Skip to content

Conversation

@parkertimmins
Copy link
Contributor

@parkertimmins parkertimmins commented May 23, 2025

Remove _id stored field and inverted index from logsdb, replacing with a doc value. Investigate effects of change on storage size.

elasticsearchmachine and others added 15 commits May 23, 2025 19:51
Source only snapshots only include stored fields, no doc values.
Also tried adding doc values to source only snapshots, but snapshots
only include necessary files. Tried including dvd/dvm files if field
name is _id, but doc values could be in compound file, and can't include
these.

Instead try loading _id from _source. But this only works if _id was
provided in source (and it probably wasn't). Currently this just
produces a null _id value. This may be okay, since source only snapshots
usually need to be reindexed for any searching. Though not having an _id
field could be problematic.
@parkertimmins
Copy link
Contributor Author

parkertimmins commented May 31, 2025

Benchmark results

Test commit: 2f3b488 (this PR)
Baseline commit: b8e2fce

Ran the elastic/logs rally track on baseline and test version. The total dataset size on the baseline branch was 41.36 GB and the test was 40.02 GB, or a 3.24% reduction in on-disk size. This is a non-trivial decrease, but may not warrant the reduction in query performance that this change will cause. Additionally, this change may not actually be possible without changes to Lucene. I believe that for deletes and updates, Lucene expects _id to be a stored fields. I'm far from confident of this, so it may be worth further investigation, but so far I have been unable to get delete working with doc_value ids.

The following table shows the per-dataset size difference, along with the difference in the _id field. For baseline, the _id consists of a stored field and inverted index, whereas for the test branch, the _id field consists of only keyword doc values.

Base Total Test Total Percent Diff Base _id Total Test _id total Percent Diff
1.43 GB 1.38 GB -3.88% 66.19 MB 50.56 MB -23.62%
600.05 MB 560.98 MB -6.51% 53.71 MB 41.48 MB -22.76%
18.17 GB 16.46 GB -9.40% 1.44 GB 1.16 GB -19.42%
8.36 GB 9.20 GB 9.20% 663.49 MB 651.86 MB -1.75%
729.87 MB 695.66 MB -4.69% 52.14 MB 67.00 MB 22.18%
264.24 MB 258.85 MB -2.04% 20.74 MB 27.97 MB 25.87%
487.52 MB 465.98 MB -4.42% 46.50 MB 43.12 MB -7.27%
6.37 GB 6.26 GB -1.79% 160.95 MB 147.92 MB -8.10%
508.23 MB 494.25 MB -2.75% 31.92 MB 27.77 MB -13.00%
211.46 MB 208.37 MB -1.46% 11.29 MB 16.97 MB 33.49%
911.23 MB 863.51 MB -5.24% 71.93 MB 92.64 MB 22.36%
2.77 GB 2.74 GB -1.23% 141.52 MB 90.84 MB -35.81%
901.83 MB 849.48 MB -5.80% 78.89 MB 88.00 MB 10.35%
1.99 GB 1.84 GB -7.95% 173.64 MB 209.76 MB 17.22%

All but one dataset saw a decrease in on-disk size. This was despite the fact that, surprisingly, for 6 datasets the storage for the _id sets increased. The decrease is size was entirely in stored fields and inverted indices. This means that changing _id from stored field+inverted index to doc values, caused other stored fields and inverted indices to decrease in size. My best guess for why this happened is that removing _id from stored fields caused other stored fields to compress better. (Though I am not certain if this makes any sense.)

For comparison, the following shows the total size for each data sets broken out into stored fields, inverted index, and docs values.

base stored test stored base inverted test inverted base doc test doc
255.18 MB 207.28 MB 464.33 MB 413.12 MB 514.67 MB 564.69 MB
162.48 MB 130.91 MB 124.13 MB 81.61 MB 121.76 MB 162.96 MB
7.08 GB 5.69 GB 5.52 GB 4.41 GB 2.66 GB 3.65 GB
3.27 GB 3.18 GB 2.53 GB 2.46 GB 1.22 GB 2.05 GB
138.16 MB 88.00 MB 223.49 MB 177.77 MB 172.02 MB 238.38 MB
52.96 MB 37.59 MB 59.88 MB 43.45 MB 60.27 MB 88.00 MB
100.40 MB 64.03 MB 85.54 MB 60.00 MB 136.86 MB 179.43 MB
668.12 MB 536.17 MB 1.92 GB 1.80 GB 2.92 GB 3.07 GB
202.04 MB 183.35 MB 127.76 MB 108.10 MB 63.52 MB 91.19 MB
22.26 MB 13.28 MB 67.13 MB 57.06 MB 73.35 MB 90.23 MB
200.74 MB 127.28 MB 208.45 MB 147.94 MB 200.32 MB 292.47 MB
1.31 GB 1.24 GB 734.25 MB 681.94 MB 401.29 MB 491.81 MB
130.14 MB 49.73 MB 257.20 MB 200.58 MB 275.78 MB 363.51 MB
402.23 MB 149.84 MB 538.52 MB 430.64 MB 469.20 MB 678.53 MB

Finally, here is a comparison of the rally test. (Though we shouldn't put to much stock in these results, and there is probably some optimization to be done).

