integer -- -*`netflow.reverse_transport_octet_delta_count`*:: +*`netflow.udp_message_length`*:: + -- -type: long +type: integer -- -*`netflow.reverse_transport_packet_delta_count`*:: +*`netflow.udp_source_port`*:: + -- -type: long +type: integer -- -*`netflow.reverse_original_exporter_ipv4_address`*:: +*`netflow.union_tcp_flags`*:: + -- -type: ip +type: short -- -*`netflow.reverse_original_exporter_ipv6_address`*:: +*`netflow.upper_ci_limit`*:: + -- -type: ip +type: double -- -*`netflow.reverse_original_observation_domain_id`*:: +*`netflow.user_name`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_intermediate_process_id`*:: +*`netflow.username`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_ignored_data_record_total_count`*:: +*`netflow.value_distribution_method`*:: + -- -type: long +type: short -- -*`netflow.reverse_data_link_frame_type`*:: +*`netflow.viptela_vpn_id`*:: + -- -type: integer +type: long -- -*`netflow.reverse_section_offset`*:: +*`netflow.virtual_station_interface_id`*:: + -- -type: integer +type: short -- -*`netflow.reverse_section_exported_octets`*:: +*`netflow.virtual_station_interface_name`*:: + -- -type: integer +type: keyword -- -*`netflow.reverse_dot1q_service_instance_tag`*:: +*`netflow.virtual_station_name`*:: + -- type: keyword -- -*`netflow.reverse_dot1q_service_instance_id`*:: +*`netflow.virtual_station_uuid`*:: + -- -type: long +type: short -- -*`netflow.reverse_dot1q_service_instance_priority`*:: +*`netflow.vlan_id`*:: + -- -type: short +type: integer -- -*`netflow.reverse_dot1q_customer_source_mac_address`*:: +*`netflow.vmware_egress_interface_attr`*:: + -- -type: keyword +type: integer -- -*`netflow.reverse_dot1q_customer_destination_mac_address`*:: +*`netflow.vmware_ingress_interface_attr`*:: + -- -type: keyword +type: integer -- -*`netflow.reverse_post_layer2_octet_delta_count`*:: +*`netflow.vmware_tenant_dest_ipv4`*:: + -- -type: long +type: ip -- -*`netflow.reverse_post_mcast_layer2_octet_delta_count`*:: +*`netflow.vmware_tenant_dest_ipv6`*:: + -- -type: long +type: ip -- -*`netflow.reverse_post_layer2_octet_total_count`*:: +*`netflow.vmware_tenant_dest_port`*:: + -- -type: long +type: integer -- -*`netflow.reverse_post_mcast_layer2_octet_total_count`*:: +*`netflow.vmware_tenant_protocol`*:: + -- -type: long +type: short -- -*`netflow.reverse_minimum_layer2_total_length`*:: +*`netflow.vmware_tenant_source_ipv4`*:: + -- -type: long +type: ip -- -*`netflow.reverse_maximum_layer2_total_length`*:: +*`netflow.vmware_tenant_source_ipv6`*:: + -- -type: long +type: ip -- -*`netflow.reverse_dropped_layer2_octet_delta_count`*:: +*`netflow.vmware_tenant_source_port`*:: + -- -type: long +type: integer -- -*`netflow.reverse_dropped_layer2_octet_total_count`*:: +*`netflow.vmware_vxlan_export_role`*:: + -- -type: long +type: short -- -*`netflow.reverse_ignored_layer2_octet_total_count`*:: +*`netflow.vpn_identifier`*:: + -- -type: long +type: short -- -*`netflow.reverse_not_sent_layer2_octet_total_count`*:: +*`netflow.vr_fname`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_layer2_octet_delta_sum_of_squares`*:: +*`netflow.waasoptimization_segment`*:: + -- -type: long +type: short -- -*`netflow.reverse_layer2_octet_total_sum_of_squares`*:: +*`netflow.wlan_channel_id`*:: + -- -type: long +type: short -- -*`netflow.reverse_layer2_frame_delta_count`*:: +*`netflow.wlan_ssid`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_layer2_frame_total_count`*:: +*`netflow.wtp_mac_address`*:: + -- -type: long +type: keyword -- -*`netflow.reverse_pseudo_wire_destination_ipv4_address`*:: +*`netflow.xlate_destination_address_ip_v4`*:: + -- type: ip -- -*`netflow.reverse_ignored_layer2_frame_total_count`*:: +*`netflow.xlate_destination_port`*:: + -- -type: long +type: integer -- -*`netflow.viptela_vpn_id`*:: +*`netflow.xlate_source_address_ip_v4`*:: + -- -type: long +type: ip + +-- + +*`netflow.xlate_source_port`*:: ++ +-- +type: integer -- diff --git a/x-pack/filebeat/input/netflow/_meta/fields.header.yml b/x-pack/filebeat/input/netflow/_meta/fields.header.yml index 60e585ec2dfa..2b1b2aa6b8c2 100644 --- a/x-pack/filebeat/input/netflow/_meta/fields.header.yml +++ b/x-pack/filebeat/input/netflow/_meta/fields.header.yml @@ -5,6 +5,7 @@ fields: - name: netflow type: group + default_field: false description: > Fields from NetFlow and IPFIX. fields: diff --git a/x-pack/filebeat/input/netflow/_meta/fields.yml b/x-pack/filebeat/input/netflow/_meta/fields.yml index 2d7eb5c69f43..e9e0755d3757 100644 --- a/x-pack/filebeat/input/netflow/_meta/fields.yml +++ b/x-pack/filebeat/input/netflow/_meta/fields.yml @@ -1,3 +1,6 @@ +######################################## +# This file is generated. Do not modify. +######################################## - key: netflow title: "NetFlow" description: > @@ -44,3070 +47,3040 @@ description: > NetFlow version used. - - name: octet_delta_count + - name: absolute_error + type: double + + - name: address_pool_high_threshold type: long - - name: packet_delta_count + - name: address_pool_low_threshold type: long - - name: delta_flow_count + - name: address_port_mapping_high_threshold type: long - - name: protocol_identifier - type: short + - name: address_port_mapping_low_threshold + type: long - - name: ip_class_of_service - type: short + - name: address_port_mapping_per_user_high_threshold + type: long - - name: tcp_control_bits + - name: afc_protocol type: integer - - name: source_transport_port - type: integer + - name: afc_protocol_name + type: keyword - - name: source_ipv4_address - type: ip + - name: anonymization_flags + type: integer - - name: source_ipv4_prefix_length - type: short + - name: anonymization_technique + type: integer - - name: ingress_interface + - name: application_business-relevance type: long - - name: destination_transport_port - type: integer + - name: application_category_name + type: keyword - - name: destination_ipv4_address - type: ip + - name: application_description + type: keyword - - name: destination_ipv4_prefix_length - type: short + - name: application_group_name + type: keyword - - name: egress_interface - type: long + - name: application_http_uri_statistics + type: short - - name: ip_next_hop_ipv4_address - type: ip + - name: application_http_user-agent + type: short - - name: bgp_source_as_number - type: long + - name: application_id + type: short - - name: bgp_destination_as_number - type: long + - name: application_name + type: keyword - - name: bgp_next_hop_ipv4_address - type: ip + - name: application_sub_category_name + type: keyword - - name: post_mcast_packet_delta_count + - name: application_traffic-class type: long - - name: post_mcast_octet_delta_count + - name: art_client_network_time_maximum type: long - - name: flow_end_sys_up_time + - name: art_client_network_time_minimum type: long - - name: flow_start_sys_up_time + - name: art_client_network_time_sum type: long - - name: post_octet_delta_count + - name: art_clientpackets type: long - - name: post_packet_delta_count + - name: art_count_late_responses type: long - - name: minimum_ip_total_length + - name: art_count_new_connections type: long - - name: maximum_ip_total_length + - name: art_count_responses type: long - - name: source_ipv6_address - type: ip - - - name: destination_ipv6_address - type: ip - - - name: source_ipv6_prefix_length - type: short + - name: art_count_responses_histogram_bucket1 + type: long - - name: destination_ipv6_prefix_length - type: short + - name: art_count_responses_histogram_bucket2 + type: long - - name: flow_label_ipv6 + - name: art_count_responses_histogram_bucket3 type: long - - name: icmp_type_code_ipv4 - type: integer + - name: art_count_responses_histogram_bucket4 + type: long - - name: igmp_type - type: short + - name: art_count_responses_histogram_bucket5 + type: long - - name: sampling_interval + - name: art_count_responses_histogram_bucket6 type: long - - name: sampling_algorithm - type: short + - name: art_count_responses_histogram_bucket7 + type: long - - name: flow_active_timeout - type: integer + - name: art_count_retransmissions + type: long - - name: flow_idle_timeout - type: integer + - name: art_count_transactions + type: long - - name: engine_type - type: short + - name: art_network_time_maximum + type: long - - name: engine_id - type: short + - name: art_network_time_minimum + type: long - - name: exported_octet_total_count + - name: art_network_time_sum type: long - - name: exported_message_total_count + - name: art_response_time_maximum type: long - - name: exported_flow_record_total_count + - name: art_response_time_minimum type: long - - name: ipv4_router_sc - type: ip + - name: art_response_time_sum + type: long - - name: source_ipv4_prefix - type: ip + - name: art_server_network_time_maximum + type: long - - name: destination_ipv4_prefix - type: ip + - name: art_server_network_time_minimum + type: long - - name: mpls_top_label_type - type: short + - name: art_server_network_time_sum + type: long - - name: mpls_top_label_ipv4_address - type: ip + - name: art_server_response_time_maximum + type: long - - name: sampler_id - type: short + - name: art_server_response_time_minimum + type: long - - name: sampler_mode - type: short + - name: art_server_response_time_sum + type: long - - name: sampler_random_interval + - name: art_serverpackets type: long - - name: class_id + - name: art_total_response_time_maximum type: long - - name: minimum_ttl - type: short + - name: art_total_response_time_minimum + type: long - - name: maximum_ttl - type: short + - name: art_total_response_time_sum + type: long - - name: fragment_identification + - name: art_total_transaction_time_maximum type: long - - name: post_ip_class_of_service - type: short + - name: art_total_transaction_time_minimum + type: long - - name: source_mac_address - type: keyword + - name: art_total_transaction_time_sum + type: long - - name: post_destination_mac_address - type: keyword + - name: assembled_fragment_count + type: long - - name: vlan_id - type: integer + - name: audit_counter + type: long - - name: post_vlan_id - type: integer + - name: average_interarrival_time + type: long - - name: ip_version - type: short + - name: bgp_destination_as_number + type: long - - name: flow_direction - type: short + - name: bgp_next_adjacent_as_number + type: long - - name: ip_next_hop_ipv6_address + - name: bgp_next_hop_ipv4_address type: ip - name: bgp_next_hop_ipv6_address type: ip - - name: ipv6_extension_headers + - name: bgp_prev_adjacent_as_number type: long - - name: mpls_top_label_stack_section - type: short + - name: bgp_source_as_number + type: long - - name: mpls_label_stack_section2 + - name: bgp_validity_state type: short - - name: mpls_label_stack_section3 + - name: biflow_direction type: short - - name: mpls_label_stack_section4 - type: short + - name: bind_ipv4_address + type: ip - - name: mpls_label_stack_section5 - type: short + - name: bind_transport_port + type: integer - - name: mpls_label_stack_section6 - type: short + - name: class_id + type: long - - name: mpls_label_stack_section7 - type: short + - name: class_name + type: keyword - - name: mpls_label_stack_section8 + - name: classification_engine_id type: short - - name: mpls_label_stack_section9 - type: short + - name: collection_time_milliseconds + type: date - - name: mpls_label_stack_section10 + - name: collector_certificate type: short - - name: destination_mac_address - type: keyword + - name: collector_ipv4_address + type: ip - - name: post_source_mac_address - type: keyword + - name: collector_ipv6_address + type: ip - - name: interface_name - type: keyword + - name: collector_transport_port + type: integer - - name: interface_description - type: keyword + - name: common_properties_id + type: long - - name: sampler_name - type: keyword + - name: confidence_level + type: double - - name: octet_total_count + - name: conn_ipv4_address + type: ip + + - name: conn_transport_port + type: integer + + - name: connection_sum_duration_seconds type: long - - name: packet_total_count + - name: connection_transaction_id type: long - - name: flags_and_sampler_id + - name: conntrack_id type: long - - name: fragment_offset - type: integer + - name: data_byte_count + type: long - - name: forwarding_status + - name: data_link_frame_section type: short - - name: mpls_vpn_route_distinguisher - type: short + - name: data_link_frame_size + type: integer - - name: mpls_top_label_prefix_length - type: short + - name: data_link_frame_type + type: integer - - name: src_traffic_index - type: long + - name: data_records_reliability + type: boolean - - name: dst_traffic_index + - name: delta_flow_count type: long - - name: application_description - type: keyword - - - name: application_id - type: short + - name: destination_ipv4_address + type: ip - - name: application_name - type: keyword + - name: destination_ipv4_prefix + type: ip - - name: post_ip_diff_serv_code_point + - name: destination_ipv4_prefix_length type: short - - name: multicast_replication_factor - type: long + - name: destination_ipv6_address + type: ip - - name: class_name - type: keyword + - name: destination_ipv6_prefix + type: ip - - name: classification_engine_id + - name: destination_ipv6_prefix_length type: short - - name: layer2packet_section_offset - type: integer + - name: destination_mac_address + type: keyword - - name: layer2packet_section_size + - name: destination_transport_port type: integer - - name: layer2packet_section_data - type: short - - - name: bgp_next_adjacent_as_number + - name: digest_hash_value type: long - - name: bgp_prev_adjacent_as_number + - name: distinct_count_of_destination_ip_address type: long - - name: exporter_ipv4_address - type: ip - - - name: exporter_ipv6_address - type: ip + - name: distinct_count_of_destination_ipv4_address + type: long - - name: dropped_octet_delta_count + - name: distinct_count_of_destination_ipv6_address type: long - - name: dropped_packet_delta_count + - name: distinct_count_of_source_ip_address type: long - - name: dropped_octet_total_count + - name: distinct_count_of_source_ipv4_address type: long - - name: dropped_packet_total_count + - name: distinct_count_of_source_ipv6_address type: long - - name: flow_end_reason + - name: dns_authoritative type: short - - name: common_properties_id - type: long + - name: dns_cname + type: keyword - - name: observation_point_id - type: long + - name: dns_id + type: integer - - name: icmp_type_code_ipv6 + - name: dns_mx_exchange + type: keyword + + - name: dns_mx_preference type: integer - - name: mpls_top_label_ipv6_address - type: ip + - name: dns_nsd_name + type: keyword - - name: line_card_id + - name: dns_nx_domain + type: short + + - name: dns_ptrd_name + type: keyword + + - name: dns_qname + type: keyword + + - name: dns_qr_type + type: integer + + - name: dns_query_response + type: short + + - name: dns_rr_section + type: short + + - name: dns_soa_expire type: long - - name: port_id + - name: dns_soa_minimum type: long - - name: metering_process_id + - name: dns_soa_refresh type: long - - name: exporting_process_id + - name: dns_soa_retry type: long - - name: template_id - type: integer + - name: dns_soa_serial + type: long - - name: wlan_channel_id - type: short + - name: dns_soam_name + type: keyword - - name: wlan_ssid + - name: dns_soar_name type: keyword - - name: flow_id - type: long + - name: dns_srv_port + type: integer - - name: observation_domain_id + - name: dns_srv_priority + type: integer + + - name: dns_srv_target + type: integer + + - name: dns_srv_weight + type: integer + + - name: dns_ttl type: long - - name: flow_start_seconds - type: date + - name: dns_txt_data + type: keyword - - name: flow_end_seconds - type: date + - name: dot1q_customer_dei + type: boolean - - name: flow_start_milliseconds - type: date + - name: dot1q_customer_destination_mac_address + type: keyword - - name: flow_end_milliseconds - type: date + - name: dot1q_customer_priority + type: short - - name: flow_start_microseconds - type: date + - name: dot1q_customer_source_mac_address + type: keyword - - name: flow_end_microseconds - type: date + - name: dot1q_customer_vlan_id + type: integer - - name: flow_start_nanoseconds - type: date + - name: dot1q_dei + type: boolean - - name: flow_end_nanoseconds - type: date + - name: dot1q_priority + type: short - - name: flow_start_delta_microseconds + - name: dot1q_service_instance_id type: long - - name: flow_end_delta_microseconds - type: long + - name: dot1q_service_instance_priority + type: short - - name: system_init_time_milliseconds - type: date + - name: dot1q_service_instance_tag + type: short - - name: flow_duration_milliseconds - type: long + - name: dot1q_vlan_id + type: integer - - name: flow_duration_microseconds + - name: dropped_layer2_octet_delta_count type: long - - name: observed_flow_total_count + - name: dropped_layer2_octet_total_count type: long - - name: ignored_packet_total_count + - name: dropped_octet_delta_count type: long - - name: ignored_octet_total_count + - name: dropped_octet_total_count type: long - - name: not_sent_flow_total_count + - name: dropped_packet_delta_count type: long - - name: not_sent_packet_total_count + - name: dropped_packet_total_count type: long - - name: not_sent_octet_total_count + - name: dst_traffic_index type: long - - name: destination_ipv6_prefix - type: ip - - - name: source_ipv6_prefix - type: ip + - name: egress_broadcast_packet_total_count + type: long - - name: post_octet_total_count + - name: egress_interface type: long - - name: post_packet_total_count + - name: egress_interface_type type: long - - name: flow_key_indicator + - name: egress_physical_interface type: long - - name: post_mcast_packet_total_count + - name: egress_unicast_packet_total_count type: long - - name: post_mcast_octet_total_count + - name: egress_vrfid type: long - - name: icmp_type_ipv4 - type: short + - name: encrypted_technology + type: keyword - - name: icmp_code_ipv4 + - name: engine_id type: short - - name: icmp_type_ipv6 + - name: engine_type type: short - - name: icmp_code_ipv6 + - name: ethernet_header_length type: short - - name: udp_source_port - type: integer - - - name: udp_destination_port + - name: ethernet_payload_length type: integer - - name: tcp_source_port + - name: ethernet_total_length type: integer - - name: tcp_destination_port + - name: ethernet_type type: integer - - name: tcp_sequence_number + - name: expired_fragment_count type: long - - name: tcp_acknowledgement_number + - name: export_interface type: long - - name: tcp_window_size - type: integer - - - name: tcp_urgent_pointer - type: integer - - - name: tcp_header_length - type: short - - - name: ip_header_length + - name: export_protocol_version type: short - - name: total_length_ipv4 - type: integer - - - name: payload_length_ipv6 + - name: export_sctp_stream_id type: integer - - name: ip_ttl + - name: export_transport_protocol type: short - - name: next_header_ipv6 - type: short + - name: exported_flow_record_total_count + type: long - - name: mpls_payload_length + - name: exported_message_total_count type: long - - name: ip_diff_serv_code_point - type: short + - name: exported_octet_total_count + type: long - - name: ip_precedence + - name: exporter_certificate type: short - - name: fragment_flags - type: short + - name: exporter_ipv4_address + type: ip - - name: octet_delta_sum_of_squares - type: long + - name: exporter_ipv6_address + type: ip - - name: octet_total_sum_of_squares + - name: exporter_transport_port + type: integer + + - name: exporting_process_id type: long - - name: mpls_top_label_ttl + - name: external_address_realm type: short - - name: mpls_label_stack_length - type: long - - - name: mpls_label_stack_depth - type: long + - name: firewall_event + type: short - - name: mpls_top_label_exp + - name: first_eight_non_empty_packet_directions type: short - - name: ip_payload_length + - name: first_non_empty_packet_size + type: integer + + - name: first_packet_banner + type: keyword + + - name: flags_and_sampler_id type: long - - name: udp_message_length + - name: flow_active_timeout type: integer - - name: is_multicast - type: short + - name: flow_attributes + type: integer - - name: ipv4_ihl + - name: flow_direction type: short - - name: ipv4_options + - name: flow_duration_microseconds type: long - - name: tcp_options + - name: flow_duration_milliseconds type: long - - name: padding_octets - type: short + - name: flow_end_delta_microseconds + type: long - - name: collector_ipv4_address - type: ip + - name: flow_end_microseconds + type: date - - name: collector_ipv6_address - type: ip + - name: flow_end_milliseconds + type: date - - name: export_interface - type: long + - name: flow_end_nanoseconds + type: date - - name: export_protocol_version + - name: flow_end_reason type: short - - name: export_transport_protocol - type: short + - name: flow_end_seconds + type: date - - name: collector_transport_port - type: integer + - name: flow_end_sys_up_time + type: long - - name: exporter_transport_port + - name: flow_id + type: long + + - name: flow_idle_timeout type: integer - - name: tcp_syn_total_count + - name: flow_key_indicator type: long - - name: tcp_fin_total_count + - name: flow_label_ipv6 type: long - - name: tcp_rst_total_count + - name: flow_sampling_time_interval type: long - - name: tcp_psh_total_count + - name: flow_sampling_time_spacing type: long - - name: tcp_ack_total_count + - name: flow_selected_flow_delta_count type: long - - name: tcp_urg_total_count + - name: flow_selected_octet_delta_count type: long - - name: ip_total_length + - name: flow_selected_packet_delta_count type: long - - name: post_nat_source_ipv4_address - type: ip - - - name: post_nat_destination_ipv4_address - type: ip - - - name: post_napt_source_transport_port - type: integer - - - name: post_napt_destination_transport_port + - name: flow_selector_algorithm type: integer - - name: nat_originating_address_realm - type: short + - name: flow_start_delta_microseconds + type: long - - name: nat_event - type: short + - name: flow_start_microseconds + type: date - - name: initiator_octets - type: long + - name: flow_start_milliseconds + type: date - - name: responder_octets - type: long + - name: flow_start_nanoseconds + type: date - - name: firewall_event - type: short + - name: flow_start_seconds + type: date - - name: ingress_vrfid + - name: flow_start_sys_up_time type: long - - name: egress_vrfid + - name: flow_table_flush_event_count type: long - - name: vr_fname - type: keyword + - name: flow_table_peak_count + type: long - - name: post_mpls_top_label_exp + - name: forwarding_status type: short - - name: tcp_window_scale - type: integer - - - name: biflow_direction + - name: fragment_flags type: short - - name: ethernet_header_length - type: short + - name: fragment_identification + type: long - - name: ethernet_payload_length + - name: fragment_offset type: integer - - name: ethernet_total_length - type: integer + - name: fw_blackout_secs + type: long - - name: dot1q_vlan_id - type: integer + - name: fw_configured_value + type: long - - name: dot1q_priority - type: short + - name: fw_cts_src_sgt + type: long - - name: dot1q_customer_vlan_id + - name: fw_event_level + type: long + + - name: fw_event_level_id + type: long + + - name: fw_ext_event type: integer - - name: dot1q_customer_priority - type: short + - name: fw_ext_event_alt + type: long - - name: metro_evc_id + - name: fw_ext_event_desc type: keyword - - name: metro_evc_type - type: short - - - name: pseudo_wire_id + - name: fw_half_open_count type: long - - name: pseudo_wire_type - type: integer + - name: fw_half_open_high + type: long - - name: pseudo_wire_control_word + - name: fw_half_open_rate type: long - - name: ingress_physical_interface + - name: fw_max_sessions type: long - - name: egress_physical_interface + - name: fw_rule + type: keyword + + - name: fw_summary_pkt_count type: long - - name: post_dot1q_vlan_id - type: integer + - name: fw_zone_pair_id + type: long - - name: post_dot1q_customer_vlan_id - type: integer + - name: fw_zone_pair_name + type: long - - name: ethernet_type - type: integer + - name: global_address_mapping_high_threshold + type: long - - name: post_ip_precedence - type: short + - name: gre_key + type: long - - name: collection_time_milliseconds - type: date + - name: hash_digest_output + type: boolean - - name: export_sctp_stream_id + - name: hash_flow_domain type: integer - - name: max_export_seconds - type: date - - - name: max_flow_end_seconds - type: date + - name: hash_initialiser_value + type: long - - name: message_md5_checksum - type: short + - name: hash_ip_payload_offset + type: long - - name: message_scope - type: short + - name: hash_ip_payload_size + type: long - - name: min_export_seconds - type: date + - name: hash_output_range_max + type: long - - name: min_flow_start_seconds - type: date + - name: hash_output_range_min + type: long - - name: opaque_octets - type: short + - name: hash_selected_range_max + type: long - - name: session_scope - type: short + - name: hash_selected_range_min + type: long - - name: max_flow_end_microseconds - type: date + - name: http_content_type + type: keyword - - name: max_flow_end_milliseconds - type: date + - name: http_message_version + type: keyword - - name: max_flow_end_nanoseconds - type: date + - name: http_reason_phrase + type: keyword - - name: min_flow_start_microseconds - type: date + - name: http_request_host + type: keyword - - name: min_flow_start_milliseconds - type: date + - name: http_request_method + type: keyword - - name: min_flow_start_nanoseconds - type: date + - name: http_request_target + type: keyword - - name: collector_certificate + - name: http_status_code + type: integer + + - name: http_user_agent + type: keyword + + - name: icmp_code_ipv4 type: short - - name: exporter_certificate + - name: icmp_code_ipv6 type: short - - name: data_records_reliability - type: boolean + - name: icmp_type_code_ipv4 + type: integer - - name: observation_point_type + - name: icmp_type_code_ipv6 + type: integer + + - name: icmp_type_ipv4 type: short - - name: new_connection_delta_count - type: long + - name: icmp_type_ipv6 + type: short - - name: connection_sum_duration_seconds + - name: igmp_type + type: short + + - name: ignored_data_record_total_count type: long - - name: connection_transaction_id + - name: ignored_layer2_frame_total_count type: long - - name: post_nat_source_ipv6_address - type: ip + - name: ignored_layer2_octet_total_count + type: long - - name: post_nat_destination_ipv6_address - type: ip + - name: ignored_octet_total_count + type: long - - name: nat_pool_id + - name: ignored_packet_total_count type: long - - name: nat_pool_name - type: keyword + - name: information_element_data_type + type: short - - name: anonymization_flags - type: integer + - name: information_element_description + type: keyword - - name: anonymization_technique + - name: information_element_id type: integer - name: information_element_index type: integer - - name: p2p_technology - type: keyword - - - name: tunnel_technology - type: keyword - - - name: encrypted_technology + - name: information_element_name type: keyword - - name: bgp_validity_state - type: short - - - name: ip_sec_spi + - name: information_element_range_begin type: long - - name: gre_key + - name: information_element_range_end type: long - - name: nat_type + - name: information_element_semantics type: short - - name: initiator_packets - type: long + - name: information_element_units + type: integer - - name: responder_packets + - name: ingress_broadcast_packet_total_count type: long - - name: observation_domain_name - type: keyword - - - name: selection_sequence_id + - name: ingress_interface type: long - - name: selector_id + - name: ingress_interface_type type: long - - name: information_element_id - type: integer - - - name: selector_algorithm - type: integer - - - name: sampling_packet_interval + - name: ingress_multicast_packet_total_count type: long - - name: sampling_packet_space + - name: ingress_physical_interface type: long - - name: sampling_time_interval + - name: ingress_unicast_packet_total_count type: long - - name: sampling_time_space + - name: ingress_vrfid type: long - - name: sampling_size + - name: initial_tcp_flags + type: short + + - name: initiator_octets type: long - - name: sampling_population + - name: initiator_packets type: long - - name: sampling_probability - type: double + - name: interface_description + type: keyword - - name: data_link_frame_size - type: integer + - name: interface_name + type: keyword - - name: ip_header_packet_section - type: short + - name: intermediate_process_id + type: long - - name: ip_payload_packet_section + - name: internal_address_realm type: short - - name: data_link_frame_section + - name: ip_class_of_service type: short - - name: mpls_label_stack_section + - name: ip_diff_serv_code_point type: short - - name: mpls_payload_packet_section + - name: ip_header_length type: short - - name: selector_id_total_pkts_observed - type: long - - - name: selector_id_total_pkts_selected - type: long - - - name: absolute_error - type: double + - name: ip_header_packet_section + type: short - - name: relative_error - type: double + - name: ip_next_hop_ipv4_address + type: ip - - name: observation_time_seconds - type: date + - name: ip_next_hop_ipv6_address + type: ip - - name: observation_time_milliseconds - type: date + - name: ip_payload_length + type: long - - name: observation_time_microseconds - type: date + - name: ip_payload_packet_section + type: short - - name: observation_time_nanoseconds - type: date + - name: ip_precedence + type: short - - name: digest_hash_value + - name: ip_sec_spi type: long - - name: hash_ip_payload_offset + - name: ip_total_length type: long - - name: hash_ip_payload_size - type: long + - name: ip_ttl + type: short - - name: hash_output_range_min - type: long + - name: ip_version + type: short - - name: hash_output_range_max - type: long + - name: ipv4_ihl + type: short - - name: hash_selected_range_min + - name: ipv4_options type: long - - name: hash_selected_range_max + - name: ipv4_router_sc + type: ip + + - name: ipv6_extension_headers type: long - - name: hash_digest_output - type: boolean + - name: is_multicast + type: short - - name: hash_initialiser_value - type: long + - name: ixia_browser_id + type: short - - name: selector_name + - name: ixia_browser_name type: keyword - - name: upper_ci_limit - type: double + - name: ixia_device_id + type: short - - name: lower_ci_limit - type: double + - name: ixia_device_name + type: keyword - - name: confidence_level - type: double + - name: ixia_dns_answer + type: keyword - - name: information_element_data_type - type: short + - name: ixia_dns_classes + type: keyword - - name: information_element_description + - name: ixia_dns_query type: keyword - - name: information_element_name + - name: ixia_dns_record_txt type: keyword - - name: information_element_range_begin - type: long + - name: ixia_dst_as_name + type: keyword - - name: information_element_range_end - type: long + - name: ixia_dst_city_name + type: keyword - - name: information_element_semantics - type: short + - name: ixia_dst_country_code + type: keyword - - name: information_element_units - type: integer + - name: ixia_dst_country_name + type: keyword - - name: private_enterprise_number - type: long + - name: ixia_dst_latitude + type: float - - name: virtual_station_interface_id - type: short + - name: ixia_dst_longitude + type: float - - name: virtual_station_interface_name + - name: ixia_dst_region_code type: keyword - - name: virtual_station_uuid - type: short - - - name: virtual_station_name + - name: ixia_dst_region_node type: keyword - - name: layer2_segment_id - type: long + - name: ixia_encrypt_cipher + type: keyword - - name: layer2_octet_delta_count - type: long + - name: ixia_encrypt_key_length + type: integer - - name: layer2_octet_total_count - type: long + - name: ixia_encrypt_type + type: keyword - - name: ingress_unicast_packet_total_count - type: long + - name: ixia_http_host_name + type: keyword - - name: ingress_multicast_packet_total_count - type: long + - name: ixia_http_uri + type: keyword - - name: ingress_broadcast_packet_total_count - type: long + - name: ixia_http_user_agent + type: keyword - - name: egress_unicast_packet_total_count - type: long + - name: ixia_imsi_subscriber + type: keyword - - name: egress_broadcast_packet_total_count + - name: ixia_l7_app_id type: long - - name: monitoring_interval_start_milli_seconds - type: date - - - name: monitoring_interval_end_milli_seconds - type: date - - - name: port_range_start - type: integer + - name: ixia_l7_app_name + type: keyword - - name: port_range_end - type: integer + - name: ixia_latency + type: long - - name: port_range_step_size - type: integer + - name: ixia_rev_octet_delta_count + type: long - - name: port_range_num_ports - type: integer + - name: ixia_rev_packet_delta_count + type: long - - name: sta_mac_address + - name: ixia_src_as_name type: keyword - - name: sta_ipv4_address - type: ip + - name: ixia_src_city_name + type: keyword - - name: wtp_mac_address + - name: ixia_src_country_code type: keyword - - name: ingress_interface_type - type: long + - name: ixia_src_country_name + type: keyword - - name: egress_interface_type - type: long + - name: ixia_src_latitude + type: float - - name: rtp_sequence_number - type: integer + - name: ixia_src_longitude + type: float - - name: user_name + - name: ixia_src_region_code type: keyword - - name: application_category_name + - name: ixia_src_region_name type: keyword - - name: application_sub_category_name - type: keyword + - name: ixia_threat_ipv4 + type: ip - - name: application_group_name - type: keyword + - name: ixia_threat_ipv6 + type: ip - - name: original_flows_present - type: long + - name: ixia_threat_type + type: keyword - - name: original_flows_initiated + - name: large_packet_count type: long - - name: original_flows_completed + - name: layer2_frame_delta_count type: long - - name: distinct_count_of_source_ip_address + - name: layer2_frame_total_count type: long - - name: distinct_count_of_destination_ip_address + - name: layer2_octet_delta_count type: long - - name: distinct_count_of_source_ipv4_address + - name: layer2_octet_delta_sum_of_squares type: long - - name: distinct_count_of_destination_ipv4_address + - name: layer2_octet_total_count type: long - - name: distinct_count_of_source_ipv6_address + - name: layer2_octet_total_sum_of_squares type: long - - name: distinct_count_of_destination_ipv6_address + - name: layer2_segment_id type: long - - name: value_distribution_method + - name: layer2packet_section_data type: short - - name: rfc3550_jitter_milliseconds - type: long + - name: layer2packet_section_offset + type: integer - - name: rfc3550_jitter_microseconds - type: long + - name: layer2packet_section_size + type: integer - - name: rfc3550_jitter_nanoseconds + - name: line_card_id type: long - - name: dot1q_dei - type: boolean - - - name: dot1q_customer_dei - type: boolean + - name: log_op + type: short - - name: flow_selector_algorithm - type: integer + - name: lower_ci_limit + type: double - - name: flow_selected_octet_delta_count + - name: mark type: long - - name: flow_selected_packet_delta_count + - name: max_bib_entries type: long - - name: flow_selected_flow_delta_count + - name: max_entries_per_user type: long - - name: selector_id_total_flows_observed - type: long + - name: max_export_seconds + type: date - - name: selector_id_total_flows_selected - type: long + - name: max_flow_end_microseconds + type: date - - name: sampling_flow_interval - type: long + - name: max_flow_end_milliseconds + type: date - - name: sampling_flow_spacing - type: long + - name: max_flow_end_nanoseconds + type: date - - name: flow_sampling_time_interval - type: long + - name: max_flow_end_seconds + type: date - - name: flow_sampling_time_spacing + - name: max_fragments_pending_reassembly type: long - - name: hash_flow_domain + - name: max_packet_size type: integer - - name: transport_octet_delta_count + - name: max_session_entries type: long - - name: transport_packet_delta_count + - name: max_subscribers type: long - - name: original_exporter_ipv4_address - type: ip + - name: maximum_ip_total_length + type: long - - name: original_exporter_ipv6_address - type: ip + - name: maximum_layer2_total_length + type: long - - name: original_observation_domain_id + - name: maximum_ttl + type: short + + - name: mean_flow_rate type: long - - name: intermediate_process_id + - name: mean_packet_rate type: long - - name: ignored_data_record_total_count + - name: message_md5_checksum + type: short + + - name: message_scope + type: short + + - name: metering_process_id type: long - - name: data_link_frame_type - type: integer + - name: metro_evc_id + type: keyword - - name: section_offset - type: integer + - name: metro_evc_type + type: short - - name: section_exported_octets - type: integer + - name: mib_capture_time_semantics + type: short - - name: dot1q_service_instance_tag + - name: mib_context_engine_id type: short - - name: dot1q_service_instance_id + - name: mib_context_name + type: keyword + + - name: mib_index_indicator type: long - - name: dot1q_service_instance_priority + - name: mib_module_name + type: keyword + + - name: mib_object_description + type: keyword + + - name: mib_object_identifier type: short - - name: dot1q_customer_source_mac_address + - name: mib_object_name type: keyword - - name: dot1q_customer_destination_mac_address + - name: mib_object_syntax type: keyword - - name: post_layer2_octet_delta_count - type: long + - name: mib_object_value_bits + type: short - - name: post_mcast_layer2_octet_delta_count + - name: mib_object_value_counter type: long - - name: post_layer2_octet_total_count + - name: mib_object_value_gauge type: long - - name: post_mcast_layer2_octet_total_count - type: long + - name: mib_object_value_integer + type: integer - - name: minimum_layer2_total_length - type: long + - name: mib_object_value_ip_address + type: ip - - name: maximum_layer2_total_length - type: long + - name: mib_object_value_octet_string + type: short - - name: dropped_layer2_octet_delta_count - type: long + - name: mib_object_value_oid + type: short - - name: dropped_layer2_octet_total_count + - name: mib_object_value_time_ticks type: long - - name: ignored_layer2_octet_total_count + - name: mib_object_value_unsigned type: long - - name: not_sent_layer2_octet_total_count + - name: mib_sub_identifier type: long - - name: layer2_octet_delta_sum_of_squares - type: long + - name: min_export_seconds + type: date - - name: layer2_octet_total_sum_of_squares - type: long + - name: min_flow_start_microseconds + type: date - - name: layer2_frame_delta_count + - name: min_flow_start_milliseconds + type: date + + - name: min_flow_start_nanoseconds + type: date + + - name: min_flow_start_seconds + type: date + + - name: minimum_ip_total_length type: long - - name: layer2_frame_total_count + - name: minimum_layer2_total_length type: long - - name: pseudo_wire_destination_ipv4_address - type: ip + - name: minimum_ttl + type: short - - name: ignored_layer2_frame_total_count + - name: mobile_imsi + type: keyword + + - name: mobile_msisdn + type: keyword + + - name: monitoring_interval_end_milli_seconds + type: date + + - name: monitoring_interval_start_milli_seconds + type: date + + - name: mpls_label_stack_depth type: long - - name: mib_object_value_integer - type: integer + - name: mpls_label_stack_length + type: long - - name: mib_object_value_octet_string + - name: mpls_label_stack_section type: short - - name: mib_object_value_oid + - name: mpls_label_stack_section10 type: short - - name: mib_object_value_bits + - name: mpls_label_stack_section2 type: short - - name: mib_object_value_ip_address - type: ip + - name: mpls_label_stack_section3 + type: short - - name: mib_object_value_counter - type: long + - name: mpls_label_stack_section4 + type: short - - name: mib_object_value_gauge - type: long + - name: mpls_label_stack_section5 + type: short - - name: mib_object_value_time_ticks - type: long + - name: mpls_label_stack_section6 + type: short - - name: mib_object_value_unsigned - type: long + - name: mpls_label_stack_section7 + type: short - - name: mib_object_identifier + - name: mpls_label_stack_section8 type: short - - name: mib_sub_identifier - type: long + - name: mpls_label_stack_section9 + type: short - - name: mib_index_indicator + - name: mpls_payload_length type: long - - name: mib_capture_time_semantics + - name: mpls_payload_packet_section type: short - - name: mib_context_engine_id + - name: mpls_top_label_exp type: short - - name: mib_context_name - type: keyword + - name: mpls_top_label_ipv4_address + type: ip - - name: mib_object_name - type: keyword + - name: mpls_top_label_ipv6_address + type: ip - - name: mib_object_description - type: keyword + - name: mpls_top_label_prefix_length + type: short - - name: mib_object_syntax - type: keyword + - name: mpls_top_label_stack_section + type: short - - name: mib_module_name - type: keyword + - name: mpls_top_label_ttl + type: short - - name: mobile_imsi - type: keyword + - name: mpls_top_label_type + type: short - - name: mobile_msisdn - type: keyword + - name: mpls_vpn_route_distinguisher + type: short - - name: http_status_code - type: integer + - name: mptcp_address_id + type: short - - name: source_transport_ports_limit + - name: mptcp_flags + type: short + + - name: mptcp_initial_data_sequence_number + type: long + + - name: mptcp_maximum_segment_size type: integer - - name: http_request_method - type: keyword + - name: mptcp_receiver_token + type: long - - name: http_request_host - type: keyword + - name: multicast_replication_factor + type: long - - name: http_request_target - type: keyword + - name: nat_event + type: short - - name: http_message_version - type: keyword + - name: nat_inside_svcid + type: integer - name: nat_instance_id type: long - - name: internal_address_realm + - name: nat_originating_address_realm type: short - - name: external_address_realm - type: short + - name: nat_outside_svcid + type: integer + + - name: nat_pool_id + type: long + + - name: nat_pool_name + type: keyword - name: nat_quota_exceeded_event type: long + - name: nat_sub_string + type: keyword + - name: nat_threshold_event type: long - - name: http_user_agent + - name: nat_type + type: short + + - name: netscale_ica_client_version type: keyword - - name: http_content_type + - name: netscaler_aaa_username type: keyword - - name: http_reason_phrase + - name: netscaler_app_name type: keyword - - name: max_session_entries + - name: netscaler_app_name_app_id type: long - - name: max_bib_entries + - name: netscaler_app_name_incarnation_number type: long - - name: max_entries_per_user + - name: netscaler_app_template_name + type: keyword + + - name: netscaler_app_unit_name_app_id type: long - - name: max_subscribers + - name: netscaler_application_startup_duration type: long - - name: max_fragments_pending_reassembly + - name: netscaler_application_startup_time type: long - - name: address_pool_high_threshold + - name: netscaler_cache_redir_client_connection_core_id type: long - - name: address_pool_low_threshold + - name: netscaler_cache_redir_client_connection_transaction_id type: long - - name: address_port_mapping_high_threshold + - name: netscaler_client_rtt type: long - - name: address_port_mapping_low_threshold + - name: netscaler_connection_chain_hop_count type: long - - name: address_port_mapping_per_user_high_threshold + - name: netscaler_connection_chain_id + type: short + + - name: netscaler_connection_id type: long - - name: global_address_mapping_high_threshold + - name: netscaler_current_license_consumed type: long - - name: vpn_identifier - type: short + - name: netscaler_db_clt_host_name + type: keyword - - name: initial_tcp_flags - type: short + - name: netscaler_db_database_name + type: keyword - - name: union_tcp_flags + - name: netscaler_db_login_flags + type: long + + - name: netscaler_db_protocol_name type: short - - name: payload + - name: netscaler_db_req_string type: keyword - - name: reverse_flow_delta_milliseconds + - name: netscaler_db_req_type + type: short + + - name: netscaler_db_resp_length type: long - - name: silk_app_label - type: integer + - name: netscaler_db_resp_status + type: long - - name: payload_entropy - type: short + - name: netscaler_db_resp_status_string + type: keyword - - name: os_name + - name: netscaler_db_user_name type: keyword - - name: os_version + - name: netscaler_flow_flags + type: long + + - name: netscaler_http_client_interaction_end_time type: keyword - - name: first_packet_banner + - name: netscaler_http_client_interaction_start_time type: keyword - - name: second_packet_banner + - name: netscaler_http_client_render_end_time type: keyword - - name: flow_attributes - type: integer + - name: netscaler_http_client_render_start_time + type: keyword - - name: expired_fragment_count - type: long + - name: netscaler_http_content_type + type: keyword - - name: assembled_fragment_count - type: long + - name: netscaler_http_domain_name + type: keyword - - name: mean_flow_rate - type: long + - name: netscaler_http_req_authorization + type: keyword - - name: mean_packet_rate - type: long + - name: netscaler_http_req_cookie + type: keyword - - name: flow_table_flush_event_count + - name: netscaler_http_req_forw_fb type: long - - name: flow_table_peak_count + - name: netscaler_http_req_forw_lb type: long - - name: os_finger_print - type: keyword - - - name: tftp_filename + - name: netscaler_http_req_host type: keyword - - name: tftp_mode + - name: netscaler_http_req_method type: keyword - - name: dns_query_response - type: short + - name: netscaler_http_req_rcv_fb + type: long - - name: dns_qr_type - type: integer + - name: netscaler_http_req_rcv_lb + type: long - - name: dns_authoritative - type: short + - name: netscaler_http_req_referer + type: keyword - - name: dns_nx_domain - type: short + - name: netscaler_http_req_url + type: keyword - - name: dns_rr_section - type: short + - name: netscaler_http_req_user_agent + type: keyword - - name: dns_qname + - name: netscaler_http_req_via type: keyword - - name: dns_cname + - name: netscaler_http_req_xforwarded_for type: keyword - - name: dns_mx_preference - type: integer + - name: netscaler_http_res_forw_fb + type: long - - name: dns_mx_exchange + - name: netscaler_http_res_forw_lb + type: long + + - name: netscaler_http_res_location type: keyword - - name: dns_nsd_name + - name: netscaler_http_res_rcv_fb + type: long + + - name: netscaler_http_res_rcv_lb + type: long + + - name: netscaler_http_res_set_cookie type: keyword - - name: dns_ptrd_name + - name: netscaler_http_res_set_cookie2 type: keyword - - name: ssl_cipher + - name: netscaler_http_rsp_len + type: long + + - name: netscaler_http_rsp_status + type: integer + + - name: netscaler_ica_app_module_path type: keyword - - name: ssl_client_version - type: short + - name: netscaler_ica_app_process_id + type: long - - name: ssl_server_cipher + - name: netscaler_ica_application_name + type: keyword + + - name: netscaler_ica_application_termination_time type: long - - name: ssl_compression_method - type: short + - name: netscaler_ica_application_termination_type + type: integer - - name: ssl_cert_version - type: short + - name: netscaler_ica_channel_id1 + type: long - - name: ssl_cert_signature - type: keyword + - name: netscaler_ica_channel_id1_bytes + type: long - - name: dns_ttl + - name: netscaler_ica_channel_id2 type: long - - name: dns_txt_data - type: keyword + - name: netscaler_ica_channel_id2_bytes + type: long - - name: dns_soa_serial + - name: netscaler_ica_channel_id3 type: long - - name: dns_soa_refresh + - name: netscaler_ica_channel_id3_bytes type: long - - name: dns_soa_retry + - name: netscaler_ica_channel_id4 type: long - - name: dns_soa_expire + - name: netscaler_ica_channel_id4_bytes type: long - - name: dns_soa_minimum + - name: netscaler_ica_channel_id5 type: long - - name: dns_soam_name - type: keyword + - name: netscaler_ica_channel_id5_bytes + type: long - - name: dns_soar_name + - name: netscaler_ica_client_host_name type: keyword - - name: dns_srv_priority + - name: netscaler_ica_client_ip + type: ip + + - name: netscaler_ica_client_launcher type: integer - - name: dns_srv_weight + - name: netscaler_ica_client_side_rto_count type: integer - - name: dns_srv_port + - name: netscaler_ica_client_side_window_size type: integer - - name: dns_srv_target + - name: netscaler_ica_client_type type: integer - - name: tcp_urg_total_count + - name: netscaler_ica_clientside_delay type: long - - name: dns_id + - name: netscaler_ica_clientside_jitter + type: long + + - name: netscaler_ica_clientside_packets_retransmit type: integer - - name: ssl_cert_serial_number - type: keyword + - name: netscaler_ica_clientside_rtt + type: long - - name: ssl_object_type - type: keyword + - name: netscaler_ica_clientside_rx_bytes + type: long - - name: ssl_object_value - type: keyword + - name: netscaler_ica_clientside_srtt + type: long - - name: ssl_cert_validity_not_before - type: keyword + - name: netscaler_ica_clientside_tx_bytes + type: long - - name: ssl_cert_validity_not_after - type: keyword + - name: netscaler_ica_connection_priority + type: integer - - name: ssl_public_key_algorithm - type: keyword + - name: netscaler_ica_device_serial_no + type: long - - name: ssl_public_key_length + - name: netscaler_ica_domain_name type: keyword - - name: rtp_payload_type - type: short + - name: netscaler_ica_flags + type: long - - name: reverse_rtp_payload_type - type: short + - name: netscaler_ica_host_delay + type: long - - name: mptcp_initial_data_sequence_number + - name: netscaler_ica_l7_client_latency type: long - - name: mptcp_receiver_token + - name: netscaler_ica_l7_server_latency type: long - - name: mptcp_maximum_segment_size + - name: netscaler_ica_launch_mechanism type: integer - - name: mptcp_address_id - type: short + - name: netscaler_ica_network_update_end_time + type: long - - name: mptcp_flags - type: short + - name: netscaler_ica_network_update_start_time + type: long - - name: ssl_server_name - type: keyword + - name: netscaler_ica_rtt + type: long - - name: ssl_certificate_hash + - name: netscaler_ica_server_name type: keyword - - name: small_packet_count - type: long + - name: netscaler_ica_server_side_rto_count + type: integer - - name: non_empty_packet_count - type: long + - name: netscaler_ica_server_side_window_size + type: integer - - name: data_byte_count + - name: netscaler_ica_serverside_delay type: long - - name: average_interarrival_time + - name: netscaler_ica_serverside_jitter type: long - - name: standard_deviation_interarrival_time + - name: netscaler_ica_serverside_packets_retransmit + type: integer + + - name: netscaler_ica_serverside_rtt type: long - - name: first_non_empty_packet_size - type: integer + - name: netscaler_ica_serverside_srtt + type: long - - name: max_packet_size - type: integer + - name: