Add dev stacks
This commit is contained in:
24
stacks/network-mcp/ilm/network-events-ilm.json
Normal file
24
stacks/network-mcp/ilm/network-events-ilm.json
Normal file
@@ -0,0 +1,24 @@
|
||||
{
|
||||
"policy": {
|
||||
"phases": {
|
||||
"hot": {
|
||||
"min_age": "0ms",
|
||||
"actions": {}
|
||||
},
|
||||
"warm": {
|
||||
"min_age": "7d",
|
||||
"actions": {
|
||||
"forcemerge": {
|
||||
"max_num_segments": 1
|
||||
}
|
||||
}
|
||||
},
|
||||
"delete": {
|
||||
"min_age": "90d",
|
||||
"actions": {
|
||||
"delete": {}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
39
stacks/network-mcp/ilm/network-events-template.json
Normal file
39
stacks/network-mcp/ilm/network-events-template.json
Normal file
@@ -0,0 +1,39 @@
|
||||
{
|
||||
"index_patterns": ["network-events-*"],
|
||||
"template": {
|
||||
"settings": {
|
||||
"index.lifecycle.name": "network-events-ilm"
|
||||
},
|
||||
"mappings": {
|
||||
"properties": {
|
||||
"@timestamp": { "type": "date" },
|
||||
"host": {
|
||||
"properties": {
|
||||
"ip": { "type": "ip" },
|
||||
"ips": { "type": "ip" },
|
||||
"mac": { "type": "keyword" },
|
||||
"macs": { "type": "keyword" },
|
||||
"id": { "type": "keyword" },
|
||||
"name": { "type": "keyword" },
|
||||
"hostname": { "type": "keyword" },
|
||||
"hostnames": { "type": "keyword" }
|
||||
}
|
||||
},
|
||||
"ports": {
|
||||
"properties": {
|
||||
"port": { "type": "integer" },
|
||||
"proto": { "type": "keyword" },
|
||||
"state": { "type": "keyword" },
|
||||
"service": {
|
||||
"properties": {
|
||||
"name": { "type": "keyword" },
|
||||
"product": { "type": "keyword" },
|
||||
"version": { "type": "keyword" }
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
40
stacks/network-mcp/ilm/network-hosts-template.json
Normal file
40
stacks/network-mcp/ilm/network-hosts-template.json
Normal file
@@ -0,0 +1,40 @@
|
||||
{
|
||||
"index_patterns": ["network-hosts"],
|
||||
"template": {
|
||||
"mappings": {
|
||||
"properties": {
|
||||
"host": {
|
||||
"properties": {
|
||||
"id": { "type": "keyword" },
|
||||
"name": { "type": "keyword" },
|
||||
"fqdn": { "type": "keyword" },
|
||||
"ips": { "type": "ip" },
|
||||
"macs": { "type": "keyword" },
|
||||
"first_seen": { "type": "date" },
|
||||
"last_seen": { "type": "date" },
|
||||
"last_state_change": { "type": "date" },
|
||||
"state": { "type": "keyword" },
|
||||
"role": { "type": "keyword" },
|
||||
"tags": { "type": "keyword" },
|
||||
"notes": { "type": "text" }
|
||||
}
|
||||
},
|
||||
"ports": {
|
||||
"properties": {
|
||||
"port": { "type": "integer" },
|
||||
"proto": { "type": "keyword" },
|
||||
"state": { "type": "keyword" },
|
||||
"first_seen": { "type": "date" },
|
||||
"last_seen": { "type": "date" },
|
||||
"service": {
|
||||
"properties": {
|
||||
"name": { "type": "keyword" },
|
||||
"product": { "type": "keyword" }
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user