  |                                                        Metric |                                                              Task |         Baseline |       Contender |          Diff |   Unit |   Diff % |
  |--------------------------------------------------------------:|------------------------------------------------------------------:|-----------------:|----------------:|--------------:|-------:|---------:|
  |                    Cumulative indexing time of primary shards |                                                                   |   1408.44        |  1432.22        |      23.7717  |    min |   +1.69% |
  |             Min cumulative indexing time across primary shard |                                                                   |     12.9522      |    12.5814      |      -0.3708  |    min |   -2.86% |
  |          Median cumulative indexing time across primary shard |                                                                   |     48.7526      |    48.9841      |       0.23148 |    min |   +0.47% |
  |             Max cumulative indexing time across primary shard |                                                                   |    531.612       |   512.452       |     -19.1599  |    min |   -3.60% |
  |           Cumulative indexing throttle time of primary shards |                                                                   |      0           |     0           |       0       |    min |    0.00% |
  |    Min cumulative indexing throttle time across primary shard |                                                                   |      0           |     0           |       0       |    min |    0.00% |
  | Median cumulative indexing throttle time across primary shard |                                                                   |      0           |     0           |       0       |    min |    0.00% |
  |    Max cumulative indexing throttle time across primary shard |                                                                   |      0           |     0           |       0       |    min |    0.00% |
  |                       Cumulative merge time of primary shards |                                                                   |    503.105       |   445.748       |     -57.3575  |    min |  -11.40% |
  |                      Cumulative merge count of primary shards |                                                                   |    691           |   615           |     -76       |        |  -11.00% |
  |                Min cumulative merge time across primary shard |                                                                   |      2.06285     |     2.00703     |      -0.05582 |    min |   -2.71% |
  |             Median cumulative merge time across primary shard |                                                                   |      8.75387     |     8.37645     |      -0.37742 |    min |   -4.31% |
  |                Max cumulative merge time across primary shard |                                                                   |    232.56        |   198.03        |     -34.5307  |    min |  -14.85% |
  |              Cumulative merge throttle time of primary shards |                                                                   |    127.74        |   101.029       |     -26.7116  |    min |  -20.91% |
  |       Min cumulative merge throttle time across primary shard |                                                                   |      0.263833    |     0.314067    |       0.05023 |    min |  +19.04% |
  |    Median cumulative merge throttle time across primary shard |                                                                   |      1.47726     |     1.56825     |       0.09099 |    min |   +6.16% |
  |       Max cumulative merge throttle time across primary shard |                                                                   |     49.1919      |    38.0799      |     -11.112   |    min |  -22.59% |
  |                     Cumulative refresh time of primary shards |                                                                   |     37.9808      |    43.7357      |       5.7549  |    min |  +15.15% |
  |                    Cumulative refresh count of primary shards |                                                                   |   3236           |  3054           |    -182       |        |   -5.62% |
  |              Min cumulative refresh time across primary shard |                                                                   |      0.166283    |     0.106517    |      -0.05977 |    min |  -35.94% |
  |           Median cumulative refresh time across primary shard |                                                                   |      0.409775    |     0.535908    |       0.12613 |    min |  +30.78% |
  |              Max cumulative refresh time across primary shard |                                                                   |     22.0562      |    23.5164      |       1.46018 |    min |   +6.62% |
  |                       Cumulative flush time of primary shards |                                                                   |     70.8028      |    84.1515      |      13.3487  |    min |  +18.85% |
  |                      Cumulative flush count of primary shards |                                                                   |   1773           |  1705           |     -68       |        |   -3.84% |
  |                Min cumulative flush time across primary shard |                                                                   |      1.62657     |     2.32738     |       0.70082 |    min |  +43.09% |
  |             Median cumulative flush time across primary shard |                                                                   |      4.24597     |     5.10915     |       0.86318 |    min |  +20.33% |
  |                Max cumulative flush time across primary shard |                                                                   |     12.6817      |    13.6068      |       0.9251  |    min |   +7.29% |
  |                                       Total Young Gen GC time |                                                                   |     89.233       |   121.27        |      32.037   |      s |  +35.90% |
  |                                      Total Young Gen GC count |                                                                   |   6654           |  6580           |     -74       |        |   -1.11% |
  |                                         Total Old Gen GC time |                                                                   |      0           |     0           |       0       |      s |    0.00% |
  |                                        Total Old Gen GC count |                                                                   |      0           |     0           |       0       |        |    0.00% |
  |                                                  Dataset size |                                                                   |     41.3599      |    40.0198      |      -1.34013 |     GB |   -3.24% |
  |                                                    Store size |                                                                   |     41.3599      |    40.0198      |      -1.34013 |     GB |   -3.24% |
  |                                                 Translog size |                                                                   |      7.17118e-07 |     7.17118e-07 |       0       |     GB |    0.00% |
  |                                        Heap used for segments |                                                                   |      0           |     0           |       0       |     MB |    0.00% |
  |                                      Heap used for doc values |                                                                   |      0           |     0           |       0       |     MB |    0.00% |
  |                                           Heap used for terms |                                                                   |      0           |     0           |       0       |     MB |    0.00% |
  |                                           Heap used for norms |                                                                   |      0           |     0           |       0       |     MB |    0.00% |
  |                                          Heap used for points |                                                                   |      0           |     0           |       0       |     MB |    0.00% |
  |                                   Heap used for stored fields |                                                                   |      0           |     0           |       0       |     MB |    0.00% |
  |                                                 Segment count |                                                                   |     14           |    14           |       0       |        |    0.00% |
  |                                   Total Ingest Pipeline count |                                                                   |      4.88617e+08 |     4.88641e+08 |   24000       |        |    0.00% |
  |                                    Total Ingest Pipeline time |                                                                   |      4.13076e+07 |     4.04186e+07 | -889029       |     ms |   -2.15% |
  |                                  Total Ingest Pipeline failed |                                                                   |      0           |     0           |       0       |        |    0.00% |
  |                                                Min Throughput |                                                  insert-pipelines |     13.1452      |    13.7547      |       0.60953 |  ops/s |   +4.64% |
  |                                               Mean Throughput |                                                  insert-pipelines |     13.1452      |    13.7547      |       0.60953 |  ops/s |   +4.64% |
  |                                             Median Throughput |                                                  insert-pipelines |     13.1452      |    13.7547      |       0.60953 |  ops/s |   +4.64% |
  |                                                Max Throughput |                                                  insert-pipelines |     13.1452      |    13.7547      |       0.60953 |  ops/s |   +4.64% |
  |                                      100th percentile latency |                                                  insert-pipelines |   1090.58        |  1036.68        |     -53.8948  |     ms |   -4.94% |
  |                                 100th percentile service time |                                                  insert-pipelines |   1090.58        |  1036.68        |     -53.8948  |     ms |   -4.94% |
  |                                                    error rate |                                                  insert-pipelines |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                                        insert-ilm |     22.4806      |    24.2739      |       1.79321 |  ops/s |   +7.98% |
  |                                               Mean Throughput |                                                        insert-ilm |     22.4806      |    24.2739      |       1.79321 |  ops/s |   +7.98% |
  |                                             Median Throughput |                                                        insert-ilm |     22.4806      |    24.2739      |       1.79321 |  ops/s |   +7.98% |
  |                                                Max Throughput |                                                        insert-ilm |     22.4806      |    24.2739      |       1.79321 |  ops/s |   +7.98% |
  |                                      100th percentile latency |                                                        insert-ilm |     43.3683      |    39.9141      |      -3.45424 |     ms |   -7.96% |
  |                                 100th percentile service time |                                                        insert-ilm |     43.3683      |    39.9141      |      -3.45424 |     ms |   -7.96% |
  |                                                    error rate |                                                        insert-ilm |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                            validate-package-template-installation |     47.5458      |    44.6663      |      -2.87949 |  ops/s |   -6.06% |
  |                                               Mean Throughput |                            validate-package-template-installation |     47.5458      |    44.6663      |      -2.87949 |  ops/s |   -6.06% |
  |                                             Median Throughput |                            validate-package-template-installation |     47.5458      |    44.6663      |      -2.87949 |  ops/s |   -6.06% |
  |                                                Max Throughput |                            validate-package-template-installation |     47.5458      |    44.6663      |      -2.87949 |  ops/s |   -6.06% |
  |                                      100th percentile latency |                            validate-package-template-installation |     20.7052      |    22.094       |       1.38879 |     ms |   +6.71% |
  |                                 100th percentile service time |                            validate-package-template-installation |     20.7052      |    22.094       |       1.38879 |     ms |   +6.71% |
  |                                                    error rate |                            validate-package-template-installation |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                   update-custom-package-templates |     29.0623      |    28.1558      |      -0.90648 |  ops/s |   -3.12% |
  |                                               Mean Throughput |                                   update-custom-package-templates |     29.0623      |    28.1558      |      -0.90648 |  ops/s |   -3.12% |
  |                                             Median Throughput |                                   update-custom-package-templates |     29.0623      |    28.1558      |      -0.90648 |  ops/s |   -3.12% |
  |                                                Max Throughput |                                   update-custom-package-templates |     29.0623      |    28.1558      |      -0.90648 |  ops/s |   -3.12% |
  |                                      100th percentile latency |                                   update-custom-package-templates |    412.586       |   425.922       |      13.3357  |     ms |   +3.23% |
  |                                 100th percentile service time |                                   update-custom-package-templates |    412.586       |   425.922       |      13.3357  |     ms |   +3.23% |
  |                                                    error rate |                                   update-custom-package-templates |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                                        bulk-index |    475.421       |  1095           |     619.583   | docs/s | +130.32% |
  |                                               Mean Throughput |                                                        bulk-index |  57635.5         | 59054.8         |    1419.34    | docs/s |   +2.46% |
  |                                             Median Throughput |                                                        bulk-index |  57785.5         | 59142           |    1356.42    | docs/s |   +2.35% |
  |                                                Max Throughput |                                                        bulk-index |  58745.4         | 60557.2         |    1811.8     | docs/s |   +3.08% |
  |                                       50th percentile latency |                                                        bulk-index |    317.143       |  1630.47        |    1313.33    |     ms | +414.11% |
  |                                       90th percentile latency |                                                        bulk-index |    635.494       |  2923.74        |    2288.24    |     ms | +360.07% |
  |                                       99th percentile latency |                                                        bulk-index |   1385.96        |  4164.41        |    2778.45    |     ms | +200.47% |
  |                                     99.9th percentile latency |                                                        bulk-index |   2884.1         |  7145.75        |    4261.64    |     ms | +147.76% |
  |                                    99.99th percentile latency |                                                        bulk-index |   5312.52        |  9515.93        |    4203.41    |     ms |  +79.12% |
  |                                      100th percentile latency |                                                        bulk-index |   8640.49        | 12173.9         |    3533.37    |     ms |  +40.89% |
  |                                  50th percentile service time |                                                        bulk-index |    318.967       |  1634.74        |    1315.77    |     ms | +412.51% |
  |                                  90th percentile service time |                                                        bulk-index |    635.183       |  2931.62        |    2296.44    |     ms | +361.54% |
  |                                  99th percentile service time |                                                        bulk-index |   1381.62        |  4164.03        |    2782.41    |     ms | +201.39% |
  |                                99.9th percentile service time |                                                        bulk-index |   2895.87        |  7114.56        |    4218.69    |     ms | +145.68% |
  |                               99.99th percentile service time |                                                        bulk-index |   5305.36        |  9492.2         |    4186.83    |     ms |  +78.92% |
  |                                 100th percentile service time |                                                        bulk-index |   8640.49        | 12173.9         |    3533.37    |     ms |  +40.89% |
  |                                                    error rate |                                                        bulk-index |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                 discovery-search-request-size-100 |      7.86392     |     7.72137     |      -0.14256 |  ops/s |   -1.81% |
  |                                               Mean Throughput |                                 discovery-search-request-size-100 |     12.1576      |    12.2281      |       0.07045 |  ops/s |   +0.58% |
  |                                             Median Throughput |                                 discovery-search-request-size-100 |     12.1576      |    12.2281      |       0.07045 |  ops/s |   +0.58% |
  |                                                Max Throughput |                                 discovery-search-request-size-100 |     16.4513      |    16.7348      |       0.28347 |  ops/s |   +1.72% |
  |                                       50th percentile latency |                                 discovery-search-request-size-100 |     37.2006      |    33.8339      |      -3.36678 |     ms |   -9.05% |
  |                                       90th percentile latency |                                 discovery-search-request-size-100 |     47.0715      |    52.9603      |       5.88879 |     ms |  +12.51% |
  |                                      100th percentile latency |                                 discovery-search-request-size-100 |    323.618       |   317.929       |      -5.68918 |     ms |   -1.76% |
  |                                  50th percentile service time |                                 discovery-search-request-size-100 |     37.2006      |    33.8339      |      -3.36678 |     ms |   -9.05% |
  |                                  90th percentile service time |                                 discovery-search-request-size-100 |     47.0715      |    52.9603      |       5.88879 |     ms |  +12.51% |
  |                                 100th percentile service time |                                 discovery-search-request-size-100 |    323.618       |   317.929       |      -5.68918 |     ms |   -1.76% |
  |                                                    error rate |                                 discovery-search-request-size-100 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                 discovery-search-request-size-500 |      9.80421     |    10.7385      |       0.93429 |  ops/s |   +9.53% |
  |                                               Mean Throughput |                                 discovery-search-request-size-500 |     10.491       |    11.1723      |       0.68128 |  ops/s |   +6.49% |
  |                                             Median Throughput |                                 discovery-search-request-size-500 |     10.6407      |    11.2452      |       0.60451 |  ops/s |   +5.68% |
  |                                                Max Throughput |                                 discovery-search-request-size-500 |     10.8785      |    11.4603      |       0.5818  |  ops/s |   +5.35% |
  |                                       50th percentile latency |                                 discovery-search-request-size-500 |     88.9886      |    85.0593      |      -3.92929 |     ms |   -4.42% |
  |                                       90th percentile latency |                                 discovery-search-request-size-500 |     96.0357      |    88.722       |      -7.31366 |     ms |   -7.62% |
  |                                      100th percentile latency |                                 discovery-search-request-size-500 |    112.343       |   114.024       |       1.68118 |     ms |   +1.50% |
  |                                  50th percentile service time |                                 discovery-search-request-size-500 |     88.9886      |    85.0593      |      -3.92929 |     ms |   -4.42% |
  |                                  90th percentile service time |                                 discovery-search-request-size-500 |     96.0357      |    88.722       |      -7.31366 |     ms |   -7.62% |
  |                                 100th percentile service time |                                 discovery-search-request-size-500 |    112.343       |   114.024       |       1.68118 |     ms |   +1.50% |
  |                                                    error rate |                                 discovery-search-request-size-500 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                discovery-search-request-size-1000 |      6.29618     |     6.4792      |       0.18302 |  ops/s |   +2.91% |
  |                                               Mean Throughput |                                discovery-search-request-size-1000 |      6.34584     |     6.57348     |       0.22764 |  ops/s |   +3.59% |
  |                                             Median Throughput |                                discovery-search-request-size-1000 |      6.3635      |     6.58917     |       0.22567 |  ops/s |   +3.55% |
  |                                                Max Throughput |                                discovery-search-request-size-1000 |      6.38909     |     6.61054     |       0.22144 |  ops/s |   +3.47% |
  |                                       50th percentile latency |                                discovery-search-request-size-1000 |    154.23        |   150.025       |      -4.20563 |     ms |   -2.73% |
  |                                       90th percentile latency |                                discovery-search-request-size-1000 |    162.463       |   153.278       |      -9.18545 |     ms |   -5.65% |
  |                                      100th percentile latency |                                discovery-search-request-size-1000 |    171.457       |   158.131       |     -13.3262  |     ms |   -7.77% |
  |                                  50th percentile service time |                                discovery-search-request-size-1000 |    154.23        |   150.025       |      -4.20563 |     ms |   -2.73% |
  |                                  90th percentile service time |                                discovery-search-request-size-1000 |    162.463       |   153.278       |      -9.18545 |     ms |   -5.65% |
  |                                 100th percentile service time |                                discovery-search-request-size-1000 |    171.457       |   158.131       |     -13.3262  |     ms |   -7.77% |