netscaler_ica_session_end_time + type: long - - name: first_eight_non_empty_packet_directions + - name: netscaler_ica_session_guid type: short - - name: standard_deviation_payload_length + - name: netscaler_ica_session_reconnects type: short - - name: large_packet_count + - name: netscaler_ica_session_setup_time type: long - - name: reverse_initial_tcp_flags - type: short + - name: netscaler_ica_session_update_begin_sec + type: long - - name: reverse_union_tcp_flags - type: short + - name: netscaler_ica_session_update_end_sec + type: long - - name: reverse_payload + - name: netscaler_ica_username type: keyword - - name: reverse_payload_entropy + - name: netscaler_license_type type: short - - name: reverse_os_name - type: keyword + - name: netscaler_main_page_core_id + type: long - - name: reverse_os_version - type: keyword + - name: netscaler_main_page_id + type: long - - name: reverse_first_packet_banner - type: keyword + - name: netscaler_max_license_count + type: long - - name: reverse_second_packet_banner - type: keyword + - name: netscaler_msi_client_cookie + type: short - - name: reverse_flow_attributes - type: integer + - name: netscaler_round_trip_time + type: long - - name: reverse_os_finger_print + - name: netscaler_server_ttfb + type: long + + - name: netscaler_server_ttlb + type: long + + - name: netscaler_syslog_message type: keyword - - name: reverse_rtp_payload_type + - name: netscaler_syslog_priority type: short - - name: reverse_small_packet_count + - name: netscaler_syslog_timestamp type: long - - name: reverse_non_empty_packet_count + - name: netscaler_transaction_id type: long - - name: reverse_data_byte_count + - name: netscaler_unknown270 type: long - - name: reverse_average_interarrival_time + - name: netscaler_unknown271 type: long - - name: reverse_standard_deviation_interarrival_time + - name: netscaler_unknown272 type: long - - name: reverse_first_non_empty_packet_size - type: integer - - - name: reverse_max_packet_size - type: integer - - - name: reverse_standard_deviation_payload_length - type: integer - - - name: reverse_large_packet_count + - name: netscaler_unknown273 type: long - - name: policy_qos_classification_hierarchy + - name: netscaler_unknown274 type: long - - name: waasoptimization_segment - type: short - - - name: art_clientpackets + - name: netscaler_unknown275 type: long - - name: art_serverpackets + - name: netscaler_unknown276 type: long - - name: art_count_retransmissions + - name: netscaler_unknown277 type: long - - name: art_count_transactions + - name: netscaler_unknown278 type: long - - name: art_total_transaction_time_sum + - name: netscaler_unknown279 type: long - - name: art_total_transaction_time_maximum + - name: netscaler_unknown280 type: long - - name: art_total_transaction_time_minimum + - name: netscaler_unknown281 type: long - - name: art_count_new_connections + - name: netscaler_unknown282 type: long - - name: art_count_responses + - name: netscaler_unknown283 type: long - - name: art_count_responses_histogram_bucket1 + - name: netscaler_unknown284 type: long - - name: art_count_responses_histogram_bucket2 + - name: netscaler_unknown285 type: long - - name: art_count_responses_histogram_bucket3 + - name: netscaler_unknown286 type: long - - name: art_count_responses_histogram_bucket4 + - name: netscaler_unknown287 type: long - - name: art_count_responses_histogram_bucket5 + - name: netscaler_unknown288 type: long - - name: art_count_responses_histogram_bucket6 + - name: netscaler_unknown289 type: long - - name: art_count_responses_histogram_bucket7 + - name: netscaler_unknown290 type: long - - name: art_count_late_responses + - name: netscaler_unknown291 type: long - - name: art_response_time_sum + - name: netscaler_unknown292 type: long - - name: art_response_time_maximum + - name: netscaler_unknown293 type: long - - name: art_response_time_minimum + - name: netscaler_unknown294 type: long - - name: art_server_response_time_sum + - name: netscaler_unknown295 type: long - - name: art_server_response_time_maximum + - name: netscaler_unknown296 type: long - - name: art_server_response_time_minimum + - name: netscaler_unknown297 type: long - - name: art_total_response_time_sum + - name: netscaler_unknown298 type: long - - name: art_total_response_time_maximum + - name: netscaler_unknown299 type: long - - name: art_total_response_time_minimum + - name: netscaler_unknown300 type: long - - name: art_network_time_sum + - name: netscaler_unknown301 type: long - - name: art_network_time_maximum + - name: netscaler_unknown302 type: long - - name: art_network_time_minimum + - name: netscaler_unknown303 type: long - - name: art_client_network_time_sum + - name: netscaler_unknown304 type: long - - name: art_client_network_time_maximum + - name: netscaler_unknown305 type: long - - name: art_client_network_time_minimum + - name: netscaler_unknown306 type: long - - name: art_server_network_time_sum + - name: netscaler_unknown307 type: long - - name: art_server_network_time_maximum + - name: netscaler_unknown308 type: long - - name: art_server_network_time_minimum + - name: netscaler_unknown309 type: long - - name: application_http_uri_statistics - type: short - - - name: policy_qos_queueindex + - name: netscaler_unknown310 type: long - - name: policy_qos_queue_index + - name: netscaler_unknown311 type: long - - name: policy_qos_queuedrops + - name: netscaler_unknown312 type: long - - name: application_category_name + - name: netscaler_unknown313 type: long - - name: application_sub_category_name + - name: netscaler_unknown314 type: long - - name: application_group_name + - name: netscaler_unknown315 type: long - - name: application_http_user-agent - type: short + - name: netscaler_unknown316 + type: keyword - - name: application_traffic-class + - name: netscaler_unknown317 type: long - - name: application_business-relevance + - name: netscaler_unknown318 type: long - - name: timestamp_absolute_monitoring-interval - type: long + - name: netscaler_unknown319 + type: keyword - - name: netscaler_round_trip_time + - name: netscaler_unknown320 + type: integer + + - name: netscaler_unknown321 type: long - - name: netscaler_transaction_id + - name: netscaler_unknown322 type: long - - name: netscaler_http_req_url - type: keyword + - name: netscaler_unknown323 + type: integer - - name: netscaler_http_req_cookie - type: keyword + - name: netscaler_unknown324 + type: integer - - name: netscaler_flow_flags - type: long + - name: netscaler_unknown325 + type: integer - - name: netscaler_connection_id + - name: netscaler_unknown326 + type: integer + + - name: netscaler_unknown327 type: long - - name: netscaler_syslog_priority - type: short + - name: netscaler_unknown328 + type: integer - - name: netscaler_syslog_message - type: keyword + - name: netscaler_unknown329 + type: integer - - name: netscaler_syslog_timestamp - type: long + - name: netscaler_unknown330 + type: integer - - name: netscaler_http_req_referer - type: keyword + - name: netscaler_unknown331 + type: integer - - name: netscaler_http_req_method - type: keyword + - name: netscaler_unknown332 + type: long - - name: netscaler_http_req_host + - name: netscaler_unknown333 type: keyword - - name: netscaler_http_req_user_agent + - name: netscaler_unknown334 type: keyword - - name: netscaler_http_rsp_status - type: integer - - - name: netscaler_http_rsp_len + - name: netscaler_unknown335 type: long - - name: netscaler_server_ttfb + - name: netscaler_unknown336 type: long - - name: netscaler_server_ttlb + - name: netscaler_unknown337 type: long - - name: netscaler_app_name_incarnation_number + - name: netscaler_unknown338 type: long - - name: netscaler_app_name_app_id + - name: netscaler_unknown339 type: long - - name: netscaler_app_name - type: keyword - - - name: netscaler_http_req_rcv_fb + - name: netscaler_unknown340 type: long - - name: netscaler_http_req_forw_fb + - name: netscaler_unknown341 type: long - - name: netscaler_http_res_rcv_fb + - name: netscaler_unknown342 type: long - - name: netscaler_http_res_forw_fb + - name: netscaler_unknown343 type: long - - name: netscaler_http_req_rcv_lb + - name: netscaler_unknown344 type: long - - name: netscaler_http_req_forw_lb + - name: netscaler_unknown345 type: long - - name: netscaler_main_page_id + - name: netscaler_unknown346 type: long - - name: netscaler_main_page_core_id + - name: netscaler_unknown347 type: long - - name: netscaler_http_client_interaction_start_time - type: keyword + - name: netscaler_unknown348 + type: integer - - name: netscaler_http_client_render_end_time + - name: netscaler_unknown349 type: keyword - - name: netscaler_http_client_render_start_time + - name: netscaler_unknown350 type: keyword - - name: netscaler_app_template_name + - name: netscaler_unknown351 type: keyword - - name: netscaler_http_client_interaction_end_time - type: keyword + - name: netscaler_unknown352 + type: integer - - name: netscaler_http_res_rcv_lb + - name: netscaler_unknown353 type: long - - name: netscaler_http_res_forw_lb + - name: netscaler_unknown354 type: long - - name: netscaler_app_unit_name_app_id + - name: netscaler_unknown355 type: long - - name: netscaler_db_login_flags + - name: netscaler_unknown356 type: long - - name: netscaler_db_req_type - type: short + - name: netscaler_unknown357 + type: long - - name: netscaler_db_protocol_name + - name: netscaler_unknown363 type: short - - name: netscaler_db_user_name - type: keyword - - - name: netscaler_db_database_name - type: keyword - - - name: netscaler_db_clt_host_name - type: keyword - - - name: netscaler_db_req_string - type: keyword + - name: netscaler_unknown383 + type: short - - name: netscaler_db_resp_status_string - type: keyword + - name: netscaler_unknown391 + type: long - - name: netscaler_db_resp_status + - name: netscaler_unknown398 type: long - - name: netscaler_db_resp_length + - name: netscaler_unknown404 type: long - - name: netscaler_client_rtt + - name: netscaler_unknown405 type: long - - name: netscaler_http_content_type - type: keyword + - name: netscaler_unknown427 + type: long - - name: netscaler_http_req_authorization - type: keyword + - name: netscaler_unknown429 + type: short - - name: netscaler_http_req_via - type: keyword + - name: netscaler_unknown432 + type: short - - name: netscaler_http_res_location - type: keyword - - - name: netscaler_http_res_set_cookie - type: keyword - - - name: netscaler_http_res_set_cookie2 - type: keyword - - - name: netscaler_http_req_xforwarded_for - type: keyword - - - name: netscaler_connection_chain_id + - name: netscaler_unknown433 type: short - - name: netscaler_connection_chain_hop_count + - name: netscaler_unknown453 type: long - - name: netscaler_ica_session_guid - type: short - - - name: netscale_ica_client_version - type: keyword - - - name: netscaler_ica_client_type - type: integer - - - name: netscaler_ica_client_ip - type: ip - - - name: netscaler_ica_client_host_name - type: keyword - - - name: netscaler_aaa_username - type: keyword - - - name: netscaler_ica_domain_name - type: keyword - - - name: netscaler_ica_client_launcher - type: integer - - - name: netscaler_ica_session_setup_time + - name: netscaler_unknown465 type: long - - name: netscaler_ica_server_name - type: keyword + - name: new_connection_delta_count + type: long - - name: netscaler_ica_session_reconnects + - name: next_header_ipv6 type: short - - name: netscaler_ica_rtt + - name: non_empty_packet_count type: long - - name: netscaler_ica_clientside_rx_bytes + - name: not_sent_flow_total_count type: long - - name: netscaler_ica_clientside_tx_bytes + - name: not_sent_layer2_octet_total_count type: long - - name: netscaler_ica_clientside_packets_retransmit - type: integer - - - name: netscaler_ica_serverside_packets_retransmit - type: integer - - - name: netscaler_ica_clientside_rtt + - name: not_sent_octet_total_count type: long - - name: netscaler_ica_serverside_rtt + - name: not_sent_packet_total_count type: long - - name: netscaler_ica_session_update_begin_sec + - name: observation_domain_id type: long - - name: netscaler_ica_session_update_end_sec - type: long + - name: observation_domain_name + type: keyword - - name: netscaler_ica_channel_id1 + - name: observation_point_id type: long - - name: netscaler_ica_channel_id1_bytes - type: long + - name: observation_point_type + type: short - - name: netscaler_ica_channel_id2 - type: long + - name: observation_time_microseconds + type: date - - name: netscaler_ica_channel_id2_bytes - type: long + - name: observation_time_milliseconds + type: date - - name: netscaler_ica_channel_id3 - type: long + - name: observation_time_nanoseconds + type: date - - name: netscaler_ica_channel_id3_bytes - type: long + - name: observation_time_seconds + type: date - - name: netscaler_ica_channel_id4 + - name: observed_flow_total_count type: long - - name: netscaler_ica_channel_id4_bytes + - name: octet_delta_count type: long - - name: netscaler_ica_channel_id5 + - name: octet_delta_sum_of_squares type: long - - name: netscaler_ica_channel_id5_bytes + - name: octet_total_count type: long - - name: netscaler_ica_connection_priority - type: integer - - - name: netscaler_application_startup_duration + - name: octet_total_sum_of_squares type: long - - name: netscaler_ica_launch_mechanism - type: integer - - - name: netscaler_ica_application_name - type: keyword + - name: opaque_octets + type: short - - name: netscaler_application_startup_time - type: long + - name: original_exporter_ipv4_address + type: ip - - name: netscaler_ica_application_termination_type - type: integer + - name: original_exporter_ipv6_address + type: ip - - name: netscaler_ica_application_termination_time + - name: original_flows_completed type: long - - name: netscaler_ica_session_end_time + - name: original_flows_initiated type: long - - name: netscaler_ica_clientside_jitter + - name: original_flows_present type: long - - name: netscaler_ica_serverside_jitter + - name: original_observation_domain_id type: long - - name: netscaler_ica_app_process_id - type: long + - name: os_finger_print + type: keyword - - name: netscaler_ica_app_module_path + - name: os_name type: keyword - - name: netscaler_ica_device_serial_no - type: long + - name: os_version + type: keyword - - name: netscaler_msi_client_cookie - type: short + - name: p2p_technology + type: keyword - - name: netscaler_ica_flags + - name: packet_delta_count type: long - - name: netscaler_ica_username - type: keyword + - name: packet_total_count + type: long - - name: netscaler_license_type + - name: padding_octets type: short - - name: netscaler_max_license_count - type: long + - name: payload + type: keyword - - name: netscaler_current_license_consumed - type: long + - name: payload_entropy + type: short - - name: netscaler_ica_network_update_start_time - type: long + - name: payload_length_ipv6 + type: integer - - name: netscaler_ica_network_update_end_time + - name: policy_qos_classification_hierarchy type: long - - name: netscaler_ica_clientside_srtt + - name: policy_qos_queue_index type: long - - name: netscaler_ica_serverside_srtt + - name: policy_qos_queuedrops type: long - - name: netscaler_ica_clientside_delay + - name: policy_qos_queueindex type: long - - name: netscaler_ica_serverside_delay + - name: port_id type: long - - name: netscaler_ica_host_delay - type: long + - name: port_range_end + type: integer - - name: netscaler_ica_client_side_window_size + - name: port_range_num_ports type: integer - - name: netscaler_ica_server_side_window_size + - name: port_range_start type: integer - - name: netscaler_ica_client_side_rto_count + - name: port_range_step_size type: integer - - name: netscaler_ica_server_side_rto_count + - name: post_destination_mac_address + type: keyword + + - name: post_dot1q_customer_vlan_id type: integer - - name: netscaler_ica_l7_client_latency - type: long + - name: post_dot1q_vlan_id + type: integer - - name: netscaler_ica_l7_server_latency - type: long + - name: post_ip_class_of_service + type: short - - name: netscaler_http_domain_name - type: keyword + - name: post_ip_diff_serv_code_point + type: short - - name: netscaler_cache_redir_client_connection_core_id - type: long + - name: post_ip_precedence + type: short - - name: netscaler_cache_redir_client_connection_transaction_id + - name: post_layer2_octet_delta_count type: long - - name: netscaler_unknown270 + - name: post_layer2_octet_total_count type: long - - name: netscaler_unknown271 + - name: post_mcast_layer2_octet_delta_count type: long - - name: netscaler_unknown272 + - name: post_mcast_layer2_octet_total_count type: long - - name: netscaler_unknown273 + - name: post_mcast_octet_delta_count type: long - - name: netscaler_unknown274 + - name: post_mcast_octet_total_count type: long - - name: netscaler_unknown275 + - name: post_mcast_packet_delta_count type: long - - name: netscaler_unknown276 + - name: post_mcast_packet_total_count type: long - - name: netscaler_unknown277 - type: long + - name: post_mpls_top_label_exp + type: short - - name: netscaler_unknown278 - type: long + - name: post_napt_destination_transport_port + type: integer - - name: netscaler_unknown279 - type: long + - name: post_napt_source_transport_port + type: integer - - name: netscaler_unknown280 - type: long + - name: post_nat_destination_ipv4_address + type: ip - - name: netscaler_unknown281 - type: long + - name: post_nat_destination_ipv6_address + type: ip - - name: netscaler_unknown282 - type: long + - name: post_nat_source_ipv4_address + type: ip - - name: netscaler_unknown283 - type: long + - name: post_nat_source_ipv6_address + type: ip - - name: netscaler_unknown284 + - name: post_octet_delta_count type: long - - name: netscaler_unknown285 + - name: post_octet_total_count type: long - - name: netscaler_unknown286 + - name: post_packet_delta_count type: long - - name: netscaler_unknown287 + - name: post_packet_total_count type: long - - name: netscaler_unknown288 - type: long + - name: post_source_mac_address + type: keyword - - name: netscaler_unknown289 - type: long + - name: post_vlan_id + type: integer - - name: netscaler_unknown290 + - name: private_enterprise_number type: long - - name: netscaler_unknown291 - type: long + - name: procera_apn + type: keyword - - name: netscaler_unknown292 - type: long + - name: procera_base_service + type: keyword - - name: netscaler_unknown293 - type: long + - name: procera_content_categories + type: keyword - - name: netscaler_unknown294 + - name: procera_device_id type: long - - name: netscaler_unknown295 - type: long + - name: procera_external_rtt + type: integer - - name: netscaler_unknown296 - type: long + - name: procera_flow_behavior + type: keyword - - name: netscaler_unknown297 - type: long + - name: procera_ggsn + type: keyword - - name: netscaler_unknown298 - type: long + - name: procera_http_content_type + type: keyword - - name: netscaler_unknown299 + - name: procera_http_file_length type: long - - name: netscaler_unknown300 - type: long + - name: procera_http_language + type: keyword - - name: netscaler_unknown301 - type: long + - name: procera_http_location + type: keyword - - name: netscaler_unknown302 - type: long + - name: procera_http_referer + type: keyword - - name: netscaler_unknown303 - type: long + - name: procera_http_request_method + type: keyword - - name: netscaler_unknown304 - type: long + - name: procera_http_request_version + type: keyword - - name: netscaler_unknown305 - type: long + - name: procera_http_response_status + type: integer - - name: netscaler_unknown306 - type: long + - name: procera_http_url + type: keyword - - name: netscaler_unknown307 - type: long + - name: procera_http_user_agent + type: keyword - - name: netscaler_unknown308 + - name: procera_imsi type: long - - name: netscaler_unknown309 + - name: procera_incoming_octets type: long - - name: netscaler_unknown310 + - name: procera_incoming_packets type: long - - name: netscaler_unknown311 + - name: procera_incoming_shaping_drops type: long - - name: netscaler_unknown312 - type: long + - name: procera_incoming_shaping_latency + type: integer - - name: netscaler_unknown313 - type: long + - name: procera_internal_rtt + type: integer - - name: netscaler_unknown314 - type: long + - name: procera_local_ipv4_host + type: ip - - name: netscaler_unknown315 - type: long + - name: procera_local_ipv6_host + type: ip - - name: netscaler_unknown316 - type: keyword + - name: procera_msisdn + type: long - - name: netscaler_unknown317 + - name: procera_outgoing_octets type: long - - name: netscaler_unknown318 + - name: procera_outgoing_packets type: long - - name: netscaler_unknown319 - type: keyword + - name: procera_outgoing_shaping_drops + type: long - - name: netscaler_unknown320 + - name: procera_outgoing_shaping_latency type: integer - - name: netscaler_unknown321 - type: long + - name: procera_property + type: keyword - - name: netscaler_unknown322 - type: long + - name: procera_qoe_incoming_external + type: float - - name: netscaler_unknown323 - type: integer + - name: procera_qoe_incoming_internal + type: float - - name: netscaler_unknown324 - type: integer + - name: procera_qoe_outgoing_external + type: float - - name: netscaler_unknown325 - type: integer + - name: procera_qoe_outgoing_internal + type: float - - name: netscaler_unknown326 - type: integer + - name: procera_rat + type: keyword - - name: netscaler_unknown327 - type: long + - name: procera_remote_ipv4_host + type: ip - - name: netscaler_unknown328 - type: integer + - name: procera_remote_ipv6_host + type: ip - - name: netscaler_unknown329 + - name: procera_rnc type: integer - - name: netscaler_unknown330 - type: integer + - name: procera_server_hostname + type: keyword - - name: netscaler_unknown331 - type: integer + - name: procera_service + type: keyword - - name: netscaler_unknown332 - type: long + - name: procera_sgsn + type: keyword - - name: netscaler_unknown333 + - name: procera_subscriber_identifier type: keyword - - name: netscaler_unknown334 + - name: procera_template_name type: keyword - - name: netscaler_unknown335 - type: long + - name: procera_user_location_information + type: keyword - - name: netscaler_unknown336 - type: long + - name: protocol_identifier + type: short - - name: netscaler_unknown337 + - name: pseudo_wire_control_word type: long - - name: netscaler_unknown338 - type: long + - name: pseudo_wire_destination_ipv4_address + type: ip - - name: netscaler_unknown339 + - name: pseudo_wire_id type: long - - name: netscaler_unknown340 - type: long + - name: pseudo_wire_type + type: integer - - name: netscaler_unknown341 + - name: reason type: long - - name: netscaler_unknown342 - type: long + - name: reason_text + type: keyword - - name: netscaler_unknown343 - type: long + - name: relative_error + type: double - - name: netscaler_unknown344 + - name: responder_octets type: long - - name: netscaler_unknown345 + - name: responder_packets type: long - - name: netscaler_unknown346 - type: long + - name: reverse_absolute_error + type: double - - name: netscaler_unknown347 - type: long + - name: reverse_anonymization_flags + type: integer - - name: netscaler_unknown348 + - name: reverse_anonymization_technique type: integer - - name: netscaler_unknown349 + - name: reverse_application_category_name type: keyword - - name: netscaler_unknown350 + - name: reverse_application_description type: keyword - - name: netscaler_unknown351 + - name: reverse_application_group_name type: keyword - - name: netscaler_unknown352 - type: integer + - name: reverse_application_id + type: keyword - - name: netscaler_unknown353 - type: long + - name: reverse_application_name + type: keyword - - name: netscaler_unknown354 - type: long + - name: reverse_application_sub_category_name + type: keyword - - name: netscaler_unknown355 + - name: reverse_average_interarrival_time type: long - - name: netscaler_unknown356 + - name: reverse_bgp_destination_as_number type: long - - name: netscaler_unknown357 + - name: reverse_bgp_next_adjacent_as_number type: long - - name: netscaler_unknown363 - type: short + - name: reverse_bgp_next_hop_ipv4_address + type: ip - - name: netscaler_unknown383 - type: short + - name: reverse_bgp_next_hop_ipv6_address + type: ip - - name: netscaler_unknown391 + - name: reverse_bgp_prev_adjacent_as_number type: long - - name: netscaler_unknown398 + - name: reverse_bgp_source_as_number type: long - - name: netscaler_unknown404 - type: long + - name: reverse_bgp_validity_state + type: short - - name: netscaler_unknown405 - type: long + - name: reverse_class_id + type: short - - name: netscaler_unknown427 - type: long + - name: reverse_class_name + type: keyword - - name: netscaler_unknown429 + - name: reverse_classification_engine_id type: short - - name: netscaler_unknown432 - type: short - - - name: netscaler_unknown433 - type: short - - - name: netscaler_unknown453 - type: long - - - name: netscaler_unknown465 - type: long - - - name: fw_ext_event - type: integer - - - name: fw_event_level + - name: reverse_collection_time_milliseconds type: long - - name: fw_event_level_id - type: long + - name: reverse_collector_certificate + type: keyword - - name: fw_configured_value - type: long + - name: reverse_confidence_level + type: double - - name: fw_cts_src_sgt + - name: reverse_connection_sum_duration_seconds type: long - - name: fw_ext_event_alt + - name: reverse_connection_transaction_id type: long - - name: fw_blackout_secs + - name: reverse_data_byte_count type: long - - name: fw_half_open_high - type: long + - name: reverse_data_link_frame_section + type: keyword - - name: fw_half_open_rate - type: long + - name: reverse_data_link_frame_size + type: integer - - name: fw_zone_pair_id - type: long + - name: reverse_data_link_frame_type + type: integer - - name: fw_max_sessions - type: long + - name: reverse_data_records_reliability + type: short - - name: fw_zone_pair_name + - name: reverse_delta_flow_count type: long - - name: fw_ext_event_desc - type: keyword - - - name: fw_summary_pkt_count - type: long + - name: reverse_destination_ipv4_address + type: ip - - name: fw_half_open_count - type: long + - name: reverse_destination_ipv4_prefix + type: ip - - name: username - type: keyword + - name: reverse_destination_ipv4_prefix_length + type: short - - name: xlate_source_address_ip_v4 + - name: reverse_destination_ipv6_address type: ip - - name: xlate_destination_address_ip_v4 + - name: reverse_destination_ipv6_prefix type: ip - - name: xlate_source_port - type: integer - - - name: xlate_destination_port - type: integer - - - name: firewall_event + - name: reverse_destination_ipv6_prefix_length type: short - - name: nat_inside_svcid - type: integer + - name: reverse_destination_mac_address + type: keyword - - name: nat_outside_svcid + - name: reverse_destination_transport_port type: integer - - name: nat_sub_string - type: keyword - - - name: ixia_l7_app_id + - name: reverse_digest_hash_value type: long - - name: ixia_l7_app_name - type: keyword - - - name: ixia_src_country_code - type: keyword - - - name: ixia_src_country_name - type: keyword - - - name: ixia_src_region_code - type: keyword + - name: reverse_distinct_count_of_destination_ip_address + type: long - - name: ixia_src_region_name - type: keyword + - name: reverse_distinct_count_of_destination_ipv4_address + type: long - - name: ixia_src_city_name - type: keyword + - name: reverse_distinct_count_of_destination_ipv6_address + type: long - - name: ixia_src_latitude - type: float + - name: reverse_distinct_count_of_source_ip_address + type: long - - name: ixia_src_longitude - type: float + - name: reverse_distinct_count_of_source_ipv4_address + type: long - - name: ixia_dst_country_code - type: keyword + - name: reverse_distinct_count_of_source_ipv6_address + type: long - - name: ixia_dst_country_name - type: keyword + - name: reverse_dot1q_customer_dei + type: short - - name: ixia_dst_region_code + - name: reverse_dot1q_customer_destination_mac_address type: keyword - - name: ixia_dst_region_node - type: keyword + - name: reverse_dot1q_customer_priority + type: short - - name: ixia_dst_city_name + - name: reverse_dot1q_customer_source_mac_address type: keyword - - name: ixia_dst_latitude - type: float - - - name: ixia_dst_longitude - type: float + - name: reverse_dot1q_customer_vlan_id + type: integer - - name: ixia_device_id + - name: reverse_dot1q_dei type: short - - name: ixia_device_name - type: keyword - - - name: ixia_browser_id + - name: reverse_dot1q_priority type: short - - name: ixia_browser_name - type: keyword - - - name: ixia_rev_octet_delta_count - type: long - - - name: ixia_rev_packet_delta_count + - name: reverse_dot1q_service_instance_id type: long - - name: ixia_encrypt_type - type: keyword + - name: reverse_dot1q_service_instance_priority + type: short - - name: ixia_encrypt_cipher + - name: reverse_dot1q_service_instance_tag type: keyword - - name: ixia_encrypt_key_length + - name: reverse_dot1q_vlan_id type: integer - - name: ixia_imsi_subscriber - type: keyword + - name: reverse_dropped_layer2_octet_delta_count + type: long - - name: ixia_http_user_agent - type: keyword + - name: reverse_dropped_layer2_octet_total_count + type: long - - name: ixia_http_host_name - type: keyword + - name: reverse_dropped_octet_delta_count + type: long - - name: ixia_http_uri - type: keyword + - name: reverse_dropped_octet_total_count + type: long - - name: ixia_dns_record_txt - type: keyword + - name: reverse_dropped_packet_delta_count + type: long - - name: ixia_src_as_name - type: keyword + - name: reverse_dropped_packet_total_count + type: long - - name: ixia_dst_as_name - type: keyword + - name: reverse_dst_traffic_index + type: long - - name: ixia_latency + - name: reverse_egress_broadcast_packet_total_count type: long - - name: ixia_dns_query - type: keyword + - name: reverse_egress_interface + type: long - - name: ixia_dns_answer - type: keyword + - name: reverse_egress_interface_type + type: long - - name: ixia_dns_classes - type: keyword + - name: reverse_egress_physical_interface + type: long - - name: ixia_threat_type - type: keyword + - name: reverse_egress_unicast_packet_total_count + type: long - - name: ixia_threat_ipv4 - type: ip + - name: reverse_egress_vrfid + type: long - - name: ixia_threat_ipv6 - type: ip + - name: reverse_encrypted_technology + type: keyword - - name: vmware_tenant_protocol + - name: reverse_engine_id type: short - - name: vmware_tenant_source_ipv4 - type: ip - - - name: vmware_tenant_dest_ipv4 - type: ip - - - name: vmware_tenant_source_ipv6 - type: ip - - - name: vmware_tenant_dest_ipv6 - type: ip + - name: reverse_engine_type + type: short - - name: vmware_tenant_source_port - type: integer + - name: reverse_ethernet_header_length + type: short - - name: vmware_tenant_dest_port + - name: reverse_ethernet_payload_length type: integer - - name: vmware_egress_interface_attr + - name: reverse_ethernet_total_length type: integer - - name: vmware_vxlan_export_role - type: short - - - name: vmware_ingress_interface_attr + - name: reverse_ethernet_type type: integer - - name: afc_protocol + - name: reverse_export_sctp_stream_id type: integer - - name: afc_protocol_name + - name: reverse_exporter_certificate type: keyword - - name: flow_direction - type: short - - - name: timestamp + - name: reverse_exporting_process_id type: long - - name: log_op + - name: reverse_firewall_event type: short - - name: traffic_type - type: short + - name: reverse_first_non_empty_packet_size + type: integer - - name: fw_rule + - name: reverse_first_packet_banner type: keyword - - name: service_name - type: keyword + - name: reverse_flags_and_sampler_id + type: long - - name: reason + - name: reverse_flow_active_timeout + type: integer + + - name: reverse_flow_attributes + type: integer + + - name: reverse_flow_delta_milliseconds type: long - - name: reason_text - type: keyword + - name: reverse_flow_direction + type: short - - name: bind_ipv4_address - type: ip + - name: reverse_flow_duration_microseconds + type: long - - name: bind_transport_port - type: integer + - name: reverse_flow_duration_milliseconds + type: long - - name: conn_ipv4_address - type: ip + - name: reverse_flow_end_delta_microseconds + type: long - - name: conn_transport_port - type: integer + - name: reverse_flow_end_microseconds + type: long - - name: audit_counter + - name: reverse_flow_end_milliseconds type: long - - name: timestamp + - name: reverse_flow_end_nanoseconds type: long - - name: log_op + - name: reverse_flow_end_reason type: short - - name: traffic_type - type: short + - name: reverse_flow_end_seconds + type: long - - name: fw_rule - type: keyword + - name: reverse_flow_end_sys_up_time + type: long - - name: service_name - type: keyword + - name: reverse_flow_idle_timeout + type: integer - - name: reason + - name: reverse_flow_label_ipv6 type: long - - name: reason_text - type: keyword + - name: reverse_flow_sampling_time_interval + type: long - - name: bind_ipv4_address - type: ip + - name: reverse_flow_sampling_time_spacing + type: long - - name: bind_transport_port - type: integer + - name: reverse_flow_selected_flow_delta_count + type: long - - name: conn_ipv4_address - type: ip + - name: reverse_flow_selected_octet_delta_count + type: long - - name: conn_transport_port + - name: reverse_flow_selected_packet_delta_count + type: long + + - name: reverse_flow_selector_algorithm type: integer - - name: audit_counter + - name: reverse_flow_start_delta_microseconds type: long - - name: procera_service - type: keyword - - - name: procera_base_service - type: keyword + - name: reverse_flow_start_microseconds + type: long - - name: procera_incoming_octets + - name: reverse_flow_start_milliseconds type: long - - name: procera_outgoing_octets + - name: reverse_flow_start_nanoseconds type: long - - name: procera_incoming_packets + - name: reverse_flow_start_seconds type: long - - name: procera_outgoing_packets + - name: reverse_flow_start_sys_up_time type: long - - name: procera_incoming_shaping_latency - type: integer + - name: reverse_forwarding_status + type: long - - name: procera_outgoing_shaping_latency - type: integer + - name: reverse_fragment_flags + type: short - - name: procera_incoming_shaping_drops + - name: reverse_fragment_identification type: long - - name: procera_outgoing_shaping_drops + - name: reverse_fragment_offset + type: integer + + - name: reverse_gre_key type: long - - name: procera_internal_rtt - type: integer + - name: reverse_hash_digest_output + type: short - - name: procera_external_rtt + - name: reverse_hash_flow_domain type: integer - - name: procera_flow_behavior - type: keyword + - name: reverse_hash_initialiser_value + type: long - - name: procera_content_categories - type: keyword + - name: reverse_hash_ip_payload_offset + type: long - - name: procera_property - type: keyword + - name: reverse_hash_ip_payload_size + type: long - - name: procera_server_hostname - type: keyword + - name: reverse_hash_output_range_max + type: long - - name: procera_http_request_method - type: keyword + - name: reverse_hash_output_range_min + type: long - - name: procera_http_user_agent - type: keyword + - name: reverse_hash_selected_range_max + type: long - - name: procera_http_content_type - type: keyword + - name: reverse_hash_selected_range_min + type: long - - name: procera_http_url - type: keyword + - name: reverse_icmp_code_ipv4 + type: short - - name: procera_http_referer - type: keyword + - name: reverse_icmp_code_ipv6 + type: short - - name: procera_http_response_status + - name: reverse_icmp_type_code_ipv4 type: integer - - name: procera_http_file_length - type: long + - name: reverse_icmp_type_code_ipv6 + type: integer - - name: procera_http_location - type: keyword + - name: reverse_icmp_type_ipv4 + type: short - - name: procera_http_language - type: keyword + - name: reverse_icmp_type_ipv6 + type: short - - name: procera_subscriber_identifier - type: keyword + - name: reverse_igmp_type + type: short - - name: procera_msisdn + - name: reverse_ignored_data_record_total_count type: long - - name: procera_imsi + - name: reverse_ignored_layer2_frame_total_count type: long - - name: procera_rat - type: keyword - - - name: procera_device_id + - name: reverse_ignored_layer2_octet_total_count type: long - - name: procera_sgsn + - name: reverse_information_element_data_type + type: short + + - name: reverse_information_element_description type: keyword - - name: procera_rnc + - name: reverse_information_element_id type: integer - - name: procera_apn - type: keyword - - - name: procera_user_location_information - type: keyword + - name: reverse_information_element_index + type: integer - - name: procera_ggsn + - name: reverse_information_element_name type: keyword - - name: procera_qoe_incoming_internal - type: float - - - name: procera_qoe_incoming_external - type: float + - name: reverse_information_element_range_begin + type: long - - name: procera_qoe_outgoing_internal - type: float + - name: reverse_information_element_range_end + type: long - - name: procera_qoe_outgoing_external - type: float + - name: reverse_information_element_semantics + type: short - - name: procera_local_ipv4_host - type: ip + - name: reverse_information_element_units + type: integer - - name: procera_local_ipv6_host - type: ip + - name: reverse_ingress_broadcast_packet_total_count + type: long - - name: procera_remote_ipv4_host - type: ip + - name: reverse_ingress_interface + type: long - - name: procera_remote_ipv6_host - type: ip + - name: reverse_ingress_interface_type + type: long - - name: procera_http_request_version - type: keyword + - name: reverse_ingress_multicast_packet_total_count + type: long - - name: procera_template_name - type: keyword + - name: reverse_ingress_physical_interface + type: long - - name: mark + - name: reverse_ingress_unicast_packet_total_count type: long - - name: conntrack_id + - name: reverse_ingress_vrfid type: long - - name: reverse_octet_delta_count + - name: reverse_initial_tcp_flags + type: short + + - name: reverse_initiator_octets type: long - - name: reverse_packet_delta_count + - name: reverse_initiator_packets type: long - - name: reverse_delta_flow_count + - name: reverse_interface_description + type: keyword + + - name: reverse_interface_name + type: keyword + + - name: reverse_intermediate_process_id type: long - - name: reverse_protocol_identifier + - name: reverse_ip_class_of_service type: short - - name: reverse_ip_class_of_service + - name: reverse_ip_diff_serv_code_point type: short - - name: reverse_tcp_control_bits - type: integer + - name: reverse_ip_header_length + type: short - - name: reverse_source_transport_port - type: integer + - name: reverse_ip_header_packet_section + type: keyword - - name: reverse_source_ipv4_address + - name: reverse_ip_next_hop_ipv4_address type: ip - - name: reverse_source_ipv4_prefix_length - type: short + - name: reverse_ip_next_hop_ipv6_address + type: ip - - name: reverse_ingress_interface + - name: reverse_ip_payload_length type: long - - name: reverse_destination_transport_port - type: integer - - - name: reverse_destination_ipv4_address - type: ip + - name: reverse_ip_payload_packet_section + type: keyword - - name: reverse_destination_ipv4_prefix_length + - name: reverse_ip_precedence type: short - - name: reverse_egress_interface + - name: reverse_ip_sec_spi type: long - - name: reverse_ip_next_hop_ipv4_address - type: ip - - - name: reverse_bgp_source_as_number + - name: reverse_ip_total_length type: long - - name: reverse_bgp_destination_as_number + - name: reverse_ip_ttl + type: short + + - name: reverse_ip_version + type: short + + - name: reverse_ipv4_ihl + type: short + + - name: reverse_ipv4_options type: long - - name: reverse_bgp_next_hop_ipv4_address + - name: reverse_ipv4_router_sc type: ip - - name: reverse_post_mcast_packet_delta_count + - name: reverse_ipv6_extension_headers type: long - - name: reverse_post_mcast_octet_delta_count + - name: reverse_is_multicast + type: short + + - name: reverse_large_packet_count type: long - - name: reverse_flow_end_sys_up_time + - name: reverse_layer2_frame_delta_count type: long - - name: reverse_flow_start_sys_up_time + - name: reverse_layer2_frame_total_count type: long - - name: reverse_post_octet_delta_count + - name: reverse_layer2_octet_delta_count type: long - - name: reverse_post_packet_delta_count + - name: reverse_layer2_octet_delta_sum_of_squares type: long - - name: reverse_minimum_ip_total_length + - name: reverse_layer2_octet_total_count type: long - - name: reverse_maximum_ip_total_length + - name: reverse_layer2_octet_total_sum_of_squares type: long - - name: reverse_source_ipv6_address - type: ip + - name: reverse_layer2_segment_id + type: long - - name: reverse_destination_ipv6_address - type: ip + - name: reverse_layer2packet_section_data + type: keyword - - name: reverse_source_ipv6_prefix_length - type: short + - name: reverse_layer2packet_section_offset + type: integer - - name: reverse_destination_ipv6_prefix_length - type: short + - name: reverse_layer2packet_section_size + type: integer - - name: reverse_flow_label_ipv6 + - name: reverse_line_card_id type: long - - name: reverse_icmp_type_code_ipv4 - type: integer - - - name: reverse_igmp_type - type: short + - name: reverse_lower_ci_limit + type: double - - name: reverse_sampling_interval + - name: reverse_max_export_seconds type: long - - name: reverse_sampling_algorithm - type: short - - - name: reverse_flow_active_timeout - type: integer + - name: reverse_max_flow_end_microseconds + type: long - - name: reverse_flow_idle_timeout - type: integer + - name: reverse_max_flow_end_milliseconds + type: long - - name: reverse_engine_type - type: short + - name: reverse_max_flow_end_nanoseconds + type: long - - name: reverse_engine_id - type: short + - name: reverse_max_flow_end_seconds + type: long - - name: reverse_ipv4_router_sc - type: ip + - name: reverse_max_packet_size + type: integer - - name: reverse_source_ipv4_prefix - type: ip + - name: reverse_maximum_ip_total_length + type: long - - name: reverse_destination_ipv4_prefix - type: ip + - name: reverse_maximum_layer2_total_length + type: long - - name: reverse_mpls_top_label_type + - name: reverse_maximum_ttl type: short - - name: reverse_mpls_top_label_ipv4_address - type: ip - - - name: reverse_sampler_id - type: short + - name: reverse_message_md5_checksum + type: keyword - - name: reverse_sampler_mode + - name: reverse_message_scope type: short - - name: reverse_sampler_random_interval + - name: reverse_metering_process_id type: long - - name: reverse_class_id - type: short + - name: reverse_metro_evc_id + type: keyword - - name: reverse_minimum_ttl + - name: reverse_metro_evc_type type: short - - name: reverse_maximum_ttl - type: short + - name: reverse_min_export_seconds + type: long - - name: reverse_fragment_identification + - name: reverse_min_flow_start_microseconds type: long - - name: reverse_post_ip_class_of_service - type: short + - name: reverse_min_flow_start_milliseconds + type: long - - name: reverse_source_mac_address - type: keyword + - name: reverse_min_flow_start_nanoseconds + type: long - - name: reverse_post_destination_mac_address - type: keyword + - name: reverse_min_flow_start_seconds + type: long - - name: reverse_vlan_id - type: integer + - name: reverse_minimum_ip_total_length + type: long - - name: reverse_post_vlan_id - type: integer + - name: reverse_minimum_layer2_total_length + type: long - - name: reverse_ip_version + - name: reverse_minimum_ttl type: short - - name: reverse_flow_direction - type: short + - name: reverse_monitoring_interval_end_milli_seconds + type: long - - name: reverse_ip_next_hop_ipv6_address - type: ip + - name: reverse_monitoring_interval_start_milli_seconds + type: long - - name: reverse_bgp_next_hop_ipv6_address - type: ip + - name: reverse_mpls_label_stack_depth + type: long - - name: reverse_ipv6_extension_headers + - name: reverse_mpls_label_stack_length type: long - - name: reverse_mpls_top_label_stack_section + - name: reverse_mpls_label_stack_section + type: keyword + + - name: reverse_mpls_label_stack_section10 type: keyword - name: reverse_mpls_label_stack_section2 @@ -3134,918 +3107,891 @@ - name: reverse_mpls_label_stack_section9 type: keyword - - name: reverse_mpls_label_stack_section10 - type: keyword - - - name: reverse_destination_mac_address - type: keyword - - - name: reverse_post_source_mac_address - type: keyword - - - name: reverse_interface_name - type: keyword - - - name: reverse_interface_description - type: keyword - - - name: reverse_sampler_name - type: keyword - - - name: reverse_octet_total_count - type: long - - - name: reverse_packet_total_count - type: long - - - name: reverse_flags_and_sampler_id - type: long - - - name: reverse_fragment_offset - type: integer - - - name: reverse_forwarding_status + - name: reverse_mpls_payload_length type: long - - name: reverse_mpls_vpn_route_distinguisher + - name: reverse_mpls_payload_packet_section type: keyword - - name: reverse_mpls_top_label_prefix_length + - name: reverse_mpls_top_label_exp type: short - - name: reverse_src_traffic_index - type: long - - - name: reverse_dst_traffic_index - type: long - - - name: reverse_application_description - type: keyword - - - name: reverse_application_id - type: keyword + - name: reverse_mpls_top_label_ipv4_address + type: ip - - name: reverse_application_name - type: keyword + - name: reverse_mpls_top_label_ipv6_address + type: ip - - name: reverse_post_ip_diff_serv_code_point + - name: reverse_mpls_top_label_prefix_length type: short - - name: reverse_multicast_replication_factor - type: long - - - name: reverse_class_name + - name: reverse_mpls_top_label_stack_section type: keyword - - name: reverse_classification_engine_id + - name: reverse_mpls_top_label_ttl type: short - - name: reverse_layer2packet_section_offset - type: integer - - - name: reverse_layer2packet_section_size - type: integer + - name: reverse_mpls_top_label_type + type: short - - name: reverse_layer2packet_section_data + - name: reverse_mpls_vpn_route_distinguisher type: keyword - - name: reverse_bgp_next_adjacent_as_number - type: long - - - name: reverse_bgp_prev_adjacent_as_number - type: long - - - name: reverse_dropped_octet_delta_count - type: long - - - name: reverse_dropped_packet_delta_count - type: long - - - name: reverse_dropped_octet_total_count + - name: reverse_multicast_replication_factor type: long - - name: reverse_dropped_packet_total_count - type: long + - name: reverse_nat_event + type: short - - name: reverse_flow_end_reason + - name: reverse_nat_originating_address_realm type: short - - name: reverse_observation_point_id + - name: reverse_nat_pool_id type: long - - name: reverse_icmp_type_code_ipv6 - type: integer + - name: reverse_nat_pool_name + type: keyword - - name: reverse_mpls_top_label_ipv6_address - type: ip + - name: reverse_nat_type + type: short - - name: reverse_line_card_id + - name: reverse_new_connection_delta_count type: long - - name: reverse_port_id - type: long + - name: reverse_next_header_ipv6 + type: short - - name: reverse_metering_process_id + - name: reverse_non_empty_packet_count type: long - - name: reverse_exporting_process_id + - name: reverse_not_sent_layer2_octet_total_count type: long - - name: reverse_wlan_channel_id - type: short - - - name: reverse_wlan_ssid + - name: reverse_observation_domain_name type: keyword - - name: reverse_flow_start_seconds - type: long - - - name: reverse_flow_end_seconds - type: long - - - name: reverse_flow_start_milliseconds + - name: reverse_observation_point_id type: long - - name: reverse_flow_end_milliseconds - type: long + - name: reverse_observation_point_type + type: short - - name: reverse_flow_start_microseconds + - name: reverse_observation_time_microseconds type: long - - name: reverse_flow_end_microseconds + - name: reverse_observation_time_milliseconds type: long - - name: reverse_flow_start_nanoseconds + - name: reverse_observation_time_nanoseconds type: long - - name: reverse_flow_end_nanoseconds + - name: reverse_observation_time_seconds type: long - - name: reverse_flow_start_delta_microseconds + - name: reverse_octet_delta_count type: long - - name: reverse_flow_end_delta_microseconds + - name: reverse_octet_delta_sum_of_squares type: long - - name: reverse_system_init_time_milliseconds + - name: reverse_octet_total_count type: long - - name: reverse_flow_duration_milliseconds + - name: reverse_octet_total_sum_of_squares type: long - - name: reverse_flow_duration_microseconds - type: long + - name: reverse_opaque_octets + type: keyword - - name: reverse_destination_ipv6_prefix + - name: reverse_original_exporter_ipv4_address type: ip - - name: reverse_source_ipv6_prefix + - name: reverse_original_exporter_ipv6_address type: ip - - name: reverse_post_octet_total_count + - name: reverse_original_flows_completed type: long - - name: reverse_post_packet_total_count + - name: reverse_original_flows_initiated type: long - - name: reverse_post_mcast_packet_total_count + - name: reverse_original_flows_present type: long - - name: reverse_post_mcast_octet_total_count + - name: reverse_original_observation_domain_id type: long - - name: reverse_icmp_type_ipv4 - type: short + - name: reverse_os_finger_print + type: keyword - - name: reverse_icmp_code_ipv4 - type: short + - name: reverse_os_name + type: keyword - - name: reverse_icmp_type_ipv6 - type: short + - name: reverse_os_version + type: keyword - - name: reverse_icmp_code_ipv6 - type: short + - name: reverse_p2p_technology + type: keyword - - name: reverse_udp_source_port - type: integer + - name: reverse_packet_delta_count + type: long - - name: reverse_udp_destination_port - type: integer + - name: reverse_packet_total_count + type: long - - name: reverse_tcp_source_port - type: integer + - name: reverse_payload + type: keyword - - name: reverse_tcp_destination_port - type: integer + - name: reverse_payload_entropy + type: short - - name: reverse_tcp_sequence_number - type: long + - name: reverse_payload_length_ipv6 + type: integer - - name: reverse_tcp_acknowledgement_number + - name: reverse_port_id type: long - - name: reverse_tcp_window_size - type: integer - - - name: reverse_tcp_urgent_pointer + - name: reverse_port_range_end type: integer - - name: reverse_tcp_header_length - type: short - - - name: reverse_ip_header_length - type: short + - name: reverse_port_range_num_ports + type: integer - - name: reverse_total_length_ipv4 + - name: reverse_port_range_start type: integer - - name: reverse_payload_length_ipv6 + - name: reverse_port_range_step_size type: integer - - name: reverse_ip_ttl - type: short + - name: reverse_post_destination_mac_address + type: keyword - - name: reverse_next_header_ipv6 - type: short + - name: reverse_post_dot1q_customer_vlan_id + type: integer - - name: reverse_mpls_payload_length - type: long + - name: reverse_post_dot1q_vlan_id + type: integer - - name: reverse_ip_diff_serv_code_point + - name: reverse_post_ip_class_of_service type: short - - name: reverse_ip_precedence + - name: reverse_post_ip_diff_serv_code_point type: short - - name: reverse_fragment_flags + - name: reverse_post_ip_precedence type: short - - name: reverse_octet_delta_sum_of_squares + - name: reverse_post_layer2_octet_delta_count type: long - - name: reverse_octet_total_sum_of_squares + - name: reverse_post_layer2_octet_total_count type: long - - name: reverse_mpls_top_label_ttl - type: short + - name: reverse_post_mcast_layer2_octet_delta_count + type: long - - name: reverse_mpls_label_stack_length + - name: reverse_post_mcast_layer2_octet_total_count type: long - - name: reverse_mpls_label_stack_depth + - name: reverse_post_mcast_octet_delta_count type: long - - name: reverse_mpls_top_label_exp - type: short + - name: reverse_post_mcast_octet_total_count + type: long - - name: reverse_ip_payload_length + - name: reverse_post_mcast_packet_delta_count type: long - - name: reverse_udp_message_length - type: integer + - name: reverse_post_mcast_packet_total_count + type: long - - name: reverse_is_multicast + - name: reverse_post_mpls_top_label_exp type: short - - name: reverse_ipv4_ihl - type: short + - name: reverse_post_napt_destination_transport_port + type: integer - - name: reverse_ipv4_options - type: long + - name: reverse_post_napt_source_transport_port + type: integer - - name: reverse_tcp_options - type: long + - name: reverse_post_nat_destination_ipv4_address + type: ip - - name: reverse_tcp_syn_total_count - type: long + - name: reverse_post_nat_destination_ipv6_address + type: ip - - name: reverse_tcp_fin_total_count - type: long + - name: reverse_post_nat_source_ipv4_address + type: ip - - name: reverse_tcp_rst_total_count - type: long + - name: reverse_post_nat_source_ipv6_address + type: ip - - name: reverse_tcp_psh_total_count + - name: reverse_post_octet_delta_count type: long - - name: reverse_tcp_ack_total_count + - name: reverse_post_octet_total_count type: long - - name: reverse_tcp_urg_total_count + - name: reverse_post_packet_delta_count type: long - - name: reverse_ip_total_length + - name: reverse_post_packet_total_count type: long - - name: reverse_post_nat_source_ipv4_address - type: ip - - - name: reverse_post_nat_destination_ipv4_address - type: ip + - name: reverse_post_source_mac_address + type: keyword - - name: reverse_post_napt_source_transport_port + - name: reverse_post_vlan_id type: integer - - name: reverse_post_napt_destination_transport_port - type: integer + - name: reverse_private_enterprise_number + type: long - - name: reverse_nat_originating_address_realm + - name: reverse_protocol_identifier type: short - - name: reverse_nat_event - type: short + - name: reverse_pseudo_wire_control_word + type: long - - name: reverse_initiator_octets + - name: reverse_pseudo_wire_destination_ipv4_address + type: ip + + - name: reverse_pseudo_wire_id type: long + - name: reverse_pseudo_wire_type + type: integer + + - name: reverse_relative_error + type: double + - name: reverse_responder_octets type: long - - name: reverse_firewall_event - type: short + - name: reverse_responder_packets + type: long - - name: reverse_ingress_vrfid + - name: reverse_rfc3550_jitter_microseconds type: long - - name: reverse_egress_vrfid + - name: reverse_rfc3550_jitter_milliseconds type: long - - name: reverse_vr_fname - type: keyword + - name: reverse_rfc3550_jitter_nanoseconds + type: long - - name: reverse_post_mpls_top_label_exp + - name: reverse_rtp_payload_type type: short - - name: reverse_tcp_window_scale + - name: reverse_rtp_sequence_number type: integer - - name: reverse_ethernet_header_length + - name: reverse_sampler_id type: short - - name: reverse_ethernet_payload_length - type: integer + - name: reverse_sampler_mode + type: short - - name: reverse_ethernet_total_length - type: integer + - name: reverse_sampler_name + type: keyword - - name: reverse_dot1q_vlan_id - type: integer + - name: reverse_sampler_random_interval + type: long - - name: reverse_dot1q_priority + - name: reverse_sampling_algorithm type: short - - name: reverse_dot1q_customer_vlan_id - type: integer + - name: reverse_sampling_flow_interval + type: long - - name: reverse_dot1q_customer_priority - type: short + - name: reverse_sampling_flow_spacing + type: long - - name: reverse_metro_evc_id - type: keyword + - name: reverse_sampling_interval + type: long - - name: reverse_metro_evc_type - type: short + - name: reverse_sampling_packet_interval + type: long - - name: reverse_pseudo_wire_id + - name: reverse_sampling_packet_space type: long - - name: reverse_pseudo_wire_type - type: integer + - name: reverse_sampling_population + type: long - - name: reverse_pseudo_wire_control_word + - name: reverse_sampling_probability + type: double + + - name: reverse_sampling_size type: long - - name: reverse_ingress_physical_interface + - name: reverse_sampling_time_interval type: long - - name: reverse_egress_physical_interface + - name: reverse_sampling_time_space type: long - - name: reverse_post_dot1q_vlan_id - type: integer + - name: reverse_second_packet_banner + type: keyword - - name: reverse_post_dot1q_customer_vlan_id + - name: reverse_section_exported_octets type: integer - - name: reverse_ethernet_type + - name: reverse_section_offset type: integer - - name: reverse_post_ip_precedence - type: short - - - name: reverse_collection_time_milliseconds + - name: reverse_selection_sequence_id type: long - - name: reverse_export_sctp_stream_id + - name: reverse_selector_algorithm type: integer - - name: reverse_max_export_seconds + - name: reverse_selector_id type: long - - name: reverse_max_flow_end_seconds + - name: reverse_selector_id_total_flows_observed type: long - - name: reverse_message_md5_checksum - type: keyword - - - name: reverse_message_scope - type: short + - name: reverse_selector_id_total_flows_selected + type: long - - name: reverse_min_export_seconds + - name: reverse_selector_id_total_pkts_observed type: long - - name: reverse_min_flow_start_seconds + - name: reverse_selector_id_total_pkts_selected type: long - - name: reverse_opaque_octets + - name: reverse_selector_name type: keyword - name: reverse_session_scope type: short - - name: reverse_max_flow_end_microseconds - type: long - - - name: reverse_max_flow_end_milliseconds - type: long - - - name: reverse_max_flow_end_nanoseconds - type: long - - - name: reverse_min_flow_start_microseconds + - name: reverse_small_packet_count type: long - - name: reverse_min_flow_start_milliseconds - type: long + - name: reverse_source_ipv4_address + type: ip - - name: reverse_min_flow_start_nanoseconds - type: long + - name: reverse_source_ipv4_prefix + type: ip - - name: reverse_collector_certificate - type: keyword + - name: reverse_source_ipv4_prefix_length + type: short - - name: reverse_exporter_certificate - type: keyword + - name: reverse_source_ipv6_address + type: ip - - name: reverse_data_records_reliability - type: short + - name: reverse_source_ipv6_prefix + type: ip - - name: reverse_observation_point_type + - name: reverse_source_ipv6_prefix_length type: short - - name: reverse_new_connection_delta_count - type: long + - name: reverse_source_mac_address + type: keyword - - name: reverse_connection_sum_duration_seconds - type: long + - name: reverse_source_transport_port + type: integer - - name: reverse_connection_transaction_id + - name: reverse_src_traffic_index type: long - - name: reverse_post_nat_source_ipv6_address + - name: reverse_sta_ipv4_address type: ip - - name: reverse_post_nat_destination_ipv6_address - type: ip + - name: reverse_sta_mac_address + type: keyword + + - name: reverse_standard_deviation_interarrival_time + type: long - - name: reverse_nat_pool_id + - name: reverse_standard_deviation_payload_length + type: integer + + - name: reverse_system_init_time_milliseconds type: long - - name: reverse_nat_pool_name - type: keyword + - name: reverse_tcp_ack_total_count + type: long - - name: reverse_anonymization_flags - type: integer + - name: reverse_tcp_acknowledgement_number + type: long - - name: reverse_anonymization_technique + - name: reverse_tcp_control_bits type: integer - - name: reverse_information_element_index + - name: reverse_tcp_destination_port type: integer - - name: reverse_p2p_technology - type: keyword - - - name: reverse_tunnel_technology - type: keyword - - - name: reverse_encrypted_technology - type: keyword + - name: reverse_tcp_fin_total_count + type: long - - name: reverse_bgp_validity_state + - name: reverse_tcp_header_length type: short - - name: reverse_ip_sec_spi + - name: reverse_tcp_options type: long - - name: reverse_gre_key + - name: reverse_tcp_psh_total_count type: long - - name: reverse_nat_type - type: short - - - name: reverse_initiator_packets + - name: reverse_tcp_rst_total_count type: long - - name: reverse_responder_packets + - name: reverse_tcp_sequence_number type: long - - name: reverse_observation_domain_name - type: keyword + - name: reverse_tcp_source_port + type: integer - - name: reverse_selection_sequence_id + - name: reverse_tcp_syn_total_count type: long - - name: reverse_selector_id + - name: reverse_tcp_urg_total_count type: long - - name: reverse_information_element_id + - name: reverse_tcp_urgent_pointer type: integer - - name: reverse_selector_algorithm + - name: reverse_tcp_window_scale type: integer - - name: reverse_sampling_packet_interval - type: long + - name: reverse_tcp_window_size + type: integer - - name: reverse_sampling_packet_space - type: long + - name: reverse_total_length_ipv4 + type: integer - - name: reverse_sampling_time_interval + - name: reverse_transport_octet_delta_count type: long - - name: reverse_sampling_time_space + - name: reverse_transport_packet_delta_count type: long - - name: reverse_sampling_size - type: long + - name: reverse_tunnel_technology + type: keyword - - name: reverse_sampling_population - type: long + - name: reverse_udp_destination_port + type: integer - - name: reverse_sampling_probability - type: double + - name: reverse_udp_message_length + type: integer - - name: reverse_data_link_frame_size + - name: reverse_udp_source_port type: integer - - name: reverse_ip_header_packet_section + - name: reverse_union_tcp_flags + type: short + + - name: reverse_upper_ci_limit + type: double + + - name: reverse_user_name type: keyword - - name: reverse_ip_payload_packet_section + - name: reverse_value_distribution_method + type: short + + - name: reverse_virtual_station_interface_id type: keyword - - name: reverse_data_link_frame_section + - name: reverse_virtual_station_interface_name type: keyword - - name: reverse_mpls_label_stack_section + - name: reverse_virtual_station_name type: keyword - - name: reverse_mpls_payload_packet_section + - name: reverse_virtual_station_uuid type: keyword - - name: reverse_selector_id_total_pkts_observed - type: long + - name: reverse_vlan_id + type: integer - - name: reverse_selector_id_total_pkts_selected - type: long + - name: reverse_vr_fname + type: keyword - - name: reverse_absolute_error - type: double + - name: reverse_wlan_channel_id + type: short - - name: reverse_relative_error - type: double + - name: reverse_wlan_ssid + type: keyword - - name: reverse_observation_time_seconds - type: long + - name: reverse_wtp_mac_address + type: keyword - - name: reverse_observation_time_milliseconds + - name: rfc3550_jitter_microseconds type: long - - name: reverse_observation_time_microseconds + - name: rfc3550_jitter_milliseconds type: long - - name: reverse_observation_time_nanoseconds + - name: rfc3550_jitter_nanoseconds type: long - - name: reverse_digest_hash_value - type: long + - name: rtp_payload_type + type: short - - name: reverse_hash_ip_payload_offset - type: long + - name: rtp_sequence_number + type: integer - - name: reverse_hash_ip_payload_size - type: long + - name: sampler_id + type: short - - name: reverse_hash_output_range_min + - name: sampler_mode + type: short + + - name: sampler_name + type: keyword + + - name: sampler_random_interval type: long - - name: reverse_hash_output_range_max + - name: sampling_algorithm + type: short + + - name: sampling_flow_interval type: long - - name: reverse_hash_selected_range_min + - name: sampling_flow_spacing type: long - - name: reverse_hash_selected_range_max + - name: sampling_interval type: long - - name: reverse_hash_digest_output - type: short + - name: sampling_packet_interval + type: long - - name: reverse_hash_initialiser_value + - name: sampling_packet_space type: long - - name: reverse_selector_name - type: keyword + - name: sampling_population + type: long - - name: reverse_upper_ci_limit + - name: sampling_probability type: double - - name: reverse_lower_ci_limit - type: double + - name: sampling_size + type: long - - name: reverse_confidence_level - type: double + - name: sampling_time_interval + type: long - - name: reverse_information_element_data_type - type: short + - name: sampling_time_space + type: long - - name: reverse_information_element_description + - name: second_packet_banner type: keyword - - name: reverse_information_element_name - type: keyword + - name: section_exported_octets + type: integer - - name: reverse_information_element_range_begin - type: long + - name: section_offset + type: integer - - name: reverse_information_element_range_end + - name: selection_sequence_id type: long - - name: reverse_information_element_semantics - type: short - - - name: reverse_information_element_units + - name: selector_algorithm type: integer - - name: reverse_private_enterprise_number + - name: selector_id type: long - - name: reverse_virtual_station_interface_id - type: keyword + - name: selector_id_total_flows_observed + type: long - - name: reverse_virtual_station_interface_name - type: keyword + - name: selector_id_total_flows_selected + type: long - - name: reverse_virtual_station_uuid - type: keyword + - name: selector_id_total_pkts_observed + type: long - - name: reverse_virtual_station_name + - name: selector_id_total_pkts_selected + type: long + + - name: selector_name type: keyword - - name: reverse_layer2_segment_id - type: long + - name: service_name + type: keyword - - name: reverse_layer2_octet_delta_count - type: long + - name: session_scope + type: short - - name: reverse_layer2_octet_total_count - type: long + - name: silk_app_label + type: integer - - name: reverse_ingress_unicast_packet_total_count + - name: small_packet_count type: long - - name: reverse_ingress_multicast_packet_total_count - type: long + - name: source_ipv4_address + type: ip - - name: reverse_ingress_broadcast_packet_total_count - type: long + - name: source_ipv4_prefix + type: ip - - name: reverse_egress_unicast_packet_total_count - type: long + - name: source_ipv4_prefix_length + type: short - - name: reverse_egress_broadcast_packet_total_count - type: long + - name: source_ipv6_address + type: ip - - name: reverse_monitoring_interval_start_milli_seconds - type: long + - name: source_ipv6_prefix + type: ip - - name: reverse_monitoring_interval_end_milli_seconds - type: long + - name: source_ipv6_prefix_length + type: short - - name: reverse_port_range_start - type: integer + - name: source_mac_address + type: keyword - - name: reverse_port_range_end + - name: source_transport_port type: integer - - name: reverse_port_range_step_size + - name: source_transport_ports_limit type: integer - - name: reverse_port_range_num_ports - type: integer + - name: src_traffic_index + type: long - - name: reverse_sta_mac_address + - name: ssl_cert_serial_number type: keyword - - name: reverse_sta_ipv4_address - type: ip - - - name: reverse_wtp_mac_address + - name: ssl_cert_signature type: keyword - - name: reverse_ingress_interface_type - type: long + - name: ssl_cert_validity_not_after + type: keyword - - name: reverse_egress_interface_type - type: long + - name: ssl_cert_validity_not_before + type: keyword - - name: reverse_rtp_sequence_number - type: integer + - name: ssl_cert_version + type: short - - name: reverse_user_name + - name: ssl_certificate_hash type: keyword - - name: reverse_application_category_name + - name: ssl_cipher type: keyword - - name: reverse_application_sub_category_name - type: keyword + - name: ssl_client_version + type: short - - name: reverse_application_group_name - type: keyword + - name: ssl_compression_method + type: short - - name: reverse_original_flows_present - type: long + - name: ssl_object_type + type: keyword - - name: reverse_original_flows_initiated - type: long + - name: ssl_object_value + type: keyword - - name: reverse_original_flows_completed - type: long + - name: ssl_public_key_algorithm + type: keyword - - name: reverse_distinct_count_of_source_ip_address - type: long + - name: ssl_public_key_length + type: keyword - - name: reverse_distinct_count_of_destination_ip_address + - name: ssl_server_cipher type: long - - name: reverse_distinct_count_of_source_ipv4_address - type: long + - name: ssl_server_name + type: keyword - - name: reverse_distinct_count_of_destination_ipv4_address - type: long + - name: sta_ipv4_address + type: ip - - name: reverse_distinct_count_of_source_ipv6_address - type: long + - name: sta_mac_address + type: keyword - - name: reverse_distinct_count_of_destination_ipv6_address + - name: standard_deviation_interarrival_time type: long - - name: reverse_value_distribution_method + - name: standard_deviation_payload_length type: short - - name: reverse_rfc3550_jitter_milliseconds - type: long + - name: system_init_time_milliseconds + type: date - - name: reverse_rfc3550_jitter_microseconds + - name: tcp_ack_total_count type: long - - name: reverse_rfc3550_jitter_nanoseconds + - name: tcp_acknowledgement_number type: long - - name: reverse_dot1q_dei - type: short - - - name: reverse_dot1q_customer_dei - type: short + - name: tcp_control_bits + type: integer - - name: reverse_flow_selector_algorithm + - name: tcp_destination_port type: integer - - name: reverse_flow_selected_octet_delta_count + - name: tcp_fin_total_count type: long - - name: reverse_flow_selected_packet_delta_count - type: long + - name: tcp_header_length + type: short - - name: reverse_flow_selected_flow_delta_count + - name: tcp_options type: long - - name: reverse_selector_id_total_flows_observed + - name: tcp_psh_total_count type: long - - name: reverse_selector_id_total_flows_selected + - name: tcp_rst_total_count type: long - - name: reverse_sampling_flow_interval + - name: tcp_sequence_number type: long - - name: reverse_sampling_flow_spacing - type: long + - name: tcp_source_port + type: integer - - name: reverse_flow_sampling_time_interval + - name: tcp_syn_total_count type: long - - name: reverse_flow_sampling_time_spacing + - name: tcp_urg_total_count type: long - - name: reverse_hash_flow_domain + - name: tcp_urgent_pointer type: integer - - name: reverse_transport_octet_delta_count + - name: tcp_window_scale + type: integer + + - name: tcp_window_size + type: integer + + - name: template_id + type: integer + + - name: tftp_filename + type: keyword + + - name: tftp_mode + type: keyword + + - name: timestamp type: long - - name: reverse_transport_packet_delta_count + - name: timestamp_absolute_monitoring-interval type: long - - name: reverse_original_exporter_ipv4_address - type: ip + - name: total_length_ipv4 + type: integer - - name: reverse_original_exporter_ipv6_address - type: ip + - name: traffic_type + type: short - - name: reverse_original_observation_domain_id + - name: transport_octet_delta_count type: long - - name: reverse_intermediate_process_id + - name: transport_packet_delta_count type: long - - name: reverse_ignored_data_record_total_count - type: long + - name: tunnel_technology + type: keyword - - name: reverse_data_link_frame_type + - name: udp_destination_port type: integer - - name: reverse_section_offset + - name: udp_message_length type: integer - - name: reverse_section_exported_octets + - name: udp_source_port type: integer - - name: reverse_dot1q_service_instance_tag + - name: union_tcp_flags + type: short + + - name: upper_ci_limit + type: double + + - name: user_name type: keyword - - name: reverse_dot1q_service_instance_id + - name: username + type: keyword + + - name: value_distribution_method + type: short + + - name: viptela_vpn_id type: long - - name: reverse_dot1q_service_instance_priority + - name: virtual_station_interface_id type: short - - name: reverse_dot1q_customer_source_mac_address + - name: virtual_station_interface_name type: keyword - - name: reverse_dot1q_customer_destination_mac_address + - name: virtual_station_name type: keyword - - name: reverse_post_layer2_octet_delta_count - type: long + - name: virtual_station_uuid + type: short - - name: reverse_post_mcast_layer2_octet_delta_count - type: long + - name: vlan_id + type: integer - - name: reverse_post_layer2_octet_total_count - type: long + - name: vmware_egress_interface_attr + type: integer - - name: reverse_post_mcast_layer2_octet_total_count - type: long + - name: vmware_ingress_interface_attr + type: integer - - name: reverse_minimum_layer2_total_length - type: long + - name: vmware_tenant_dest_ipv4 + type: ip - - name: reverse_maximum_layer2_total_length - type: long + - name: vmware_tenant_dest_ipv6 + type: ip - - name: reverse_dropped_layer2_octet_delta_count - type: long + - name: vmware_tenant_dest_port + type: integer - - name: reverse_dropped_layer2_octet_total_count - type: long + - name: vmware_tenant_protocol + type: short - - name: reverse_ignored_layer2_octet_total_count - type: long + - name: vmware_tenant_source_ipv4 + type: ip - - name: reverse_not_sent_layer2_octet_total_count - type: long + - name: vmware_tenant_source_ipv6 + type: ip - - name: reverse_layer2_octet_delta_sum_of_squares - type: long + - name: vmware_tenant_source_port + type: integer - - name: reverse_layer2_octet_total_sum_of_squares - type: long + - name: vmware_vxlan_export_role + type: short - - name: reverse_layer2_frame_delta_count - type: long + - name: vpn_identifier + type: short - - name: reverse_layer2_frame_total_count - type: long + - name: vr_fname + type: keyword - - name: reverse_pseudo_wire_destination_ipv4_address + - name: waasoptimization_segment + type: short + + - name: wlan_channel_id + type: short + + - name: wlan_ssid + type: keyword + + - name: wtp_mac_address + type: keyword + + - name: xlate_destination_address_ip_v4 type: ip - - name: reverse_ignored_layer2_frame_total_count - type: long + - name: xlate_destination_port + type: integer - - name: viptela_vpn_id - type: long + - name: xlate_source_address_ip_v4 + type: ip + + - name: xlate_source_port + type: integer diff --git a/x-pack/filebeat/input/netflow/doc.go b/x-pack/filebeat/input/netflow/doc.go index 042c1e6f4d2c..c5fee475d7e4 100644 --- a/x-pack/filebeat/input/netflow/doc.go +++ b/x-pack/filebeat/input/netflow/doc.go @@ -4,7 +4,5 @@ package netflow -//go:generate go run fields_gen.go -output _meta/fields.yml --column-name=2 --column-type=3 --header _meta/fields.header.yml decoder/fields/ipfix-information-elements.csv -//go:generate go run fields_gen.go -output _meta/fields.yml --append --column-name=3 --column-type=4 --header _meta/fields.header.yml decoder/fields/cert_pen6871.csv -//go:generate go run fields_gen.go -output _meta/fields.yml --append --column-name=1 --column-type=4 --header _meta/fields.header.yml decoder/fields/cisco.csv -//go:generate go run fields_gen.go -output _meta/fields.yml --append --column-name=3 --column-type=4 --header _meta/fields.header.yml decoder/fields/assorted.csv +// Generate fields.yml for all Netflow fields. +//go:generate go run fields_gen.go --header _meta/fields.header.yml -output _meta/fields.yml decoder/fields/ipfix-information-elements.csv,2,3,true decoder/fields/cert_pen6871.csv,3,4,true decoder/fields/cisco.csv,1,4,true decoder/fields/assorted.csv,3,4,true diff --git a/x-pack/filebeat/input/netflow/fields.go b/x-pack/filebeat/input/netflow/fields.go index ffab1833db2b..5dd614b6b22c 100644 --- a/x-pack/filebeat/input/netflow/fields.go +++ b/x-pack/filebeat/input/netflow/fields.go @@ -19,5 +19,5 @@ func init() { // AssetNetflow returns asset data. // This is the base64 encoded gzipped contents of input/netflow. func AssetNetflow() string { - return "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" + return "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" } diff --git a/x-pack/filebeat/input/netflow/fields_gen.go b/x-pack/filebeat/input/netflow/fields_gen.go index 3f6081ea1b5c..5120ddad7f37 100644 --- a/x-pack/filebeat/input/netflow/fields_gen.go +++ b/x-pack/filebeat/input/netflow/fields_gen.go @@ -14,19 +14,18 @@ import ( "fmt" "io" "io/ioutil" + "log" "os" + "sort" + "strconv" "strings" "github.com/elastic/beats/v7/x-pack/filebeat/input/netflow" ) var ( - outputFile = flag.String("output", "zfields.go", "Output file") - nameCol = flag.Int("column-name", 0, "Index of column with field name") - typeCol = flag.Int("column-type", 0, "Index of column with field type") - indent = flag.Int("indent", 0, "Number of spaces to indent") + outputFile = flag.String("output", "fields.yml", "Output file") header = flag.String("header", "fields.header.yml", "File with header fields to prepend") - append = flag.Bool("append", false, "append to existing output file") ) // Mapping from NetFlow datatypes to Elasticsearch datatypes @@ -54,97 +53,142 @@ var typesToElasticTypes = map[string]string{ "ipv6address": "ip", } -var indentString string - -func makeIndent(n int) (s []byte) { - if n > 0 { - s = make([]byte, n) - for i := 0; i < n; i++ { - s[i] = ' ' - } - } - return s -} - -func write(w io.Writer, msg string) { - for _, line := range strings.Split(msg, "\n") { - writeLine(w, indentString+line+"\n") - } -} - -func writeLine(w io.Writer, line string) { - if n, err := w.Write([]byte(line)); err != nil || n != len(line) { - fmt.Fprintf(os.Stderr, "Failed writing to %s: %v\n", *outputFile, err) - os.Exit(4) - } -} - func usage() { - fmt.Fprintf(os.Stderr, "Usage: fields_gen [-output file.yml] [--column-{name|type}=N]* \n") + fmt.Fprintf(os.Stderr, "Usage: fields_gen [-indent=N] [-header=file] [-output=file.yml] [input-csv,name-column,type-column,has-header]+\n") flag.PrintDefaults() os.Exit(1) } -func requireColumn(colFlag *int, argument string) { - if *colFlag <= 0 { - fmt.Fprintf(os.Stderr, "Required argument %s not provided\n", argument) - usage() - } -} - func main() { + log.SetFlags(0) flag.Usage = usage flag.Parse() + if len(flag.Args()) == 0 { - fmt.Fprintf(os.Stderr, "No CSV file to parse provided\n") + fmt.Fprintf(os.Stderr, "No CSV file args to parse provided\n") usage() } - csvFile := flag.Args()[0] - if len(csvFile) == 0 { - fmt.Fprintf(os.Stderr, "Argument -input is required\n") - os.Exit(2) + + if err := generateFieldsYml(flag.Args()); err != nil { + log.Fatal(err) + } +} + +func generateFieldsYml(args []string) error { + // Parse the arguments containing file path and parsing parameters. + var csvFiles []CSVFile + for _, v := range flag.Args() { + csvFile, err := NewCSVFileFromArg(v) + if err != nil { + return err + } + csvFiles = append(csvFiles, *csvFile) } - requireColumn(nameCol, "--column-name") - requireColumn(typeCol, "--column-type") + // Read in all the field data. + var allFields []map[string]string + for _, csvFile := range csvFiles { + fields, err := csvFile.ReadFields() + if err != nil { + return err + } + allFields = append(allFields, fields) + } + + // Merge fields and resolve conflicts in the data types. + fields, err := mergeFields(allFields...) + if err != nil { + return err + } - indentString = string(makeIndent(*indent)) + // Sort fields alphabetically by name. + type netflowField struct { + Name, Type string + } + var sortedFields []netflowField + for k, v := range fields { + sortedFields = append(sortedFields, netflowField{k, v}) + } + sort.Slice(sortedFields, func(i, j int) bool { + return sortedFields[i].Name < sortedFields[j].Name + }) - fHandle, err := os.Open(csvFile) + headerHandle, err := os.Open(*header) if err != nil { - fmt.Fprintf(os.Stderr, "Failed to open %s: %v\n", csvFile, err) - os.Exit(2) + return fmt.Errorf("failed to open %s: %v", *header, err) } - defer fHandle.Close() + defer headerHandle.Close() - var outHandle *os.File - if *append { - outHandle, err = os.OpenFile(*outputFile, os.O_RDWR|os.O_APPEND, 0644) - } else { - outHandle, err = os.Create(*outputFile) + fileHeader, err := ioutil.ReadAll(headerHandle) + if err != nil { + return fmt.Errorf("failed to read header %s: %v", *header, err) } + + outHandle, err := os.Create(*outputFile) if err != nil { - fmt.Fprintf(os.Stderr, "Failed to open %s: %v\n", *outputFile, err) - os.Exit(3) + return fmt.Errorf("failed to open %s: %v", *outputFile, err) } defer outHandle.Close() - if !*append { - headerHandle, err := os.Open(*header) - if err != nil { - fmt.Fprintf(os.Stderr, "Failed to open %s: %v\n", *header, err) - os.Exit(2) - } - defer headerHandle.Close() + out := bufio.NewWriter(outHandle) + defer out.Flush() - fileHeader, err := ioutil.ReadAll(headerHandle) - if err != nil { - fmt.Fprintf(os.Stderr, "Failed to read %s: %v\n", *header, err) - os.Exit(2) - } - write(outHandle, string(fileHeader)) + // Write output file. + writeLine(out, strings.Repeat("#", 40)) + writeLine(out, "# This file is generated. Do not modify.") + writeLine(out, strings.Repeat("#", 40)) + writeLine(out, string(fileHeader)) + + for _, f := range sortedFields { + writeLine(out, " - name: "+f.Name) + writeLine(out, " type: "+f.Type) + writeLine(out, "") + } + return nil +} + +// CSVFile represents a CSV file with containing netflow field information +// (field name, data type). +type CSVFile struct { + Path string + NameColumn int + TypeColumn int + Header bool +} + +func NewCSVFileFromArg(arg string) (*CSVFile, error) { + r := csv.NewReader(strings.NewReader(arg)) + parts, err := r.Read() + if err != nil { + return nil, fmt.Errorf("failed to parse argument %q: %w", arg, err) + } + if len(parts) != 4 { + return nil, fmt.Errorf("input argument must consist of 4 parts [path,name-column,type-column,header]") } + a := &CSVFile{} + a.Path = parts[0] + if a.NameColumn, err = strconv.Atoi(parts[1]); err != nil { + return nil, fmt.Errorf("failed to parse name column %q: %w", parts[1], err) + } + if a.TypeColumn, err = strconv.Atoi(parts[2]); err != nil { + return nil, fmt.Errorf("failed to parse type column %q: %w", parts[2], err) + } + if a.Header, err = strconv.ParseBool(parts[3]); err != nil { + return nil, fmt.Errorf("failed to parse header column %q: %w", parts[3], err) + } + return a, nil +} + +// ReadFields reads the fields contained in the CSV file and returns a map +// of names to Elasticsearch data type. +func (a CSVFile) ReadFields() (map[string]string, error) { + fHandle, err := os.Open(a.Path) + if err != nil { + return nil, fmt.Errorf("failed to open %v: %w", a.Path, err) + } + defer fHandle.Close() + filtered := bytes.NewBuffer(nil) scanner := bufio.NewScanner(fHandle) for scanner.Scan() { @@ -154,10 +198,10 @@ func main() { } } if scanner.Err() != nil { - fmt.Fprintf(os.Stderr, "Failed reading from %s: %v\n", *header, err) - os.Exit(2) + return nil, fmt.Errorf("failed reading from %v: %w", a.Path, err) } + fields := map[string]string{} reader := csv.NewReader(filtered) for lineNum := 1; ; lineNum++ { record, err := reader.Read() @@ -165,22 +209,21 @@ func main() { if err == io.EOF { break } - fmt.Fprintf(os.Stderr, "read of %s failed: %v\n", csvFile, err) - os.Exit(5) + return nil, fmt.Errorf("read of %s failed: %v\n", a.Path, err) } + n := len(record) vars := make(map[string]string) for _, f := range []struct { column int name string }{ - {*nameCol, "name"}, - {*typeCol, "type"}, + {a.NameColumn, "name"}, + {a.TypeColumn, "type"}, } { if f.column > 0 { if f.column > n { - fmt.Fprintf(os.Stderr, "%s column is out of range in line %d\n", f.name, lineNum) - os.Exit(6) + return nil, fmt.Errorf("%s column is out of range in line %d\n", f.name, lineNum) } vars[f.name] = record[f.column-1] } @@ -188,13 +231,49 @@ func main() { if len(vars["type"]) == 0 { continue } + esType, found := typesToElasticTypes[strings.ToLower(vars["type"])] if !found { continue } - write(outHandle, fmt.Sprintf(` - name: %s - type: %s -`, - netflow.CamelCaseToSnakeCase(vars["name"]), esType)) + + fields[netflow.CamelCaseToSnakeCase(vars["name"])] = esType + } + + return fields, nil +} + +func mergeFields(allFields ...map[string]string) (map[string]string, error) { + out := map[string]string{} + for _, fields := range allFields { + for name, esType := range fields { + if existingESType, found := out[name]; found { + var err error + esType, err = resolveConflict(existingESType, esType) + if err != nil { + return nil, fmt.Errorf("field %v: %w", name, err) + } + } + out[name] = esType + } + } + return out, nil +} + +func resolveConflict(a, b string) (string, error) { + if a == b { + // No conflict. + return a, nil + } + if a == "keyword" || b == "keyword" { + // If either is a keyword then use that. + return "keyword", nil + } + return "", fmt.Errorf("cannot resolve type conflict between %v != %v", a, b) +} + +func writeLine(w io.StringWriter, line string) { + if _, err := w.WriteString(line + "\n"); err != nil { + log.Fatalf("Failed writing line: %v", err) } } From a4699b22ad3fd140d3a63803b8875a0b4690f750 Mon Sep 17 00:00:00 2001 From: Andrew Kroh Date: Fri, 12 Feb 2021 15:40:04 -0500 Subject: [PATCH 4/4] Remove indent from usage --- x-pack/filebeat/input/netflow/fields_gen.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/x-pack/filebeat/input/netflow/fields_gen.go b/x-pack/filebeat/input/netflow/fields_gen.go index 5120ddad7f37..66b77283c90b 100644 --- a/x-pack/filebeat/input/netflow/fields_gen.go +++ b/x-pack/filebeat/input/netflow/fields_gen.go @@ -54,7 +54,7 @@ var typesToElasticTypes = map[string]string{ } func usage() { - fmt.Fprintf(os.Stderr, "Usage: fields_gen [-indent=N] [-header=file] [-output=file.yml] [input-csv,name-column,type-column,has-header]+\n") + fmt.Fprintf(os.Stderr, "Usage: fields_gen [-header=file] [-output=file.yml] [input-csv,name-column,type-column,has-header]+\n") flag.PrintDefaults() os.Exit(1) }