11absent_over_time_events_received
22required_capability: ts_command_v0
3- required_capability: absent_over_time
43
54TS k8s
65| WHERE cluster == "prod" AND pod == "two"
@@ -23,7 +22,6 @@ false | two | 2024-05-10T00:22:00.000Z
2322
2423absent_over_time_of_long
2524required_capability: ts_command_v0
26- required_capability: absent_over_time
2725TS k8s | STATS is_present = max(absent_over_time(network.bytes_in)) BY cluster, time_bucket = tbucket(10minute) | SORT cluster, time_bucket | LIMIT 10;
2826
2927is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -40,8 +38,6 @@ false | staging | 2024-05-10T00:20:00.000Z
4038
4139absent_over_time_of_boolean
4240required_capability: ts_command_v0
43- required_capability: absent_over_time
44- required_capability: k8s_dataset_additional_fields
4541TS k8s | STATS is_present = max(absent_over_time(network.eth0.up)) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
4642
4743is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -58,8 +54,6 @@ false | staging | 2024-05-10T00:20:00.000Z
5854
5955absent_over_time_of_date_nanos
6056required_capability: ts_command_v0
61- required_capability: absent_over_time
62- required_capability: k8s_dataset_additional_fields
6357TS k8s | STATS is_present = max(absent_over_time(network.eth0.last_up)) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
6458
6559is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -76,8 +70,6 @@ false | staging | 2024-05-10T00:20:00.000Z
7670
7771absent_over_time_of_date
7872required_capability: ts_command_v0
79- required_capability: absent_over_time
80- required_capability: k8s_dataset_additional_fields
8173TS k8s | STATS is_present = max(absent_over_time(to_datetime(network.eth0.last_up))) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
8274
8375is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -94,8 +86,6 @@ false | staging | 2024-05-10T00:20:00.000Z
9486
9587absent_over_time_of_version
9688required_capability: ts_command_v0
97- required_capability: absent_over_time
98- required_capability: k8s_dataset_additional_fields
9989TS k8s | STATS is_present = max(absent_over_time(network.eth0.firmware_version)) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
10090
10191is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -112,8 +102,6 @@ false | staging | 2024-05-10T00:20:00.000Z
112102
113103absent_over_time_of_integer
114104required_capability: ts_command_v0
115- required_capability: absent_over_time
116- required_capability: k8s_dataset_additional_fields
117105TS k8s | STATS is_present = max(absent_over_time(network.eth0.currently_connected_clients)) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
118106
119107is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -130,7 +118,6 @@ false | staging | 2024-05-10T00:20:00.000Z
130118
131119absent_over_time_of_text
132120required_capability: ts_command_v0
133- required_capability: absent_over_time
134121TS k8s | STATS is_present = max(absent_over_time(event_log)) BY cluster, time_bucket = tbucket(10minute) | SORT cluster, time_bucket | LIMIT 10;
135122
136123is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -147,8 +134,6 @@ false | staging | 2024-05-10T00:20:00.000Z
147134
148135absent_over_time_of_keyword
149136required_capability: ts_command_v0
150- required_capability: absent_over_time
151- required_capability: k8s_dataset_additional_fields
152137TS k8s | STATS is_present = max(absent_over_time(network.eth0.tx)) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
153138
154139is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -182,8 +167,6 @@ false | staging | 2024-05-09T23:50:00.000Z
182167
183168absent_over_time_of_geopoint
184169required_capability: ts_command_v0
185- required_capability: absent_over_time
186- required_capability: k8s_datasets_geospatial_fields
187170TS k8s | STATS is_present = max(absent_over_time(event_city)) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
188171
189172is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -200,8 +183,6 @@ false | staging | 2024-05-10T00:20:00.000Z
200183
201184absent_over_time_of_geoshape
202185required_capability: ts_command_v0
203- required_capability: absent_over_time
204- required_capability: k8s_datasets_geospatial_fields
205186TS k8s | STATS is_present = max(absent_over_time(event_city_boundary)) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
206187
207188is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -218,8 +199,6 @@ false | staging | 2024-05-10T00:20:00.000Z
218199
219200absent_over_time_of_shape
220201required_capability: ts_command_v0
221- required_capability: absent_over_time
222- required_capability: k8s_datasets_geospatial_fields
223202TS k8s | STATS is_present = max(absent_over_time(event_shape)) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
224203
225204is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -236,8 +215,6 @@ false | staging | 2024-05-10T00:20:00.000Z
236215
237216absent_over_time_of_point
238217required_capability: ts_command_v0
239- required_capability: absent_over_time
240- required_capability: k8s_datasets_geospatial_fields
241218TS k8s | STATS is_present = max(absent_over_time(event_location)) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
242219
243220is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -254,7 +231,6 @@ false | staging | 2024-05-10T00:20:00.000Z
254231
255232absent_over_time_with_filtering
256233required_capability: ts_command_v0
257- required_capability: absent_over_time
258234TS k8s | WHERE pod != "three" | STATS is_present = max(absent_over_time(network.bytes_in)) BY cluster, time_bucket = tbucket(10 minute) | SORT time_bucket, cluster | LIMIT 10;
259235
260236is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -284,7 +260,6 @@ false | three | 2024-05-09T23:40:00.000Z
284260
285261eval_on_absent_over_time
286262required_capability: ts_command_v0
287- required_capability: absent_over_time
288263TS k8s | STATS is_present = max(absent_over_time(network.bytes_in)) BY pod, time_bucket = tbucket(10 minute) | EVAL int = to_integer(is_present) | LIMIT 10 | SORT time_bucket, pod;
289264
290265is_present:boolean | pod:keyword | time_bucket:datetime | int:integer
@@ -301,7 +276,6 @@ false | two | 2024-05-10T00:20:00.000Z | 0
301276
302277absent_over_time_events_received_as_integer
303278required_capability: ts_command_v0
304- required_capability: absent_over_time
305279
306280TS k8s
307281| WHERE cluster == "prod" AND pod == "two"
0 commit comments