  |                                                    error rate |                                discovery-search-request-size-1000 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                                   discover/search |      0.00114544  |     0.00114547  |       0       |  ops/s |    0.00% |
  |                                               Mean Throughput |                                                   discover/search |      0.00265448  |     0.00270793  |       5e-05   |  ops/s |   +2.01% |
  |                                             Median Throughput |                                                   discover/search |      0.00273226  |     0.00291099  |       0.00018 |  ops/s |   +6.54% |
  |                                                Max Throughput |                                                   discover/search |      0.00384718  |     0.00384724  |       0       |  ops/s |    0.00% |
  |                                       50th percentile latency |                                                   discover/search |    599.483       |   586.185       |     -13.2978  |     ms |   -2.22% |
  |                                       90th percentile latency |                                                   discover/search |   1056.1         |  1048.19        |      -7.90619 |     ms |   -0.75% |
  |                                      100th percentile latency |                                                   discover/search |   1291.22        |  1288.93        |      -2.28918 |     ms |   -0.18% |
  |                                  50th percentile service time |                                                   discover/search |    596.645       |   585.124       |     -11.5206  |     ms |   -1.93% |
  |                                  90th percentile service time |                                                   discover/search |    737.944       |   744.19        |       6.24594 |     ms |   +0.85% |
  |                                 100th percentile service time |                                                   discover/search |    773.645       |   772.173       |      -1.47198 |     ms |   -0.19% |
  |                                                    error rate |                                                   discover/search |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                                discover/visualize |      0.00115747  |     0.00115744  |      -0       |  ops/s |   -0.00% |
  |                                               Mean Throughput |                                                discover/visualize |      0.00424332  |     0.00424346  |       0       |  ops/s |    0.00% |
  |                                             Median Throughput |                                                discover/visualize |      0.00415854  |     0.00415848  |      -0       |  ops/s |   -0.00% |
  |                                                Max Throughput |                                                discover/visualize |      0.00703703  |     0.00703692  |      -0       |  ops/s |   -0.00% |
  |                                       50th percentile latency |                                                discover/visualize |    554.425       |   537.49        |     -16.9355  |     ms |   -3.05% |
  |                                       90th percentile latency |                                                discover/visualize |   8107.97        |  6800.86        |   -1307.11    |     ms |  -16.12% |
  |                                      100th percentile latency |                                                discover/visualize |  11252.9         |  9972.94        |   -1279.98    |     ms |  -11.37% |
  |                                  50th percentile service time |                                                discover/visualize |    552.637       |   536.309       |     -16.3278  |     ms |   -2.95% |
  |                                  90th percentile service time |                                                discover/visualize |   3443.87        |  3293.31        |    -150.559   |     ms |   -4.37% |
  |                                 100th percentile service time |                                                discover/visualize |  11250.5         |  9969.84        |   -1280.66    |     ms |  -11.38% |
  |                                                    error rate |                                                discover/visualize |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                                             kafka |      0.00250887  |     0.00250886  |      -0       |  ops/s |   -0.00% |
  |                                               Mean Throughput |                                                             kafka |      0.00523738  |     0.00523738  |      -0       |  ops/s |   -0.00% |
  |                                             Median Throughput |                                                             kafka |      0.00510488  |     0.00510488  |      -0       |  ops/s |   -0.00% |
  |                                                Max Throughput |                                                             kafka |      0.00919644  |     0.00919642  |      -0       |  ops/s |   -0.00% |
  |                                       50th percentile latency |                                                             kafka |    470.768       |   460.941       |      -9.82674 |     ms |   -2.09% |
  |                                       90th percentile latency |                                                             kafka |    665.419       |   751.503       |      86.0843  |     ms |  +12.94% |
  |                                      100th percentile latency |                                                             kafka |    935.103       |   964.39        |      29.2871  |     ms |   +3.13% |
  |                                  50th percentile service time |                                                             kafka |    469.623       |   459.01        |     -10.6132  |     ms |   -2.26% |
  |                                  90th percentile service time |                                                             kafka |    663.253       |   749.658       |      86.405   |     ms |  +13.03% |
  |                                 100th percentile service time |                                                             kafka |    933.156       |   962.092       |      28.9361  |     ms |   +3.10% |
  |                                                    error rate |                                                             kafka |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                                             nginx |      0.00322647  |     0.00322657  |       0       |  ops/s |    0.00% |
  |                                               Mean Throughput |                                                             nginx |      0.0113399   |     0.0113401   |       0       |  ops/s |    0.00% |
  |                                             Median Throughput |                                                             nginx |      0.0113289   |     0.011329    |       0       |  ops/s |    0.00% |
  |                                                Max Throughput |                                                             nginx |      0.0169377   |     0.0169411   |       0       |  ops/s |   +0.02% |
  |                                       50th percentile latency |                                                             nginx |   1755.08        |  1755.23        |       0.14502 |     ms |    0.01% |
  |                                       90th percentile latency |                                                             nginx |   4142.43        |  4001.91        |    -140.521   |     ms |   -3.39% |
  |                                      100th percentile latency |                                                             nginx |   9188.22        |  8814.56        |    -373.655   |     ms |   -4.07% |
  |                                  50th percentile service time |                                                             nginx |   1738.72        |  1740.19        |       1.47369 |     ms |   +0.08% |
  |                                  90th percentile service time |                                                             nginx |   3842.31        |  3915.72        |      73.4039  |     ms |   +1.91% |
  |                                 100th percentile service time |                                                             nginx |   9185.32        |  8813.48        |    -371.844   |     ms |   -4.05% |
  |                                                    error rate |                                                             nginx |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                                            apache |      0.0113956   |     0.0113955   |      -0       |  ops/s |   -0.00% |
  |                                               Mean Throughput |                                                            apache |      0.0355237   |     0.0355235   |      -0       |  ops/s |   -0.00% |
  |                                             Median Throughput |                                                            apache |      0.03922     |     0.0392197   |      -0       |  ops/s |   -0.00% |
  |                                                Max Throughput |                                                            apache |      0.068119    |     0.0681176   |      -0       |  ops/s |   -0.00% |
  |                                       50th percentile latency |                                                            apache |    397.681       |   380.736       |     -16.9445  |     ms |   -4.26% |
  |                                       90th percentile latency |                                                            apache |    845.488       |   845.236       |      -0.25272 |     ms |   -0.03% |
  |                                      100th percentile latency |                                                            apache |   1691.74        |  1732.03        |      40.2908  |     ms |   +2.38% |
  |                                  50th percentile service time |                                                            apache |    395.102       |   378.214       |     -16.8877  |     ms |   -4.27% |
  |                                  90th percentile service time |                                                            apache |    843.284       |   842.92        |      -0.36362 |     ms |   -0.04% |
  |                                 100th percentile service time |                                                            apache |   1689.32        |  1729.64        |      40.3119  |     ms |   +2.39% |
  |                                                    error rate |                                                            apache |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                                       system/auth |      0.027945    |     0.027945    |      -0       |  ops/s |   -0.00% |
  |                                               Mean Throughput |                                                       system/auth |      0.0470602   |     0.0470596   |      -0       |  ops/s |   -0.00% |
  |                                             Median Throughput |                                                       system/auth |      0.049052    |     0.0490519   |      -0       |  ops/s |   -0.00% |
  |                                                Max Throughput |                                                       system/auth |      0.0668286   |     0.0668285   |      -0       |  ops/s |   -0.00% |
  |                                       50th percentile latency |                                                       system/auth |    325.51        |   325.792       |       0.2825  |     ms |   +0.09% |
  |                                       90th percentile latency |                                                       system/auth |    415.948       |   444.638       |      28.6903  |     ms |   +6.90% |
  |                                       99th percentile latency |                                                       system/auth |   3212.14        |  3615.11        |     402.968   |     ms |  +12.55% |
  |                                      100th percentile latency |                                                       system/auth |   3408.55        |  3642.69        |     234.135   |     ms |   +6.87% |
  |                                  50th percentile service time |                                                       system/auth |    323.426       |   323.734       |       0.30859 |     ms |   +0.10% |
  |                                  90th percentile service time |                                                       system/auth |    414.027       |   443.404       |      29.3764  |     ms |   +7.10% |
  |                                  99th percentile service time |                                                       system/auth |   3195.75        |  3593.03        |     397.281   |     ms |  +12.43% |
  |                                 100th percentile service time |                                                       system/auth |   3407.33        |  3640.88        |     233.544   |     ms |   +6.85% |
  |                                                    error rate |                                                       system/auth |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                           system/syslog/dashboard |      0.0120584   |     0.0120587   |       0       |  ops/s |    0.00% |
  |                                               Mean Throughput |                                           system/syslog/dashboard |      0.0257425   |     0.0256248   |      -0.00012 |  ops/s |   -0.46% |
  |                                             Median Throughput |                                           system/syslog/dashboard |      0.0252096   |     0.0251832   |      -3e-05   |  ops/s |   -0.10% |
  |                                                Max Throughput |                                           system/syslog/dashboard |      0.0333825   |     0.0333855   |       0       |  ops/s |    0.01% |
  |                                       50th percentile latency |                                           system/syslog/dashboard |    525.406       |   447.363       |     -78.043   |     ms |  -14.85% |
  |                                       90th percentile latency |                                           system/syslog/dashboard |   1023.82        |   984.312       |     -39.5067  |     ms |   -3.86% |
  |                                      100th percentile latency |                                           system/syslog/dashboard |   3015.02        |  3015.67        |       0.65552 |     ms |   +0.02% |
  |                                  50th percentile service time |                                           system/syslog/dashboard |    511.997       |   429.509       |     -82.4873  |     ms |  -16.11% |
  |                                  90th percentile service time |                                           system/syslog/dashboard |   1006.57        |   967.868       |     -38.7019  |     ms |   -3.84% |
  |                                 100th percentile service time |                                           system/syslog/dashboard |   3014.12        |  3014.15        |       0.02979 |     ms |    0.00% |
  |                                                    error rate |                                           system/syslog/dashboard |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                                system/syslog/lens |      0.00622729  |     0.0062273   |       0       |  ops/s |    0.00% |
  |                                               Mean Throughput |                                                system/syslog/lens |      0.0107395   |     0.0107395   |       0       |  ops/s |    0.00% |
  |                                             Median Throughput |                                                system/syslog/lens |      0.0108108   |     0.0108108   |       0       |  ops/s |    0.00% |
  |                                                Max Throughput |                                                system/syslog/lens |      0.0144265   |     0.0144265   |       0       |  ops/s |    0.00% |
  |                                       50th percentile latency |                                                system/syslog/lens |    852.43        |   852.746       |       0.31583 |     ms |   +0.04% |
  |                                       90th percentile latency |                                                system/syslog/lens |   1492.87        |  1433.28        |     -59.5919  |     ms |   -3.99% |
  |                                      100th percentile latency |                                                system/syslog/lens |   3226.25        |  3313.89        |      87.6345  |     ms |   +2.72% |
  |                                  50th percentile service time |                                                system/syslog/lens |    851.564       |   851.305       |      -0.25854 |     ms |   -0.03% |
  |                                  90th percentile service time |                                                system/syslog/lens |   1491.2         |  1431.18        |     -60.0114  |     ms |   -4.02% |
  |                                 100th percentile service time |                                                system/syslog/lens |   3225.48        |  3313.2         |      87.7141  |     ms |   +2.72% |
  |                                                    error rate |                                                system/syslog/lens |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                                   mysql/dashboard |      0.00112501  |     0.00112501  |      -0       |  ops/s |   -0.00% |
  |                                               Mean Throughput |                                                   mysql/dashboard |      0.00505703  |     0.00505702  |      -0       |  ops/s |   -0.00% |
  |                                             Median Throughput |                                                   mysql/dashboard |      0.00525094  |     0.00525094  |      -0       |  ops/s |   -0.00% |
  |                                                Max Throughput |                                                   mysql/dashboard |      0.00741977  |     0.00741975  |      -0       |  ops/s |   -0.00% |
  |                                       50th percentile latency |                                                   mysql/dashboard |    317.028       |   317.77        |       0.74208 |     ms |   +0.23% |
  |                                       90th percentile latency |                                                   mysql/dashboard |    717.315       |   728.702       |      11.3875  |     ms |   +1.59% |
  |                                      100th percentile latency |                                                   mysql/dashboard |   1504.68        |  1543.62        |      38.9432  |     ms |   +2.59% |
  |                                  50th percentile service time |                                                   mysql/dashboard |    315.554       |   316.208       |       0.65402 |     ms |   +0.21% |
  |                                  90th percentile service time |                                                   mysql/dashboard |    620.144       |   630.553       |      10.4089  |     ms |   +1.68% |
  |                                 100th percentile service time |                                                   mysql/dashboard |   1503.36        |  1542.03        |      38.6713  |     ms |   +2.57% |
  |                                                    error rate |                                                   mysql/dashboard |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                                             redis |      0.00477854  |     0.00477855  |       0       |  ops/s |    0.00% |
  |                                               Mean Throughput |                                                             redis |      0.014449    |     0.0144489   |      -0       |  ops/s |   -0.00% |
  |                                             Median Throughput |                                                             redis |      0.0103474   |     0.0103474   |       0       |  ops/s |    0.00% |
  |                                                Max Throughput |                                                             redis |      0.0338699   |     0.0338699   |       0       |  ops/s |    0.00% |
  |                                       50th percentile latency |                                                             redis |    514.94        |   518.495       |       3.55533 |     ms |   +0.69% |
  |                                       90th percentile latency |                                                             redis |   1708.75        |  2095.95        |     387.196   |     ms |  +22.66% |
  |                                      100th percentile latency |                                                             redis |   2802.79        |  3432           |     629.208   |     ms |  +22.45% |
  |                                  50th percentile service time |                                                             redis |    454.16        |   459.109       |       4.94833 |     ms |   +1.09% |
  |                                  90th percentile service time |                                                             redis |   1697.97        |  2094.85        |     396.88    |     ms |  +23.37% |
  |                                 100th percentile service time |                                                             redis |   2801.34        |  3430.54        |     629.205   |     ms |  +22.46% |
  |                                                    error rate |                                                             redis |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                                        mysql/lens |      0.00337623  |     0.00337623  |      -0       |  ops/s |   -0.00% |
  |                                               Mean Throughput |                                                        mysql/lens |      0.0136496   |     0.013649    |      -0       |  ops/s |   -0.00% |
  |                                             Median Throughput |                                                        mysql/lens |      0.0140878   |     0.0140878   |      -0       |  ops/s |   -0.00% |
  |                                                Max Throughput |                                                        mysql/lens |      0.022395    |     0.0223949   |      -0       |  ops/s |   -0.00% |
  |                                       50th percentile latency |                                                        mysql/lens |   1003.89        |  1003.99        |       0.09601 |     ms |    0.01% |
  |                                       90th percentile latency |                                                        mysql/lens |   1680.01        |  1882.5         |     202.482   |     ms |  +12.05% |
  |                                      100th percentile latency |                                                        mysql/lens |   1777.03        |  2160.95        |     383.922   |     ms |  +21.60% |
  |                                  50th percentile service time |                                                        mysql/lens |   1001.22        |  1001.38        |       0.15942 |     ms |   +0.02% |
  |                                  90th percentile service time |                                                        mysql/lens |   1506.83        |  1714.27        |     207.44    |     ms |  +13.77% |
  |                                 100th percentile service time |                                                        mysql/lens |   1724.88        |  1929.9         |     205.02    |     ms |  +11.89% |
  |                                                    error rate |                                                        mysql/lens |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                               postgresql/overview |      0.00256515  |     0.00256515  |      -0       |  ops/s |   -0.00% |
