1
1
absent_over_time_events_received
2
2
required_capability: ts_command_v0
3
- required_capability: absent_over_time
4
3
5
4
TS k8s
6
5
| WHERE cluster == "prod" AND pod == "two"
@@ -23,7 +22,6 @@ false | two | 2024-05-10T00:22:00.000Z
23
22
24
23
absent_over_time_of_long
25
24
required_capability: ts_command_v0
26
- required_capability: absent_over_time
27
25
TS k8s | STATS is_present = max(absent_over_time(network.bytes_in)) BY cluster, time_bucket = tbucket(10minute) | SORT cluster, time_bucket | LIMIT 10;
28
26
29
27
is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -40,8 +38,6 @@ false | staging | 2024-05-10T00:20:00.000Z
40
38
41
39
absent_over_time_of_boolean
42
40
required_capability: ts_command_v0
43
- required_capability: absent_over_time
44
- required_capability: k8s_dataset_additional_fields
45
41
TS k8s | STATS is_present = max(absent_over_time(network.eth0.up)) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
46
42
47
43
is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -58,8 +54,6 @@ false | staging | 2024-05-10T00:20:00.000Z
58
54
59
55
absent_over_time_of_date_nanos
60
56
required_capability: ts_command_v0
61
- required_capability: absent_over_time
62
- required_capability: k8s_dataset_additional_fields
63
57
TS k8s | STATS is_present = max(absent_over_time(network.eth0.last_up)) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
64
58
65
59
is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -76,8 +70,6 @@ false | staging | 2024-05-10T00:20:00.000Z
76
70
77
71
absent_over_time_of_date
78
72
required_capability: ts_command_v0
79
- required_capability: absent_over_time
80
- required_capability: k8s_dataset_additional_fields
81
73
TS k8s | STATS is_present = max(absent_over_time(to_datetime(network.eth0.last_up))) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
82
74
83
75
is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -94,8 +86,6 @@ false | staging | 2024-05-10T00:20:00.000Z
94
86
95
87
absent_over_time_of_version
96
88
required_capability: ts_command_v0
97
- required_capability: absent_over_time
98
- required_capability: k8s_dataset_additional_fields
99
89
TS k8s | STATS is_present = max(absent_over_time(network.eth0.firmware_version)) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
100
90
101
91
is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -112,8 +102,6 @@ false | staging | 2024-05-10T00:20:00.000Z
112
102
113
103
absent_over_time_of_integer
114
104
required_capability: ts_command_v0
115
- required_capability: absent_over_time
116
- required_capability: k8s_dataset_additional_fields
117
105
TS k8s | STATS is_present = max(absent_over_time(network.eth0.currently_connected_clients)) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
118
106
119
107
is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -130,7 +118,6 @@ false | staging | 2024-05-10T00:20:00.000Z
130
118
131
119
absent_over_time_of_text
132
120
required_capability: ts_command_v0
133
- required_capability: absent_over_time
134
121
TS k8s | STATS is_present = max(absent_over_time(event_log)) BY cluster, time_bucket = tbucket(10minute) | SORT cluster, time_bucket | LIMIT 10;
135
122
136
123
is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -147,8 +134,6 @@ false | staging | 2024-05-10T00:20:00.000Z
147
134
148
135
absent_over_time_of_keyword
149
136
required_capability: ts_command_v0
150
- required_capability: absent_over_time
151
- required_capability: k8s_dataset_additional_fields
152
137
TS k8s | STATS is_present = max(absent_over_time(network.eth0.tx)) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
153
138
154
139
is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -182,8 +167,6 @@ false | staging | 2024-05-09T23:50:00.000Z
182
167
183
168
absent_over_time_of_geopoint
184
169
required_capability: ts_command_v0
185
- required_capability: absent_over_time
186
- required_capability: k8s_datasets_geospatial_fields
187
170
TS k8s | STATS is_present = max(absent_over_time(event_city)) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
188
171
189
172
is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -200,8 +183,6 @@ false | staging | 2024-05-10T00:20:00.000Z
200
183
201
184
absent_over_time_of_geoshape
202
185
required_capability: ts_command_v0
203
- required_capability: absent_over_time
204
- required_capability: k8s_datasets_geospatial_fields
205
186
TS k8s | STATS is_present = max(absent_over_time(event_city_boundary)) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
206
187
207
188
is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -218,8 +199,6 @@ false | staging | 2024-05-10T00:20:00.000Z
218
199
219
200
absent_over_time_of_shape
220
201
required_capability: ts_command_v0
221
- required_capability: absent_over_time
222
- required_capability: k8s_datasets_geospatial_fields
223
202
TS k8s | STATS is_present = max(absent_over_time(event_shape)) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
224
203
225
204
is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -236,8 +215,6 @@ false | staging | 2024-05-10T00:20:00.000Z
236
215
237
216
absent_over_time_of_point
238
217
required_capability: ts_command_v0
239
- required_capability: absent_over_time
240
- required_capability: k8s_datasets_geospatial_fields
241
218
TS k8s | STATS is_present = max(absent_over_time(event_location)) BY cluster, time_bucket = tbucket(10minute) | SORT time_bucket, cluster | LIMIT 10;
242
219
243
220
is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -254,7 +231,6 @@ false | staging | 2024-05-10T00:20:00.000Z
254
231
255
232
absent_over_time_with_filtering
256
233
required_capability: ts_command_v0
257
- required_capability: absent_over_time
258
234
TS k8s | WHERE pod != "three" | STATS is_present = max(absent_over_time(network.bytes_in)) BY cluster, time_bucket = tbucket(10 minute) | SORT time_bucket, cluster | LIMIT 10;
259
235
260
236
is_present:boolean | cluster:keyword | time_bucket:datetime
@@ -284,7 +260,6 @@ false | three | 2024-05-09T23:40:00.000Z
284
260
285
261
eval_on_absent_over_time
286
262
required_capability: ts_command_v0
287
- required_capability: absent_over_time
288
263
TS k8s | STATS is_present = max(absent_over_time(network.bytes_in)) BY pod, time_bucket = tbucket(10 minute) | EVAL int = to_integer(is_present) | LIMIT 10 | SORT time_bucket, pod;
289
264
290
265
is_present:boolean | pod:keyword | time_bucket:datetime | int:integer
@@ -301,7 +276,6 @@ false | two | 2024-05-10T00:20:00.000Z | 0
301
276
302
277
absent_over_time_events_received_as_integer
303
278
required_capability: ts_command_v0
304
- required_capability: absent_over_time
305
279
306
280
TS k8s
307
281
| WHERE cluster == "prod" AND pod == "two"
0 commit comments