  |                                               Mean Throughput |                                               postgresql/overview |      0.0277644   |     0.0277644   |       0       |  ops/s |    0.00% |
  |                                             Median Throughput |                                               postgresql/overview |      0.0294596   |     0.0294596   |       0       |  ops/s |    0.00% |
  |                                                Max Throughput |                                               postgresql/overview |      0.0405392   |     0.0405393   |       0       |  ops/s |    0.00% |
  |                                       50th percentile latency |                                               postgresql/overview |   1022.1         |  1021.12        |      -0.98499 |     ms |   -0.10% |
  |                                       90th percentile latency |                                               postgresql/overview |   1111.6         |  1111.89        |       0.29725 |     ms |   +0.03% |
  |                                       99th percentile latency |                                               postgresql/overview |   1674.72        |  1674.8         |       0.08557 |     ms |    0.01% |
  |                                      100th percentile latency |                                               postgresql/overview |   1675.93        |  1675.41        |      -0.52051 |     ms |   -0.03% |
  |                                  50th percentile service time |                                               postgresql/overview |   1018.64        |  1018.83        |       0.18826 |     ms |   +0.02% |
  |                                  90th percentile service time |                                               postgresql/overview |   1051.26        |  1052.21        |       0.94702 |     ms |   +0.09% |
  |                                  99th percentile service time |                                               postgresql/overview |   1673.35        |  1673.5         |       0.14327 |     ms |    0.01% |
  |                                 100th percentile service time |                                               postgresql/overview |   1674.46        |  1673.58        |      -0.88464 |     ms |   -0.05% |
  |                                                    error rate |                                               postgresql/overview |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                               postgresql/duration |      0.0110374   |     0.0110375   |       0       |  ops/s |    0.00% |
  |                                               Mean Throughput |                                               postgresql/duration |      0.0198031   |     0.0198036   |       0       |  ops/s |    0.00% |
  |                                             Median Throughput |                                               postgresql/duration |      0.0153795   |     0.0153797   |       0       |  ops/s |    0.00% |
  |                                                Max Throughput |                                               postgresql/duration |      0.0377074   |     0.037709    |       0       |  ops/s |    0.00% |
  |                                       50th percentile latency |                                               postgresql/duration |    319.66        |   320.892       |       1.23129 |     ms |   +0.39% |
  |                                       90th percentile latency |                                               postgresql/duration |    558.809       |   565.562       |       6.75342 |     ms |   +1.21% |
  |                                      100th percentile latency |                                               postgresql/duration |   3074.49        |  3215.36        |     140.87    |     ms |   +4.58% |
  |                                  50th percentile service time |                                               postgresql/duration |    317.38        |   317.901       |       0.52139 |     ms |   +0.16% |
  |                                  90th percentile service time |                                               postgresql/duration |    475.002       |   460.131       |     -14.8706  |     ms |   -3.13% |
  |                                 100th percentile service time |                                               postgresql/duration |   3071.83        |  3212.86        |     141.033   |     ms |   +4.59% |
  |                                                    error rate |                                               postgresql/duration |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                  esql_basic_count_group_0_limit_0 |     64.0207      |    57.8853      |      -6.13546 |  ops/s |   -9.58% |
  |                                               Mean Throughput |                                  esql_basic_count_group_0_limit_0 |     64.0207      |    57.8853      |      -6.13546 |  ops/s |   -9.58% |
  |                                             Median Throughput |                                  esql_basic_count_group_0_limit_0 |     64.0207      |    57.8853      |      -6.13546 |  ops/s |   -9.58% |
  |                                                Max Throughput |                                  esql_basic_count_group_0_limit_0 |     64.0207      |    57.8853      |      -6.13546 |  ops/s |   -9.58% |
  |                                       50th percentile latency |                                  esql_basic_count_group_0_limit_0 |      3.71979     |     4.20233     |       0.48253 |     ms |  +12.97% |
  |                                       90th percentile latency |                                  esql_basic_count_group_0_limit_0 |      5.28047     |     5.38429     |       0.10383 |     ms |   +1.97% |
  |                                      100th percentile latency |                                  esql_basic_count_group_0_limit_0 |      6.5931      |     6.9089      |       0.3158  |     ms |   +4.79% |
  |                                  50th percentile service time |                                  esql_basic_count_group_0_limit_0 |      3.71979     |     4.20233     |       0.48253 |     ms |  +12.97% |
  |                                  90th percentile service time |                                  esql_basic_count_group_0_limit_0 |      5.28047     |     5.38429     |       0.10383 |     ms |   +1.97% |
  |                                 100th percentile service time |                                  esql_basic_count_group_0_limit_0 |      6.5931      |     6.9089      |       0.3158  |     ms |   +4.79% |
  |                                                    error rate |                                  esql_basic_count_group_0_limit_0 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                  esql_basic_count_group_1_limit_0 |    228.245       |   214.16        |     -14.0854  |  ops/s |   -6.17% |
  |                                               Mean Throughput |                                  esql_basic_count_group_1_limit_0 |    228.245       |   214.16        |     -14.0854  |  ops/s |   -6.17% |
  |                                             Median Throughput |                                  esql_basic_count_group_1_limit_0 |    228.245       |   214.16        |     -14.0854  |  ops/s |   -6.17% |
  |                                                Max Throughput |                                  esql_basic_count_group_1_limit_0 |    228.245       |   214.16        |     -14.0854  |  ops/s |   -6.17% |
  |                                       50th percentile latency |                                  esql_basic_count_group_1_limit_0 |      3.29801     |     3.60489     |       0.30687 |     ms |   +9.30% |
  |                                       90th percentile latency |                                  esql_basic_count_group_1_limit_0 |      4.34629     |     4.43522     |       0.08892 |     ms |   +2.05% |
  |                                      100th percentile latency |                                  esql_basic_count_group_1_limit_0 |      5.11525     |     4.79569     |      -0.31955 |     ms |   -6.25% |
  |                                  50th percentile service time |                                  esql_basic_count_group_1_limit_0 |      3.29801     |     3.60489     |       0.30687 |     ms |   +9.30% |
  |                                  90th percentile service time |                                  esql_basic_count_group_1_limit_0 |      4.34629     |     4.43522     |       0.08892 |     ms |   +2.05% |
  |                                 100th percentile service time |                                  esql_basic_count_group_1_limit_0 |      5.11525     |     4.79569     |      -0.31955 |     ms |   -6.25% |
  |                                                    error rate |                                  esql_basic_count_group_1_limit_0 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                  esql_basic_count_group_2_limit_0 |    277.916       |   272.645       |      -5.27121 |  ops/s |   -1.90% |
  |                                               Mean Throughput |                                  esql_basic_count_group_2_limit_0 |    277.916       |   272.645       |      -5.27121 |  ops/s |   -1.90% |
  |                                             Median Throughput |                                  esql_basic_count_group_2_limit_0 |    277.916       |   272.645       |      -5.27121 |  ops/s |   -1.90% |
  |                                                Max Throughput |                                  esql_basic_count_group_2_limit_0 |    277.916       |   272.645       |      -5.27121 |  ops/s |   -1.90% |
  |                                       50th percentile latency |                                  esql_basic_count_group_2_limit_0 |      2.80383     |     2.9388      |       0.13497 |     ms |   +4.81% |
  |                                       90th percentile latency |                                  esql_basic_count_group_2_limit_0 |      3.15481     |     3.2682      |       0.11339 |     ms |   +3.59% |
  |                                      100th percentile latency |                                  esql_basic_count_group_2_limit_0 |      4.83747     |     3.83758     |      -0.99989 |     ms |  -20.67% |
  |                                  50th percentile service time |                                  esql_basic_count_group_2_limit_0 |      2.80383     |     2.9388      |       0.13497 |     ms |   +4.81% |
  |                                  90th percentile service time |                                  esql_basic_count_group_2_limit_0 |      3.15481     |     3.2682      |       0.11339 |     ms |   +3.59% |
  |                                 100th percentile service time |                                  esql_basic_count_group_2_limit_0 |      4.83747     |     3.83758     |      -0.99989 |     ms |  -20.67% |
  |                                                    error rate |                                  esql_basic_count_group_2_limit_0 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                  esql_basic_count_group_3_limit_0 |    311.131       |   284.176       |     -26.9553  |  ops/s |   -8.66% |
  |                                               Mean Throughput |                                  esql_basic_count_group_3_limit_0 |    311.131       |   284.176       |     -26.9553  |  ops/s |   -8.66% |
  |                                             Median Throughput |                                  esql_basic_count_group_3_limit_0 |    311.131       |   284.176       |     -26.9553  |  ops/s |   -8.66% |
  |                                                Max Throughput |                                  esql_basic_count_group_3_limit_0 |    311.131       |   284.176       |     -26.9553  |  ops/s |   -8.66% |
  |                                       50th percentile latency |                                  esql_basic_count_group_3_limit_0 |      2.6006      |     2.86509     |       0.2645  |     ms |  +10.17% |
  |                                       90th percentile latency |                                  esql_basic_count_group_3_limit_0 |      2.86035     |     3.11919     |       0.25885 |     ms |   +9.05% |
  |                                      100th percentile latency |                                  esql_basic_count_group_3_limit_0 |      3.56395     |     4.40654     |       0.84259 |     ms |  +23.64% |
  |                                  50th percentile service time |                                  esql_basic_count_group_3_limit_0 |      2.6006      |     2.86509     |       0.2645  |     ms |  +10.17% |
  |                                  90th percentile service time |                                  esql_basic_count_group_3_limit_0 |      2.86035     |     3.11919     |       0.25885 |     ms |   +9.05% |
  |                                 100th percentile service time |                                  esql_basic_count_group_3_limit_0 |      3.56395     |     4.40654     |       0.84259 |     ms |  +23.64% |
  |                                                    error rate |                                  esql_basic_count_group_3_limit_0 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                  esql_basic_count_group_4_limit_0 |    305.013       |   272.288       |     -32.7245  |  ops/s |  -10.73% |
  |                                               Mean Throughput |                                  esql_basic_count_group_4_limit_0 |    305.013       |   272.288       |     -32.7245  |  ops/s |  -10.73% |
  |                                             Median Throughput |                                  esql_basic_count_group_4_limit_0 |    305.013       |   272.288       |     -32.7245  |  ops/s |  -10.73% |
  |                                                Max Throughput |                                  esql_basic_count_group_4_limit_0 |    305.013       |   272.288       |     -32.7245  |  ops/s |  -10.73% |
  |                                       50th percentile latency |                                  esql_basic_count_group_4_limit_0 |      2.63531     |     2.98838     |       0.35307 |     ms |  +13.40% |
  |                                       90th percentile latency |                                  esql_basic_count_group_4_limit_0 |      2.82875     |     3.55124     |       0.72249 |     ms |  +25.54% |
  |                                      100th percentile latency |                                  esql_basic_count_group_4_limit_0 |      3.97334     |     3.96622     |      -0.00711 |     ms |   -0.18% |
  |                                  50th percentile service time |                                  esql_basic_count_group_4_limit_0 |      2.63531     |     2.98838     |       0.35307 |     ms |  +13.40% |
  |                                  90th percentile service time |                                  esql_basic_count_group_4_limit_0 |      2.82875     |     3.55124     |       0.72249 |     ms |  +25.54% |
  |                                 100th percentile service time |                                  esql_basic_count_group_4_limit_0 |      3.97334     |     3.96622     |      -0.00711 |     ms |   -0.18% |
  |                                                    error rate |                                  esql_basic_count_group_4_limit_0 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |  esql_time_range_and_date_histogram_two_groups_pre_filter_limit_0 |    107.341       |   100.734       |      -6.60696 |  ops/s |   -6.16% |
  |                                               Mean Throughput |  esql_time_range_and_date_histogram_two_groups_pre_filter_limit_0 |    107.341       |   100.734       |      -6.60696 |  ops/s |   -6.16% |
  |                                             Median Throughput |  esql_time_range_and_date_histogram_two_groups_pre_filter_limit_0 |    107.341       |   100.734       |      -6.60696 |  ops/s |   -6.16% |
  |                                                Max Throughput |  esql_time_range_and_date_histogram_two_groups_pre_filter_limit_0 |    107.341       |   100.734       |      -6.60696 |  ops/s |   -6.16% |
  |                                       50th percentile latency |  esql_time_range_and_date_histogram_two_groups_pre_filter_limit_0 |      5.69584     |     5.92632     |       0.23048 |     ms |   +4.05% |
  |                                       90th percentile latency |  esql_time_range_and_date_histogram_two_groups_pre_filter_limit_0 |      7.54779     |     7.59377     |       0.04598 |     ms |   +0.61% |
  |                                      100th percentile latency |  esql_time_range_and_date_histogram_two_groups_pre_filter_limit_0 |      8.12412     |     8.6598      |       0.53568 |     ms |   +6.59% |
  |                                  50th percentile service time |  esql_time_range_and_date_histogram_two_groups_pre_filter_limit_0 |      5.69584     |     5.92632     |       0.23048 |     ms |   +4.05% |
  |                                  90th percentile service time |  esql_time_range_and_date_histogram_two_groups_pre_filter_limit_0 |      7.54779     |     7.59377     |       0.04598 |     ms |   +0.61% |
  |                                 100th percentile service time |  esql_time_range_and_date_histogram_two_groups_pre_filter_limit_0 |      8.12412     |     8.6598      |       0.53568 |     ms |   +6.59% |
  |                                                    error rate |  esql_time_range_and_date_histogram_two_groups_pre_filter_limit_0 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput | esql_time_range_and_date_histogram_two_groups_post_filter_limit_0 |    229.492       |   190.541       |     -38.9509  |  ops/s |  -16.97% |
  |                                               Mean Throughput | esql_time_range_and_date_histogram_two_groups_post_filter_limit_0 |    229.492       |   190.541       |     -38.9509  |  ops/s |  -16.97% |
  |                                             Median Throughput | esql_time_range_and_date_histogram_two_groups_post_filter_limit_0 |    229.492       |   190.541       |     -38.9509  |  ops/s |  -16.97% |
  |                                                Max Throughput | esql_time_range_and_date_histogram_two_groups_post_filter_limit_0 |    229.492       |   190.541       |     -38.9509  |  ops/s |  -16.97% |
  |                                       50th percentile latency | esql_time_range_and_date_histogram_two_groups_post_filter_limit_0 |      3.58653     |     4.5457      |       0.95916 |     ms |  +26.74% |
  |                                       90th percentile latency | esql_time_range_and_date_histogram_two_groups_post_filter_limit_0 |      4.10996     |     5.12905     |       1.0191  |     ms |  +24.80% |
  |                                      100th percentile latency | esql_time_range_and_date_histogram_two_groups_post_filter_limit_0 |      4.89312     |     6.13204     |       1.23892 |     ms |  +25.32% |
  |                                  50th percentile service time | esql_time_range_and_date_histogram_two_groups_post_filter_limit_0 |      3.58653     |     4.5457      |       0.95916 |     ms |  +26.74% |
  |                                  90th percentile service time | esql_time_range_and_date_histogram_two_groups_post_filter_limit_0 |      4.10996     |     5.12905     |       1.0191  |     ms |  +24.80% |
  |                                 100th percentile service time | esql_time_range_and_date_histogram_two_groups_post_filter_limit_0 |      4.89312     |     6.13204     |       1.23892 |     ms |  +25.32% |
  |                                                    error rate | esql_time_range_and_date_histogram_two_groups_post_filter_limit_0 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                           esql_dissect_duration_and_stats_limit_0 |    294.981       |   265.265       |     -29.7158  |  ops/s |  -10.07% |
  |                                               Mean Throughput |                           esql_dissect_duration_and_stats_limit_0 |    294.981       |   265.265       |     -29.7158  |  ops/s |  -10.07% |
  |                                             Median Throughput |                           esql_dissect_duration_and_stats_limit_0 |    294.981       |   265.265       |     -29.7158  |  ops/s |  -10.07% |
  |                                                Max Throughput |                           esql_dissect_duration_and_stats_limit_0 |    294.981       |   265.265       |     -29.7158  |  ops/s |  -10.07% |
  |                                       50th percentile latency |                           esql_dissect_duration_and_stats_limit_0 |      2.4565      |     2.78452     |       0.32803 |     ms |  +13.35% |
  |                                       90th percentile latency |                           esql_dissect_duration_and_stats_limit_0 |      2.70604     |     3.17553     |       0.46949 |     ms |  +17.35% |
  |                                      100th percentile latency |                           esql_dissect_duration_and_stats_limit_0 |      2.81794     |     3.82869     |       1.01075 |     ms |  +35.87% |
  |                                  50th percentile service time |                           esql_dissect_duration_and_stats_limit_0 |      2.4565      |     2.78452     |       0.32803 |     ms |  +13.35% |
  |                                  90th percentile service time |                           esql_dissect_duration_and_stats_limit_0 |      2.70604     |     3.17553     |       0.46949 |     ms |  +17.35% |
  |                                 100th percentile service time |                           esql_dissect_duration_and_stats_limit_0 |      2.81794     |     3.82869     |       1.01075 |     ms |  +35.87% |
  |                                                    error rate |                           esql_dissect_duration_and_stats_limit_0 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                          esql_basic_count_group_0 |    120.113       |   105.032       |     -15.0818  |  ops/s |  -12.56% |
  |                                               Mean Throughput |                                          esql_basic_count_group_0 |    120.113       |   105.032       |     -15.0818  |  ops/s |  -12.56% |
  |                                             Median Throughput |                                          esql_basic_count_group_0 |    120.113       |   105.032       |     -15.0818  |  ops/s |  -12.56% |
  |                                                Max Throughput |                                          esql_basic_count_group_0 |    120.113       |   105.032       |     -15.0818  |  ops/s |  -12.56% |
  |                                       50th percentile latency |                                          esql_basic_count_group_0 |      4.75601     |     5.64296     |       0.88695 |     ms |  +18.65% |
  |                                       90th percentile latency |                                          esql_basic_count_group_0 |      5.55681     |     6.767       |       1.21019 |     ms |  +21.78% |
  |                                      100th percentile latency |                                          esql_basic_count_group_0 |      9.5742      |    10.06        |       0.48585 |     ms |   +5.07% |
  |                                  50th percentile service time |                                          esql_basic_count_group_0 |      4.75601     |     5.64296     |       0.88695 |     ms |  +18.65% |
  |                                  90th percentile service time |                                          esql_basic_count_group_0 |      5.55681     |     6.767       |       1.21019 |     ms |  +21.78% |
  |                                 100th percentile service time |                                          esql_basic_count_group_0 |      9.5742      |    10.06        |       0.48585 |     ms |   +5.07% |
  |                                                    error rate |                                          esql_basic_count_group_0 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                          esql_basic_count_group_1 |      0.612182    |     0.602473    |      -0.00971 |  ops/s |   -1.59% |
  |                                               Mean Throughput |                                          esql_basic_count_group_1 |      0.625925    |     0.614316    |      -0.01161 |  ops/s |   -1.85% |
  |                                             Median Throughput |                                          esql_basic_count_group_1 |      0.627611    |     0.615652    |      -0.01196 |  ops/s |   -1.91% |
  |                                                Max Throughput |                                          esql_basic_count_group_1 |      0.631065    |     0.618354    |      -0.01271 |  ops/s |   -2.01% |
  |                                       50th percentile latency |                                          esql_basic_count_group_1 |   1567.03        |  1597.38        |      30.3496  |     ms |   +1.94% |
  |                                       90th percentile latency |                                          esql_basic_count_group_1 |   1611.61        |  1642.99        |      31.3883  |     ms |   +1.95% |
  |                                      100th percentile latency |                                          esql_basic_count_group_1 |   1626.76        |  1658.19        |      31.4379  |     ms |   +1.93% |
  |                                  50th percentile service time |                                          esql_basic_count_group_1 |   1567.03        |  1597.38        |      30.3496  |     ms |   +1.94% |
  |                                  90th percentile service time |                                          esql_basic_count_group_1 |   1611.61        |  1642.99        |      31.3883  |     ms |   +1.95% |
  |                                 100th percentile service time |                                          esql_basic_count_group_1 |   1626.76        |  1658.19        |      31.4379  |     ms |   +1.93% |
  |                                                    error rate |                                          esql_basic_count_group_1 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                          esql_basic_count_group_2 |      0.262391    |     0.251795    |      -0.0106  |  ops/s |   -4.04% |
  |                                               Mean Throughput |                                          esql_basic_count_group_2 |      0.280355    |     0.270856    |      -0.0095  |  ops/s |   -3.39% |
  |                                             Median Throughput |                                          esql_basic_count_group_2 |      0.283327    |     0.273431    |      -0.0099  |  ops/s |   -3.49% |
  |                                                Max Throughput |                                          esql_basic_count_group_2 |      0.286016    |     0.279115    |      -0.0069  |  ops/s |   -2.41% |
  |                                       50th percentile latency |                                          esql_basic_count_group_2 |   3410.44        |  3458.22        |      47.7777  |     ms |   +1.40% |
  |                                       90th percentile latency |                                          esql_basic_count_group_2 |   3467.29        |  3476.1         |       8.80994 |     ms |   +0.25% |
  |                                      100th percentile latency |                                          esql_basic_count_group_2 |   3541.1         |  3484.1         |     -57.0024  |     ms |   -1.61% |
  |                                  50th percentile service time |                                          esql_basic_count_group_2 |   3410.44        |  3458.22        |      47.7777  |     ms |   +1.40% |
  |                                  90th percentile service time |                                          esql_basic_count_group_2 |   3467.29        |  3476.1         |       8.80994 |     ms |   +0.25% |
  |                                 100th percentile service time |                                          esql_basic_count_group_2 |   3541.1         |  3484.1         |     -57.0024  |     ms |   -1.61% |
  |                                                    error rate |                                          esql_basic_count_group_2 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                          esql_basic_count_group_3 |      0.181053    |     0.179048    |      -0.002   |  ops/s |   -1.11% |
  |                                               Mean Throughput |                                          esql_basic_count_group_3 |      0.185267    |     0.181665    |      -0.0036  |  ops/s |   -1.94% |
  |                                             Median Throughput |                                          esql_basic_count_group_3 |      0.186005    |     0.181949    |      -0.00406 |  ops/s |   -2.18% |
  |                                                Max Throughput |                                          esql_basic_count_group_3 |      0.187511    |     0.18323     |      -0.00428 |  ops/s |   -2.28% |
  |                                       50th percentile latency |                                          esql_basic_count_group_3 |   5203.21        |  5373.35        |     170.142   |     ms |   +3.27% |
  |                                       90th percentile latency |                                          esql_basic_count_group_3 |   5285.7         |  5399.23        |     113.529   |     ms |   +2.15% |
  |                                      100th percentile latency |                                          esql_basic_count_group_3 |   5306.83        |  5401.83        |      95.0034  |     ms |   +1.79% |
  |                                  50th percentile service time |                                          esql_basic_count_group_3 |   5203.21        |  5373.35        |     170.142   |     ms |   +3.27% |
  |                                  90th percentile service time |                                          esql_basic_count_group_3 |   5285.7         |  5399.23        |     113.529   |     ms |   +2.15% |
  |                                 100th percentile service time |                                          esql_basic_count_group_3 |   5306.83        |  5401.83        |      95.0034  |     ms |   +1.79% |
  |                                                    error rate |                                          esql_basic_count_group_3 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                          esql_basic_count_group_4 |      0.0595087   |     0.0607963   |       0.00129 |  ops/s |   +2.16% |
  |                                               Mean Throughput |                                          esql_basic_count_group_4 |      0.0599295   |     0.0614333   |       0.0015  |  ops/s |   +2.51% |
  |                                             Median Throughput |                                          esql_basic_count_group_4 |      0.0599589   |     0.0615457   |       0.00159 |  ops/s |   +2.65% |
  |                                                Max Throughput |                                          esql_basic_count_group_4 |      0.0601732   |     0.0618122   |       0.00164 |  ops/s |   +2.72% |
  |                                       50th percentile latency |                                          esql_basic_count_group_4 |  16508           | 16000.6         |    -507.411   |     ms |   -3.07% |
  |                                       90th percentile latency |                                          esql_basic_count_group_4 |  16605.5         | 16079.2         |    -526.259   |     ms |   -3.17% |
  |                                      100th percentile latency |                                          esql_basic_count_group_4 |  16629.7         | 16105.4         |    -524.333   |     ms |   -3.15% |
  |                                  50th percentile service time |                                          esql_basic_count_group_4 |  16508           | 16000.6         |    -507.411   |     ms |   -3.07% |
  |                                  90th percentile service time |                                          esql_basic_count_group_4 |  16605.5         | 16079.2         |    -526.259   |     ms |   -3.17% |
  |                                 100th percentile service time |                                          esql_basic_count_group_4 |  16629.7         | 16105.4         |    -524.333   |     ms |   -3.15% |
  |                                                    error rate |                                          esql_basic_count_group_4 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |          esql_time_range_and_date_histogram_two_groups_pre_filter |      0.155548    |     0.15041     |      -0.00514 |  ops/s |   -3.30% |
  |                                               Mean Throughput |          esql_time_range_and_date_histogram_two_groups_pre_filter |      0.157508    |     0.152662    |      -0.00485 |  ops/s |   -3.08% |
  |                                             Median Throughput |          esql_time_range_and_date_histogram_two_groups_pre_filter |      0.157863    |     0.153039    |      -0.00482 |  ops/s |   -3.06% |
  |                                                Max Throughput |          esql_time_range_and_date_histogram_two_groups_pre_filter |      0.158174    |     0.153429    |      -0.00475 |  ops/s |   -3.00% |
  |                                       50th percentile latency |          esql_time_range_and_date_histogram_two_groups_pre_filter |   6272.51        |  6475.37        |     202.858   |     ms |   +3.23% |
  |                                       90th percentile latency |          esql_time_range_and_date_histogram_two_groups_pre_filter |   6379.02        |  6525.61        |     146.591   |     ms |   +2.30% |
  |                                      100th percentile latency |          esql_time_range_and_date_histogram_two_groups_pre_filter |   6435.52        |  6591.95        |     156.432   |     ms |   +2.43% |
  |                                  50th percentile service time |          esql_time_range_and_date_histogram_two_groups_pre_filter |   6272.51        |  6475.37        |     202.858   |     ms |   +3.23% |
  |                                  90th percentile service time |          esql_time_range_and_date_histogram_two_groups_pre_filter |   6379.02        |  6525.61        |     146.591   |     ms |   +2.30% |
  |                                 100th percentile service time |          esql_time_range_and_date_histogram_two_groups_pre_filter |   6435.52        |  6591.95        |     156.432   |     ms |   +2.43% |
  |                                                    error rate |          esql_time_range_and_date_histogram_two_groups_pre_filter |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |         esql_time_range_and_date_histogram_two_groups_post_filter |      0.035068    |     0.035799    |       0.00073 |  ops/s |   +2.08% |
  |                                               Mean Throughput |         esql_time_range_and_date_histogram_two_groups_post_filter |      0.0351956   |     0.0359298   |       0.00073 |  ops/s |   +2.09% |
  |                                             Median Throughput |         esql_time_range_and_date_histogram_two_groups_post_filter |      0.0352063   |     0.0359451   |       0.00074 |  ops/s |   +2.10% |
  |                                                Max Throughput |         esql_time_range_and_date_histogram_two_groups_post_filter |      0.0353005   |     0.0359752   |       0.00067 |  ops/s |   +1.91% |
  |                                       50th percentile latency |         esql_time_range_and_date_histogram_two_groups_post_filter |  28188.2         | 27713.9         |    -474.319   |     ms |   -1.68% |
  |                                       90th percentile latency |         esql_time_range_and_date_histogram_two_groups_post_filter |  28484.5         | 27966.9         |    -517.561   |     ms |   -1.82% |
  |                                      100th percentile latency |         esql_time_range_and_date_histogram_two_groups_post_filter |  29511           | 27994.2         |   -1516.76    |     ms |   -5.14% |
  |                                  50th percentile service time |         esql_time_range_and_date_histogram_two_groups_post_filter |  28188.2         | 27713.9         |    -474.319   |     ms |   -1.68% |
  |                                  90th percentile service time |         esql_time_range_and_date_histogram_two_groups_post_filter |  28484.5         | 27966.9         |    -517.561   |     ms |   -1.82% |
  |                                 100th percentile service time |         esql_time_range_and_date_histogram_two_groups_post_filter |  29511           | 27994.2         |   -1516.76    |     ms |   -5.14% |
  |                                                    error rate |         esql_time_range_and_date_histogram_two_groups_post_filter |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                   esql_dissect_duration_and_stats |      1.69502     |     1.47698     |      -0.21804 |  ops/s |  -12.86% |
  |                                               Mean Throughput |                                   esql_dissect_duration_and_stats |      2.14855     |     2.19369     |       0.04514 |  ops/s |   +2.10% |
  |                                             Median Throughput |                                   esql_dissect_duration_and_stats |      2.2174      |     2.2925      |       0.0751  |  ops/s |   +3.39% |
  |                                                Max Throughput |                                   esql_dissect_duration_and_stats |      2.42248     |     2.71057     |       0.2881  |  ops/s |  +11.89% |
  |                                       50th percentile latency |                                   esql_dissect_duration_and_stats |    341.024       |   249.184       |     -91.8394  |     ms |  -26.93% |
  |                                       90th percentile latency |                                   esql_dissect_duration_and_stats |    371.395       |   264.818       |    -106.577   |     ms |  -28.70% |
  |                                      100th percentile latency |                                   esql_dissect_duration_and_stats |    384.352       |   288.859       |     -95.4929  |     ms |  -24.85% |
  |                                  50th percentile service time |                                   esql_dissect_duration_and_stats |    341.024       |   249.184       |     -91.8394  |     ms |  -26.93% |
  |                                  90th percentile service time |                                   esql_dissect_duration_and_stats |    371.395       |   264.818       |    -106.577   |     ms |  -28.70% |
  |                                 100th percentile service time |                                   esql_dissect_duration_and_stats |    384.352       |   288.859       |     -95.4929  |     ms |  -24.85% |
  |                                                    error rate |                                   esql_dissect_duration_and_stats |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                        search_basic_count_group_0 |      0.296198    |     0.302089    |       0.00589 |  ops/s |   +1.99% |
  |                                               Mean Throughput |                                        search_basic_count_group_0 |      0.296524    |     0.303059    |       0.00654 |  ops/s |   +2.20% |
  |                                             Median Throughput |                                        search_basic_count_group_0 |      0.296457    |     0.303093    |       0.00664 |  ops/s |   +2.24% |
  |                                                Max Throughput |                                        search_basic_count_group_0 |      0.296947    |     0.303702    |       0.00675 |  ops/s |   +2.27% |
  |                                       50th percentile latency |                                        search_basic_count_group_0 |   3364.33        |  3282.48        |     -81.8577  |     ms |   -2.43% |
  |                                       90th percentile latency |                                        search_basic_count_group_0 |   3413.63        |  3352.43        |     -61.2004  |     ms |   -1.79% |
  |                                      100th percentile latency |                                        search_basic_count_group_0 |   3518.87        |  3402.35        |    -116.519   |     ms |   -3.31% |
  |                                  50th percentile service time |                                        search_basic_count_group_0 |   3364.33        |  3282.48        |     -81.8577  |     ms |   -2.43% |
  |                                  90th percentile service time |                                        search_basic_count_group_0 |   3413.63        |  3352.43        |     -61.2004  |     ms |   -1.79% |
  |                                 100th percentile service time |                                        search_basic_count_group_0 |   3518.87        |  3402.35        |    -116.519   |     ms |   -3.31% |
  |                                                    error rate |                                        search_basic_count_group_0 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                        search_basic_count_group_1 |    300.937       |   296.143       |      -4.79391 |  ops/s |   -1.59% |
  |                                               Mean Throughput |                                        search_basic_count_group_1 |    300.937       |   296.143       |      -4.79391 |  ops/s |   -1.59% |
  |                                             Median Throughput |                                        search_basic_count_group_1 |    300.937       |   296.143       |      -4.79391 |  ops/s |   -1.59% |
  |                                                Max Throughput |                                        search_basic_count_group_1 |    300.937       |   296.143       |      -4.79391 |  ops/s |   -1.59% |
  |                                       50th percentile latency |                                        search_basic_count_group_1 |      2.46132     |     2.50952     |       0.0482  |     ms |   +1.96% |
  |                                       90th percentile latency |                                        search_basic_count_group_1 |      2.63172     |     2.86358     |       0.23186 |     ms |   +8.81% |
  |                                      100th percentile latency |                                        search_basic_count_group_1 |      3.48568     |     2.9418      |      -0.54387 |     ms |  -15.60% |
  |                                  50th percentile service time |                                        search_basic_count_group_1 |      2.46132     |     2.50952     |       0.0482  |     ms |   +1.96% |
  |                                  90th percentile service time |                                        search_basic_count_group_1 |      2.63172     |     2.86358     |       0.23186 |     ms |   +8.81% |
  |                                 100th percentile service time |                                        search_basic_count_group_1 |      3.48568     |     2.9418      |      -0.54387 |     ms |  -15.60% |
  |                                                    error rate |                                        search_basic_count_group_1 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                        search_basic_count_group_2 |      0.0174504   |     0.0183775   |       0.00093 |  ops/s |   +5.31% |
  |                                               Mean Throughput |                                        search_basic_count_group_2 |      0.0175452   |     0.0185091   |       0.00096 |  ops/s |   +5.49% |
  |                                             Median Throughput |                                        search_basic_count_group_2 |      0.0175291   |     0.018506    |       0.00098 |  ops/s |   +5.57% |
  |                                                Max Throughput |                                        search_basic_count_group_2 |      0.0176873   |     0.0186627   |       0.00098 |  ops/s |   +5.52% |
  |                                       50th percentile latency |                                        search_basic_count_group_2 |  57823.8         | 55397.7         |   -2426.09    |     ms |   -4.20% |
  |                                      100th percentile latency |                                        search_basic_count_group_2 |  59088.3         | 56967           |   -2121.3     |     ms |   -3.59% |
  |                                  50th percentile service time |                                        search_basic_count_group_2 |  57823.8         | 55397.7         |   -2426.09    |     ms |   -4.20% |
  |                                 100th percentile service time |                                        search_basic_count_group_2 |  59088.3         | 56967           |   -2121.3     |     ms |   -3.59% |
  |                                                    error rate |                                        search_basic_count_group_2 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                        search_basic_count_group_3 |      0.0119922   |     0.0136312   |       0.00164 |  ops/s |  +13.67% |
  |                                               Mean Throughput |                                        search_basic_count_group_3 |      0.0121457   |     0.013726    |       0.00158 |  ops/s |  +13.01% |
  |                                             Median Throughput |                                        search_basic_count_group_3 |      0.0120917   |     0.0137431   |       0.00165 |  ops/s |  +13.66% |
  |                                                Max Throughput |                                        search_basic_count_group_3 |      0.0123531   |     0.0138038   |       0.00145 |  ops/s |  +11.74% |
  |                                       50th percentile latency |                                        search_basic_count_group_3 |  87365.6         | 75151.4         |  -12214.3     |     ms |  -13.98% |
  |                                      100th percentile latency |                                        search_basic_count_group_3 |  88260.1         | 80010.1         |   -8250.02    |     ms |   -9.35% |
  |                                  50th percentile service time |                                        search_basic_count_group_3 |  87365.6         | 75151.4         |  -12214.3     |     ms |  -13.98% |
  |                                 100th percentile service time |                                        search_basic_count_group_3 |  88260.1         | 80010.1         |   -8250.02    |     ms |   -9.35% |
  |                                                    error rate |                                        search_basic_count_group_3 |      0           |     0           |       0       |      % |    0.00% |
  |                                                Min Throughput |                                        search_basic_count_group_4 |      0.00953227  |     0.0104154   |       0.00088 |  ops/s |   +9.27% |
  |                                               Mean Throughput |                                        search_basic_count_group_4 |      0.00967356  |     0.0104645   |       0.00079 |  ops/s |   +8.18% |
  |                                             Median Throughput |                                        search_basic_count_group_4 |      0.00974002  |     0.01048     |       0.00074 |  ops/s |   +7.60% |
  |                                                Max Throughput |                                        search_basic_count_group_4 |      0.00974841  |     0.0104981   |       0.00075 |  ops/s |   +7.69% |
  |                                       50th percentile latency |                                        search_basic_count_group_4 | 104413           | 94762.8         |   -9650.22    |     ms |   -9.24% |
  |                                      100th percentile latency |                                        search_basic_count_group_4 | 111884           | 94929.9         |  -16954.5     |     ms |  -15.15% |
  |                                  50th percentile service time |                                        search_basic_count_group_4 | 104413           | 94762.8         |   -9650.22    |     ms |   -9.24% |
  |                                 100th percentile service time |                                        search_basic_count_group_4 | 111884           | 94929.9         |  -16954.5     |     ms |  -15.15% |
  |                                                    error rate |                                        search_basic_count_group_4 |      0           |     0           |       0       |      % |    0.00% |

@parkertimmins
Copy link
Contributor Author

@martijnvg Thoughts on this?

@martijnvg
Copy link
Member

Thanks @parkertimmins for researching this!

The total dataset size on the baseline branch was 41.36 GB and the test was 40.02 GB, or a 3.24% reduction in on-disk size.

That is a good saving! In the baseline would does _id disk usage compare to the other fields? We didn't check the current disk usage by field in a while.

This is a non-trivial decrease, but may not warrant the reduction in query performance that this change will cause.

I think this is where the difficulty is. We need to avoid get by id operations from being a linear scan. We could think of ways to avoid that in many cases. Like for example adding metadata (e.g. timestamp) to the _id (encoded, when return in _search and other apis), then use that to reduce the number of docs a linear scan is needed for (in get api, id query etc.). However this is a big task.

Additionally, indexing throughput looks within noise (indexing latencies are always very noisy), but I think for use cases where the id isn't autogenerated by ES, the indexing throughput will also be impacted.

Additionally, this change may not actually be possible without changes to Lucene. I believe that for deletes and updates, Lucene expects _id to be a stored fields.

I don't think id field is required to be a stored field. I would not double check this as well.

My best guess for why this happened is that removing _id from stored fields caused other stored fields to compress better.

iirc with stored fields are fields are compressed together, so not using stored fields for _id, removes a lot of unique values that don't compress well.

I think a less controversial change is to maybe just make the _id field not a stored, but have doc values (without skip list) and then keep the inverted index for _id field. The win should be much smaller. We should see better stored field compression, like you already observed.

I think for now we should table this research / experiment and focus on pattern text field that should give more storage savings.

@parkertimmins
Copy link
Contributor Author

@martijnvg
As discussed, here is the per index/data-format storage sizes for the above baseline (b8e2fce)

Index Name Total Inverted Index Stored Fields Doc Values Points Norms
.ds-logs-apache.access-default-2025.05.30-000001 1.3gb 442.8mb 243.3mb 490.8mb 191.2mb 0b
.ds-logs-apache.error-default-2025.05.30-000001 572.2mb 118.3mb 154.9mb 116.1mb 182.7mb 0b
.ds-logs-k8-application.log-default-2025.05.30-000001 16.9gb 5.1gb 6.5gb 2.4gb 2.7gb 0b
.ds-logs-k8-application.log-default-2025.05.30-000002 7.7gb 2.3gb 3gb 1.1gb 1.2gb 0b
.ds-logs-kafka.log-default-2025.05.30-000001 696mb 213.1mb 131.7mb 164mb 183.4mb 3.6mb
.ds-logs-mysql.error-default-2025.05.30-000001 252mb 57.1mb 50.5mb 57.4mb 86.9mb 0b
.ds-logs-mysql.slowlog-default-2025.05.30-000001 464.9mb 81.5mb 95.7mb 130.5mb 157mb 0b
.ds-logs-nginx.access-default-2025.05.30-000001 5.9gb 1.7gb 637.1mb 2.7gb 801.5mb 27.3mb
.ds-logs-nginx.error-default-2025.05.30-000001 484.6mb 121.8mb 192.6mb 60.5mb 104.1mb 5.4mb
.ds-logs-postgresql.log-default-2025.05.30-000001 201.6mb 64mb 21.2mb 69.9mb 46.4mb 0b
.ds-logs-redis.log-default-2025.05.30-000001 869mb 198.7mb 191.4mb 191mb 287.7mb 0b
.ds-logs-redis.slowlog-default-2025.05.30-000001 2.5gb 700.2mb 1.2gb 382.7mb 311.5mb 0b
.ds-logs-system.auth-default-2025.05.30-000001 860mb 245.2mb 124.1mb 263mb 227.6mb 0b
.ds-logs-system.syslog-default-2025.05.30-000001 1.8gb 513.5mb 383.5mb 447.4mb 557.3mb 0b

And below is the per-index and per-field estimate of storage size for the same benchmark.

Index Name | Field Name | Total
-- | -- | --
.ds-logs-apache.access-default-2025.05.30-000001 | @timestamp | 32.7mb
.ds-logs-apache.access-default-2025.05.30-000001 | __root_doc_for_nested | 0b
.ds-logs-apache.access-default-2025.05.30-000001 | _field_names | 8.8mb
.ds-logs-apache.access-default-2025.05.30-000001 | _id | 63.1mb
.ds-logs-apache.access-default-2025.05.30-000001 | _primary_term | 0b
.ds-logs-apache.access-default-2025.05.30-000001 | _recovery_source_size | 0b
.ds-logs-apache.access-default-2025.05.30-000001 | _seq_no | 65.3mb
.ds-logs-apache.access-default-2025.05.30-000001 | _version | 0b
.ds-logs-apache.access-default-2025.05.30-000001 | agent.ephemeral_id | 636.2kb
.ds-logs-apache.access-default-2025.05.30-000001 | agent.hostname | 649.3kb
.ds-logs-apache.access-default-2025.05.30-000001 | agent.id | 705kb
.ds-logs-apache.access-default-2025.05.30-000001 | agent.name | 649.3kb
.ds-logs-apache.access-default-2025.05.30-000001 | agent.name.text | 2.4mb
.ds-logs-apache.access-default-2025.05.30-000001 | agent.name.text._original | 19.7mb
.ds-logs-apache.access-default-2025.05.30-000001 | agent.type | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | agent.version | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | apache.access.remote_addresses | 13.5mb
.ds-logs-apache.access-default-2025.05.30-000001 | apache.access.remote_addresses.offsets | 3b
.ds-logs-apache.access-default-2025.05.30-000001 | cloud.availability_zone | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | cloud.instance.id | 704.8kb
.ds-logs-apache.access-default-2025.05.30-000001 | cloud.instance.name | 649.4kb
.ds-logs-apache.access-default-2025.05.30-000001 | cloud.machine.type | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | cloud.project.id | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | cloud.provider | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | data_stream.dataset | 158.9kb
.ds-logs-apache.access-default-2025.05.30-000001 | data_stream.namespace | 158.9kb
.ds-logs-apache.access-default-2025.05.30-000001 | data_stream.type | 158.9kb
.ds-logs-apache.access-default-2025.05.30-000001 | ecs.version | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | event.agent_id_status | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | event.category | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | event.category.offsets | 3b
.ds-logs-apache.access-default-2025.05.30-000001 | event.created | 44.4mb
.ds-logs-apache.access-default-2025.05.30-000001 | event.dataset | 158.9kb
.ds-logs-apache.access-default-2025.05.30-000001 | event.ingested | 31mb
.ds-logs-apache.access-default-2025.05.30-000001 | event.kind | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | event.module | 158.9kb
.ds-logs-apache.access-default-2025.05.30-000001 | event.outcome | 2mb
.ds-logs-apache.access-default-2025.05.30-000001 | fileset.name | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | fileset.name.text | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | fileset.name.text._original | 9.5mb
.ds-logs-apache.access-default-2025.05.30-000001 | host.architecture | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | host.containerized | 568.6kb
.ds-logs-apache.access-default-2025.05.30-000001 | host.hostname | 649.3kb
.ds-logs-apache.access-default-2025.05.30-000001 | host.id | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | host.ip | 643.8kb
.ds-logs-apache.access-default-2025.05.30-000001 | host.ip.offsets | 3b
.ds-logs-apache.access-default-2025.05.30-000001 | host.mac | 649.3kb
.ds-logs-apache.access-default-2025.05.30-000001 | host.mac.offsets | 3b
.ds-logs-apache.access-default-2025.05.30-000001 | host.name | 649.3kb
.ds-logs-apache.access-default-2025.05.30-000001 | host.os.codename | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | host.os.family | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | host.os.kernel | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | host.os.name | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | host.os.name.text | 14.7mb
.ds-logs-apache.access-default-2025.05.30-000001 | host.os.platform | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | host.os.version | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | http.request.method | 3mb
.ds-logs-apache.access-default-2025.05.30-000001 | http.request.referrer | 16.4mb
.ds-logs-apache.access-default-2025.05.30-000001 | http.response.body.bytes | 20.6mb
.ds-logs-apache.access-default-2025.05.30-000001 | http.response.status_code | 4.5mb
.ds-logs-apache.access-default-2025.05.30-000001 | http.version | 1.8mb
.ds-logs-apache.access-default-2025.05.30-000001 | input.type | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.container.image | 489.2kb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.container.name | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.container.name.text | 1.1mb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.container.name.text._original | 12.7mb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.labels.app | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.labels.heartbeat_port | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.labels.heartbeat_type | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.labels.pod-template-hash | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.labels.tier | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.namespace | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.node.name | 649.4kb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.node.name.text | 4.9mb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.node.name.text._original | 30.9mb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.pod.name | 636.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.pod.name.text | 2.4mb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.pod.name.text._original | 23.4mb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.pod.uid | 704.9kb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.replicaset.name | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.replicaset.name.text | 1.7mb
.ds-logs-apache.access-default-2025.05.30-000001 | kubernetes.replicaset.name.text._original | 20.2mb
.ds-logs-apache.access-default-2025.05.30-000001 | log.file.path | 645.5kb
.ds-logs-apache.access-default-2025.05.30-000001 | log.offset | 54.9mb
.ds-logs-apache.access-default-2025.05.30-000001 | rally.doc_size | 10.6mb
.ds-logs-apache.access-default-2025.05.30-000001 | rally.message_size | 10.6mb
.ds-logs-apache.access-default-2025.05.30-000001 | service.type | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | source.address | 13.5mb
.ds-logs-apache.access-default-2025.05.30-000001 | source.as.number | 11.3mb
.ds-logs-apache.access-default-2025.05.30-000001 | source.as.organization.name | 5.1mb
.ds-logs-apache.access-default-2025.05.30-000001 | source.as.organization.name.text | 8.7mb
.ds-logs-apache.access-default-2025.05.30-000001 | source.as.organization.name.text._original | 3.8mb
.ds-logs-apache.access-default-2025.05.30-000001 | source.geo.city_name | 4.3mb
.ds-logs-apache.access-default-2025.05.30-000001 | source.geo.continent_name | 4.2mb
.ds-logs-apache.access-default-2025.05.30-000001 | source.geo.country_iso_code | 5.3mb
.ds-logs-apache.access-default-2025.05.30-000001 | source.geo.country_name | 5.3mb
.ds-logs-apache.access-default-2025.05.30-000001 | source.geo.location | 26.4mb
.ds-logs-apache.access-default-2025.05.30-000001 | source.geo.region_iso_code | 4.6mb
.ds-logs-apache.access-default-2025.05.30-000001 | source.geo.region_name | 4.6mb
.ds-logs-apache.access-default-2025.05.30-000001 | source.ip | 17.1mb
.ds-logs-apache.access-default-2025.05.30-000001 | stream | 489.1kb
.ds-logs-apache.access-default-2025.05.30-000001 | url.extension | 2.9mb
.ds-logs-apache.access-default-2025.05.30-000001 | url.original | 242.1mb
.ds-logs-apache.access-default-2025.05.30-000001 | url.original.text | 15mb
.ds-logs-apache.access-default-2025.05.30-000001 | url.original.text._original | 11.8mb
.ds-logs-apache.access-default-2025.05.30-000001 | url.path | 157.1mb
.ds-logs-apache.access-default-2025.05.30-000001 | url.query | 7.8mb
.ds-logs-apache.access-default-2025.05.30-000001 | user.name | 28.4mb
.ds-logs-apache.access-default-2025.05.30-000001 | user.name.text | 15.9mb
.ds-logs-apache.access-default-2025.05.30-000001 | user.name.text._original | 11.5mb
.ds-logs-apache.access-default-2025.05.30-000001 | user_agent.device.name | 6.8mb
.ds-logs-apache.access-default-2025.05.30-000001 | user_agent.name | 9.7mb
.ds-logs-apache.access-default-2025.05.30-000001 | user_agent.original | 16.6mb
.ds-logs-apache.access-default-2025.05.30-000001 | user_agent.original.text | 63.5mb
.ds-logs-apache.access-default-2025.05.30-000001 | user_agent.original.text._original | 60.9mb
.ds-logs-apache.access-default-2025.05.30-000001 | user_agent.os.full | 4.9mb
.ds-logs-apache.access-default-2025.05.30-000001 | user_agent.os.full.text | 4.7mb
.ds-logs-apache.access-default-2025.05.30-000001 | user_agent.os.full.text._original | 2.5mb
.ds-logs-apache.access-default-2025.05.30-000001 | user_agent.os.name | 10.2mb
.ds-logs-apache.access-default-2025.05.30-000001 | user_agent.os.name.text | 5mb
.ds-logs-apache.access-default-2025.05.30-000001 | user_agent.os.name.text._original | 8.6mb
.ds-logs-apache.access-default-2025.05.30-000001 | user_agent.os.version | 4.9mb
.ds-logs-apache.access-default-2025.05.30-000001 | user_agent.version | 7.8mb
.ds-logs-apache.error-default-2025.05.30-000001 | @timestamp | 26.9mb
.ds-logs-apache.error-default-2025.05.30-000001 | __root_doc_for_nested | 0b
.ds-logs-apache.error-default-2025.05.30-000001 | _field_names | 4mb
.ds-logs-apache.error-default-2025.05.30-000001 | _id | 51.2mb
.ds-logs-apache.error-default-2025.05.30-000001 | _primary_term | 0b
.ds-logs-apache.error-default-2025.05.30-000001 | _recovery_source_size | 0b
.ds-logs-apache.error-default-2025.05.30-000001 | _seq_no | 53.7mb
.ds-logs-apache.error-default-2025.05.30-000001 | _version | 0b
.ds-logs-apache.error-default-2025.05.30-000001 | agent.ephemeral_id | 549.2kb
.ds-logs-apache.error-default-2025.05.30-000001 | agent.hostname | 548.3kb
.ds-logs-apache.error-default-2025.05.30-000001 | agent.id | 597.5kb
.ds-logs-apache.error-default-2025.05.30-000001 | agent.name | 548.3kb
.ds-logs-apache.error-default-2025.05.30-000001 | agent.name.text | 2mb
.ds-logs-apache.error-default-2025.05.30-000001 | agent.name.text._original | 14.6mb
.ds-logs-apache.error-default-2025.05.30-000001 | agent.type | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | agent.version | 402.8kb
.ds-logs-apache.error-default-2025.05.30-000001 | apache.error.module | 402.8kb
.ds-logs-apache.error-default-2025.05.30-000001 | cloud.availability_zone | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | cloud.instance.id | 597.3kb
.ds-logs-apache.error-default-2025.05.30-000001 | cloud.instance.name | 548.5kb
.ds-logs-apache.error-default-2025.05.30-000001 | cloud.machine.type | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | cloud.project.id | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | cloud.provider | 402.8kb
.ds-logs-apache.error-default-2025.05.30-000001 | data_stream.dataset | 131kb
.ds-logs-apache.error-default-2025.05.30-000001 | data_stream.namespace | 131kb
.ds-logs-apache.error-default-2025.05.30-000001 | data_stream.type | 131kb
.ds-logs-apache.error-default-2025.05.30-000001 | ecs.version | 402.8kb
.ds-logs-apache.error-default-2025.05.30-000001 | event.agent_id_status | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | event.category | 402.8kb
.ds-logs-apache.error-default-2025.05.30-000001 | event.category.offsets | 3b
.ds-logs-apache.error-default-2025.05.30-000001 | event.dataset | 131kb
.ds-logs-apache.error-default-2025.05.30-000001 | event.ingested | 25.7mb
.ds-logs-apache.error-default-2025.05.30-000001 | event.kind | 402.8kb
.ds-logs-apache.error-default-2025.05.30-000001 | event.module | 131kb
.ds-logs-apache.error-default-2025.05.30-000001 | event.timezone | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | event.type | 402.8kb
.ds-logs-apache.error-default-2025.05.30-000001 | event.type.offsets | 3b
.ds-logs-apache.error-default-2025.05.30-000001 | file.path | 8.5mb
.ds-logs-apache.error-default-2025.05.30-000001 | file.path.text | 9.9mb
.ds-logs-apache.error-default-2025.05.30-000001 | file.path.text._original | 14mb
.ds-logs-apache.error-default-2025.05.30-000001 | fileset.name | 402.8kb
.ds-logs-apache.error-default-2025.05.30-000001 | fileset.name.text | 402.8kb
.ds-logs-apache.error-default-2025.05.30-000001 | fileset.name.text._original | 6.7mb
.ds-logs-apache.error-default-2025.05.30-000001 | host.architecture | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | host.containerized | 468.3kb
.ds-logs-apache.error-default-2025.05.30-000001 | host.hostname | 548.3kb
.ds-logs-apache.error-default-2025.05.30-000001 | host.id | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | host.ip | 549.1kb
.ds-logs-apache.error-default-2025.05.30-000001 | host.ip.offsets | 3b
.ds-logs-apache.error-default-2025.05.30-000001 | host.mac | 616.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | host.mac.offsets | 3b
.ds-logs-apache.error-default-2025.05.30-000001 | host.name | 548.3kb
.ds-logs-apache.error-default-2025.05.30-000001 | host.os.codename | 402.8kb
.ds-logs-apache.error-default-2025.05.30-000001 | host.os.family | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | host.os.kernel | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | host.os.name | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | host.os.name.text | 11.1mb
.ds-logs-apache.error-default-2025.05.30-000001 | host.os.platform | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | host.os.version | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | input.type | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.container.image | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.container.name | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.container.name.text | 936.7kb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.container.name.text._original | 9.4mb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.labels.app | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.labels.heartbeat_port | 402.8kb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.labels.heartbeat_type | 402.8kb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.labels.pod-template-hash | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.labels.tier | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.namespace | 402.8kb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.node.name | 548.5kb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.node.name.text | 4mb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.node.name.text._original | 22.9mb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.pod.name | 549kb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.pod.name.text | 2mb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.pod.name.text._original | 17.3mb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.pod.uid | 597.4kb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.replicaset.name | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.replicaset.name.text | 1.4mb
.ds-logs-apache.error-default-2025.05.30-000001 | kubernetes.replicaset.name.text._original | 15mb
.ds-logs-apache.error-default-2025.05.30-000001 | log.file.path | 563.6kb
.ds-logs-apache.error-default-2025.05.30-000001 | log.level | 402.8kb
.ds-logs-apache.error-default-2025.05.30-000001 | log.offset | 49.1mb
.ds-logs-apache.error-default-2025.05.30-000001 | message | 25.4mb
.ds-logs-apache.error-default-2025.05.30-000001 | message._original | 34.5mb
.ds-logs-apache.error-default-2025.05.30-000001 | process.pid | 40.2mb
.ds-logs-apache.error-default-2025.05.30-000001 | process.thread.id | 46mb
.ds-logs-apache.error-default-2025.05.30-000001 | rally.doc_size | 5.7mb
.ds-logs-apache.error-default-2025.05.30-000001 | rally.message_size | 5.7mb
.ds-logs-apache.error-default-2025.05.30-000001 | service.type | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | source.address | 402.9kb
.ds-logs-apache.error-default-2025.05.30-000001 | source.ip | 448.6kb
.ds-logs-apache.error-default-2025.05.30-000001 | source.port | 39.5mb
.ds-logs-apache.error-default-2025.05.30-000001 | stream | 402.9kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | @timestamp | 1015.8mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | @version | 2.2mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | __root_doc_for_nested | 0b
.ds-logs-k8-application.log-default-2025.05.30-000001 | _field_names | 22.1mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | _id | 1.3gb
.ds-logs-k8-application.log-default-2025.05.30-000001 | _ignored | 324.6kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | _primary_term | 0b
.ds-logs-k8-application.log-default-2025.05.30-000001 | _recovery_source_size | 0b
.ds-logs-k8-application.log-default-2025.05.30-000001 | _seq_no | 1.7gb
.ds-logs-k8-application.log-default-2025.05.30-000001 | _version | 0b
.ds-logs-k8-application.log-default-2025.05.30-000001 | agent.ephemeral_id | 18.9mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | agent.hostname | 14.4mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | agent.id | 18.8mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | agent.name | 8.2mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | agent.type | 2mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | agent.version | 12.8mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | cloud.availability_zone | 5.7mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | cloud.instance.id | 8.3mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | cloud.instance.name | 8.3mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | cloud.machine.type | 5.7mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | cloud.project.id | 5.7mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | cloud.provider | 5.7mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | ecs.version | 12.8mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | eden.cloud_region | 1.6mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | eden.cloud_username | 165.1kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | eden.cluster_name | 203.9kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | eden.created_at | 404.5kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | eden.days_until_deletion | 186.1kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | eden.demo_id | 1.8mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | eden.demo_name | 187.8kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | eden.demo_session | 204.3kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | eden.deployment_id | 2mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | eden.instance_id | 2mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | eden.previous_state | 26kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | eden.previous_state_date | 29kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | error.message | 372.3kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | error.message._original | 2.8mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | error.stack_trace._original | 45.9mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | error.stack_trace.text | 111.4mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | error.type | 276.8kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | event.action | 185.7kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | event.category | 153kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | event.category.offsets | 92.6kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | event.created | 387.6kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | event.dataset | 228.3kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | event.kind | 153kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | event.module | 226.9kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | event.timezone | 226.9kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | event.type | 153kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | event.type.offsets | 92.6kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | fields.cluster | 2.2mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | fields.name | 117.5mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | file.directory | 1.8mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | fileset.name | 228.3kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | github.delivery_id | 40.9kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | github.event | 36.5kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | host.architecture | 5.7mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | host.containerized | 7.6mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | host.hostname | 8.2mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | host.id | 5.7mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | host.ip | 6.4mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | host.ip.offsets | 30.3kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | host.mac | 8.3mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | host.mac.offsets | 30.3kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | host.name | 14.4mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | host.os.codename | 5.7mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | host.os.family | 5.7mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | host.os.kernel | 5.7mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | host.os.name | 5.7mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | host.os.name.text | 325mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | host.os.platform | 5.7mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | host.os.version | 5.7mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | input.type | 11.3mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | instance-id | 2mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | ip | 16.5mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | labels.index_date | 356.5kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | latency | 59.5mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | log.file.path | 371.6mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | log.flags | 6.3mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | log.flags.offsets | 3.9mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | log.level | 13.7mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | log.logger | 15.3mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | log.offset | 1.4gb
.ds-logs-k8-application.log-default-2025.05.30-000001 | log.origin.function | 11.8mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | message | 3.7gb
.ds-logs-k8-application.log-default-2025.05.30-000001 | message._original | 5.6gb
.ds-logs-k8-application.log-default-2025.05.30-000001 | method | 9.3mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | nginx.error.connection_id | 345.8kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | path | 18.1mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | process.name | 2.7mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | process.name.text | 6.7mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | process.pid | 3.2mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | process.thread.id | 8.4mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | process.thread.name | 39.8kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | query | 10.1mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | rally.doc_size | 270.1mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | rally.message_size | 265.4mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | service.type | 2.9mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | service.version | 2.7mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | span.id | 40.6kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | status | 9.8mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | stream | 55.2mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | tags | 41.9mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | tags.offsets | 5.3mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | time | 35.6mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | trace.id | 41.8kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | transaction.id | 40.6kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | type | 2.2mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | user-agent | 9.6mb
.ds-logs-k8-application.log-default-2025.05.30-000001 | user.email | 200.6kb
.ds-logs-k8-application.log-default-2025.05.30-000001 | user.id | 1.9mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | @timestamp | 466.7mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | @version | 1mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | __root_doc_for_nested | 0b
.ds-logs-k8-application.log-default-2025.05.30-000002 | _field_names | 10mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | _id | 632.7mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | _ignored | 149.1kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | _primary_term | 0b
.ds-logs-k8-application.log-default-2025.05.30-000002 | _recovery_source_size | 0b
.ds-logs-k8-application.log-default-2025.05.30-000002 | _seq_no | 801.2mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | _version | 0b
.ds-logs-k8-application.log-default-2025.05.30-000002 | agent.ephemeral_id | 8.8mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | agent.hostname | 6.6mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | agent.id | 8.8mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | agent.name | 3.7mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | agent.type | 4.5mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | agent.version | 5.8mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | cloud.availability_zone | 2.6mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | cloud.instance.id | 3.8mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | cloud.instance.name | 3.8mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | cloud.machine.type | 2.6mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | cloud.project.id | 2.6mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | cloud.provider | 2.6mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | ecs.version | 5.8mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | eden.cloud_region | 766.5kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | eden.cloud_username | 72.6kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | eden.cluster_name | 89.3kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | eden.created_at | 175.6kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | eden.days_until_deletion | 81.5kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | eden.demo_id | 854.6kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | eden.demo_name | 82.6kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | eden.demo_session | 89.7kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | eden.deployment_id | 921.5kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | eden.instance_id | 921.7kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | eden.previous_state | 12.1kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | eden.previous_state_date | 13.7kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | error.message | 183.5kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | error.message._original | 3.4mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | error.stack_trace._original | 20.8mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | error.stack_trace.text | 50.7mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | error.type | 126.6kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | event.action | 81.6kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | event.category | 70.7kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | event.category.offsets | 42.8kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | event.created | 179.6kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | event.dataset | 104kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | event.kind | 70.7kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | event.module | 103.3kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | event.timezone | 103.3kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | event.type | 70.7kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | event.type.offsets | 42.8kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | fields.cluster | 1mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | fields.name | 54.1mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | file.directory | 854.6kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | fileset.name | 104kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | github.delivery_id | 20.4kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | github.event | 17.1kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | host.architecture | 2.6mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | host.containerized | 3.4mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | host.hostname | 3.7mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | host.id | 2.6mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | host.ip | 2.9mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | host.ip.offsets | 18.4kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | host.mac | 3.8mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | host.mac.offsets | 18.4kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | host.name | 6.6mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | host.os.codename | 2.6mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | host.os.family | 2.6mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | host.os.kernel | 2.6mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | host.os.name | 2.6mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | host.os.name.text | 151.3mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | host.os.platform | 2.6mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | host.os.version | 2.6mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | input.type | 5.1mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | instance-id | 921.7kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | ip | 7.5mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | labels.index_date | 168.4kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | latency | 27.4mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | log.file.path | 170.7mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | log.flags | 2.8mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | log.flags.offsets | 1.7mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | log.level | 6.2mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | log.logger | 7mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | log.offset | 663.1mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | log.origin.function | 5.3mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | message | 1.7gb
.ds-logs-k8-application.log-default-2025.05.30-000002 | message._original | 2.5gb
.ds-logs-k8-application.log-default-2025.05.30-000002 | method | 4.2mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | nginx.error.connection_id | 158.9kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | path | 8.3mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | process.name | 1.2mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | process.name.text | 3.1mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | process.pid | 1.5mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | process.thread.id | 3.9mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | process.thread.name | 18.7kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | query | 4.6mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | rally.doc_size | 123.9mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | rally.message_size | 121.8mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | service.type | 1.3mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | service.version | 1.2mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | span.id | 19.7kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | status | 4.5mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | stream | 25.2mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | tags | 19.6mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | tags.offsets | 2.6mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | time | 15.9mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | trace.id | 20.8kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | transaction.id | 19.6kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | type | 1mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | user-agent | 4.4mb
.ds-logs-k8-application.log-default-2025.05.30-000002 | user.email | 88kb
.ds-logs-k8-application.log-default-2025.05.30-000002 | user.id | 899.3kb
.ds-logs-kafka.log-default-2025.05.30-000001 | @timestamp | 53.6mb
.ds-logs-kafka.log-default-2025.05.30-000001 | __root_doc_for_nested | 0b
.ds-logs-kafka.log-default-2025.05.30-000001 | _field_names | 6.5mb
.ds-logs-kafka.log-default-2025.05.30-000001 | _id | 49.7mb
.ds-logs-kafka.log-default-2025.05.30-000001 | _primary_term | 0b
.ds-logs-kafka.log-default-2025.05.30-000001 | _recovery_source_size | 0b
.ds-logs-kafka.log-default-2025.05.30-000001 | _seq_no | 79.2mb
.ds-logs-kafka.log-default-2025.05.30-000001 | _version | 0b
.ds-logs-kafka.log-default-2025.05.30-000001 | agent.ephemeral_id | 655.7kb
.ds-logs-kafka.log-default-2025.05.30-000001 | agent.hostname | 655.7kb
.ds-logs-kafka.log-default-2025.05.30-000001 | agent.id | 655.7kb
.ds-logs-kafka.log-default-2025.05.30-000001 | agent.name | 655.7kb
.ds-logs-kafka.log-default-2025.05.30-000001 | agent.name.text | 3.1mb
.ds-logs-kafka.log-default-2025.05.30-000001 | agent.name.text._original | 8.3mb
.ds-logs-kafka.log-default-2025.05.30-000001 | agent.type | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | agent.version | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | cloud.availability_zone | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | cloud.instance.id | 655.7kb
.ds-logs-kafka.log-default-2025.05.30-000001 | cloud.instance.name | 655.7kb
.ds-logs-kafka.log-default-2025.05.30-000001 | cloud.machine.type | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | cloud.project.id | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | cloud.provider | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | data_stream.dataset | 213kb
.ds-logs-kafka.log-default-2025.05.30-000001 | data_stream.namespace | 213kb
.ds-logs-kafka.log-default-2025.05.30-000001 | data_stream.type | 213kb
.ds-logs-kafka.log-default-2025.05.30-000001 | ecs.version | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | error.log | 5.7kb
.ds-logs-kafka.log-default-2025.05.30-000001 | error.message | 8.3kb
.ds-logs-kafka.log-default-2025.05.30-000001 | error.message._original | 11.4mb
.ds-logs-kafka.log-default-2025.05.30-000001 | event.agent_id_status | 655.7kb
.ds-logs-kafka.log-default-2025.05.30-000001 | event.created | 77.8mb
.ds-logs-kafka.log-default-2025.05.30-000001 | event.dataset | 213kb
.ds-logs-kafka.log-default-2025.05.30-000001 | event.ingested | 14.9mb
.ds-logs-kafka.log-default-2025.05.30-000001 | event.kind | 672.8kb
.ds-logs-kafka.log-default-2025.05.30-000001 | event.module | 213kb
.ds-logs-kafka.log-default-2025.05.30-000001 | event.timezone | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | event.type | 672.8kb
.ds-logs-kafka.log-default-2025.05.30-000001 | event.type.offsets | 17.1kb
.ds-logs-kafka.log-default-2025.05.30-000001 | fileset.name | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | fileset.name.text | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | fileset.name.text._original | 3.4mb
.ds-logs-kafka.log-default-2025.05.30-000001 | host.architecture | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | host.containerized | 762.1kb
.ds-logs-kafka.log-default-2025.05.30-000001 | host.hostname | 655.7kb
.ds-logs-kafka.log-default-2025.05.30-000001 | host.id | 655.7kb
.ds-logs-kafka.log-default-2025.05.30-000001 | host.ip | 732.1kb
.ds-logs-kafka.log-default-2025.05.30-000001 | host.ip.offsets | 3b
.ds-logs-kafka.log-default-2025.05.30-000001 | host.mac | 655.7kb
.ds-logs-kafka.log-default-2025.05.30-000001 | host.mac.offsets | 3b
.ds-logs-kafka.log-default-2025.05.30-000001 | host.name | 655.7kb
.ds-logs-kafka.log-default-2025.05.30-000001 | host.os.codename | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | host.os.family | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | host.os.kernel | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | host.os.name | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | host.os.name.text | 8mb
.ds-logs-kafka.log-default-2025.05.30-000001 | host.os.platform | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | host.os.version | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | input.type | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | kafka.log.class | 10.9mb
.ds-logs-kafka.log-default-2025.05.30-000001 | kafka.log.component | 12.5mb
.ds-logs-kafka.log-default-2025.05.30-000001 | kafka.log.trace.class | 3.3mb
.ds-logs-kafka.log-default-2025.05.30-000001 | kafka.log.trace.message | 5.6mb
.ds-logs-kafka.log-default-2025.05.30-000001 | kubernetes.container.image | 655.7kb
.ds-logs-kafka.log-default-2025.05.30-000001 | kubernetes.container.name | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | kubernetes.container.name.text | 1.4mb
.ds-logs-kafka.log-default-2025.05.30-000001 | kubernetes.container.name.text._original | 5.4mb
.ds-logs-kafka.log-default-2025.05.30-000001 | kubernetes.labels.app | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | kubernetes.labels.controller-revision-hash | 655.7kb
.ds-logs-kafka.log-default-2025.05.30-000001 | kubernetes.labels.release | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | kubernetes.labels.statefulset_kubernetes_io/pod-name | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | kubernetes.namespace | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | kubernetes.node.name | 655.7kb
.ds-logs-kafka.log-default-2025.05.30-000001 | kubernetes.node.name.text | 6.5mb
.ds-logs-kafka.log-default-2025.05.30-000001 | kubernetes.node.name.text._original | 13.1mb
.ds-logs-kafka.log-default-2025.05.30-000001 | kubernetes.pod.name | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | kubernetes.pod.name.text | 2.3mb
.ds-logs-kafka.log-default-2025.05.30-000001 | kubernetes.pod.name.text._original | 5.6mb
.ds-logs-kafka.log-default-2025.05.30-000001 | kubernetes.pod.uid | 655.7kb
.ds-logs-kafka.log-default-2025.05.30-000001 | kubernetes.statefulset.name | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | kubernetes.statefulset.name.text | 1.4mb
.ds-logs-kafka.log-default-2025.05.30-000001 | kubernetes.statefulset.name.text._original | 5.2mb
.ds-logs-kafka.log-default-2025.05.30-000001 | log.file.path | 655.9kb
.ds-logs-kafka.log-default-2025.05.30-000001 | log.file.path.text | 4.8mb
.ds-logs-kafka.log-default-2025.05.30-000001 | log.file.path.text._original | 40.1mb
.ds-logs-kafka.log-default-2025.05.30-000001 | log.flags | 3mb
.ds-logs-kafka.log-default-2025.05.30-000001 | log.flags.offsets | 1.7mb
.ds-logs-kafka.log-default-2025.05.30-000001 | log.level | 1.2mb
.ds-logs-kafka.log-default-2025.05.30-000001 | log.offset | 75.2mb
.ds-logs-kafka.log-default-2025.05.30-000001 | message | 94mb
.ds-logs-kafka.log-default-2025.05.30-000001 | message._original | 26.8mb
.ds-logs-kafka.log-default-2025.05.30-000001 | rally.doc_size | 13.2mb
.ds-logs-kafka.log-default-2025.05.30-000001 | rally.message_size | 13.7mb
.ds-logs-kafka.log-default-2025.05.30-000001 | service.type | 655.6kb
.ds-logs-kafka.log-default-2025.05.30-000001 | stream | 655.6kb
.ds-logs-mysql.error-default-2025.05.30-000001 | @timestamp | 12.4mb
.ds-logs-mysql.error-default-2025.05.30-000001 | __root_doc_for_nested | 0b
.ds-logs-mysql.error-default-2025.05.30-000001 | _field_names | 2.4mb
.ds-logs-mysql.error-default-2025.05.30-000001 | _id | 19.7mb
.ds-logs-mysql.error-default-2025.05.30-000001 | _primary_term | 0b
.ds-logs-mysql.error-default-2025.05.30-000001 | _recovery_source_size | 0b
.ds-logs-mysql.error-default-2025.05.30-000001 | _seq_no | 31.9mb
.ds-logs-mysql.error-default-2025.05.30-000001 | _version | 0b
.ds-logs-mysql.error-default-2025.05.30-000001 | agent.ephemeral_id | 360.9kb
.ds-logs-mysql.error-default-2025.05.30-000001 | agent.hostname | 345.6kb
.ds-logs-mysql.error-default-2025.05.30-000001 | agent.id | 345.7kb
.ds-logs-mysql.error-default-2025.05.30-000001 | agent.name | 345.6kb
.ds-logs-mysql.error-default-2025.05.30-000001 | agent.name.text | 1.3mb
.ds-logs-mysql.error-default-2025.05.30-000001 | agent.name.text._original | 5.6mb
.ds-logs-mysql.error-default-2025.05.30-000001 | agent.type | 275.3kb
.ds-logs-mysql.error-default-2025.05.30-000001 | agent.version | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | cloud.availability_zone | 275.3kb
.ds-logs-mysql.error-default-2025.05.30-000001 | cloud.instance.id | 345.6kb
.ds-logs-mysql.error-default-2025.05.30-000001 | cloud.instance.name | 345.7kb
.ds-logs-mysql.error-default-2025.05.30-000001 | cloud.machine.type | 275.3kb
.ds-logs-mysql.error-default-2025.05.30-000001 | cloud.project.id | 275.3kb
.ds-logs-mysql.error-default-2025.05.30-000001 | cloud.provider | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | data_stream.dataset | 89.5kb
.ds-logs-mysql.error-default-2025.05.30-000001 | data_stream.namespace | 89.5kb
.ds-logs-mysql.error-default-2025.05.30-000001 | data_stream.type | 89.5kb
.ds-logs-mysql.error-default-2025.05.30-000001 | ecs.version | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | event.agent_id_status | 275.3kb
.ds-logs-mysql.error-default-2025.05.30-000001 | event.category | 275.3kb
.ds-logs-mysql.error-default-2025.05.30-000001 | event.category.offsets | 3b
.ds-logs-mysql.error-default-2025.05.30-000001 | event.created | 33.2mb
.ds-logs-mysql.error-default-2025.05.30-000001 | event.dataset | 89.5kb
.ds-logs-mysql.error-default-2025.05.30-000001 | event.ingested | 5.5mb
.ds-logs-mysql.error-default-2025.05.30-000001 | event.kind | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | event.module | 89.5kb
.ds-logs-mysql.error-default-2025.05.30-000001 | event.timezone | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | event.type | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | event.type.offsets | 3b
.ds-logs-mysql.error-default-2025.05.30-000001 | fileset.name | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | fileset.name.text | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | fileset.name.text._original | 2.5mb
.ds-logs-mysql.error-default-2025.05.30-000001 | host.architecture | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | host.containerized | 320kb
.ds-logs-mysql.error-default-2025.05.30-000001 | host.hostname | 345.6kb
.ds-logs-mysql.error-default-2025.05.30-000001 | host.id | 275.3kb
.ds-logs-mysql.error-default-2025.05.30-000001 | host.ip | 362.9kb
.ds-logs-mysql.error-default-2025.05.30-000001 | host.ip.offsets | 3b
.ds-logs-mysql.error-default-2025.05.30-000001 | host.mac | 345.6kb
.ds-logs-mysql.error-default-2025.05.30-000001 | host.mac.offsets | 3b
.ds-logs-mysql.error-default-2025.05.30-000001 | host.name | 345.6kb
.ds-logs-mysql.error-default-2025.05.30-000001 | host.os.codename | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | host.os.family | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | host.os.kernel | 275.3kb
.ds-logs-mysql.error-default-2025.05.30-000001 | host.os.name | 275.3kb
.ds-logs-mysql.error-default-2025.05.30-000001 | host.os.name.text | 4.7mb
.ds-logs-mysql.error-default-2025.05.30-000001 | host.os.platform | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | host.os.version | 275.3kb
.ds-logs-mysql.error-default-2025.05.30-000001 | input.type | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | kubernetes.container.image | 275.3kb
.ds-logs-mysql.error-default-2025.05.30-000001 | kubernetes.container.name | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | kubernetes.container.name.text | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | kubernetes.container.name.text._original | 2.5mb
.ds-logs-mysql.error-default-2025.05.30-000001 | kubernetes.labels.app | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | kubernetes.labels.heartbeat_port | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | kubernetes.labels.heartbeat_type | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | kubernetes.labels.pod-template-hash | 275.3kb
.ds-logs-mysql.error-default-2025.05.30-000001 | kubernetes.namespace | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | kubernetes.node.name | 345.7kb
.ds-logs-mysql.error-default-2025.05.30-000001 | kubernetes.node.name.text | 2.7mb
.ds-logs-mysql.error-default-2025.05.30-000001 | kubernetes.node.name.text._original | 8.8mb
.ds-logs-mysql.error-default-2025.05.30-000001 | kubernetes.pod.name | 360.8kb
.ds-logs-mysql.error-default-2025.05.30-000001 | kubernetes.pod.name.text | 1.3mb
.ds-logs-mysql.error-default-2025.05.30-000001 | kubernetes.pod.name.text._original | 5.9mb
.ds-logs-mysql.error-default-2025.05.30-000001 | kubernetes.pod.uid | 360.8kb
.ds-logs-mysql.error-default-2025.05.30-000001 | kubernetes.replicaset.name | 275.3kb
.ds-logs-mysql.error-default-2025.05.30-000001 | kubernetes.replicaset.name.text | 1004.9kb
.ds-logs-mysql.error-default-2025.05.30-000001 | kubernetes.replicaset.name.text._original | 5mb
.ds-logs-mysql.error-default-2025.05.30-000001 | log.file.path | 361.3kb
.ds-logs-mysql.error-default-2025.05.30-000001 | log.flags | 1.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | log.flags.offsets | 1021b
.ds-logs-mysql.error-default-2025.05.30-000001 | log.level | 480.8kb
.ds-logs-mysql.error-default-2025.05.30-000001 | log.offset | 26.6mb
.ds-logs-mysql.error-default-2025.05.30-000001 | message | 17.9mb
.ds-logs-mysql.error-default-2025.05.30-000001 | message._original | 12.2mb
.ds-logs-mysql.error-default-2025.05.30-000001 | mysql.thread_id | 27.2mb
.ds-logs-mysql.error-default-2025.05.30-000001 | rally.doc_size | 2.8mb
.ds-logs-mysql.error-default-2025.05.30-000001 | rally.message_size | 2.8mb
.ds-logs-mysql.error-default-2025.05.30-000001 | service.type | 275.2kb
.ds-logs-mysql.error-default-2025.05.30-000001 | stream | 275.2kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | @timestamp | 18.9mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | __root_doc_for_nested | 0b
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | _field_names | 1.5mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | _id | 44.3mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | _ignored | 18.5kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | _primary_term | 0b
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | _recovery_source_size | 0b
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | _seq_no | 49.4mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | _version | 0b
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | agent.ephemeral_id | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | agent.hostname | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | agent.id | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | agent.name | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | agent.name.text | 2mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | agent.name.text._original | 27.4mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | agent.type | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | agent.version | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | cloud.availability_zone | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | cloud.instance.id | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | cloud.instance.name | 426.2kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | cloud.machine.type | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | cloud.project.id | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | cloud.provider | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | data_stream.dataset | 138.5kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | data_stream.namespace | 138.5kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | data_stream.type | 138.5kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | docker.container.labels.annotation_io_kubernetes_container_hash | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | docker.container.labels.annotation_io_kubernetes_container_restartCount | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | docker.container.labels.annotation_io_kubernetes_container_terminationMessagePath | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | docker.container.labels.annotation_io_kubernetes_container_terminationMessagePolicy | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | docker.container.labels.annotation_io_kubernetes_pod_terminationGracePeriod | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | docker.container.labels.io_kubernetes_container_logpath | 426.3kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | docker.container.labels.io_kubernetes_container_name | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | docker.container.labels.io_kubernetes_docker_type | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | docker.container.labels.io_kubernetes_pod_name | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | docker.container.labels.io_kubernetes_pod_namespace | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | docker.container.labels.io_kubernetes_pod_uid | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | docker.container.labels.io_kubernetes_sandbox_id | 426.2kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | ecs.version | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | event.agent_id_status | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | event.category | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | event.category.offsets | 3b
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | event.dataset | 138.5kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | event.duration | 39.1mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | event.ingested | 7.9mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | event.kind | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | event.module | 138.5kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | event.type | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | event.type.offsets | 3b
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | fileset.name | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | fileset.name.text | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | fileset.name.text._original | 14mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | host.architecture | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | host.containerized | 495.3kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | host.hostname | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | host.id | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | host.ip | 474.6kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | host.ip.offsets | 3b
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | host.mac | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | host.mac.offsets | 3b
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | host.name | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | host.os.codename | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | host.os.family | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | host.os.kernel | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | host.os.name | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | host.os.name.text | 19.4mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | host.os.platform | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | host.os.version | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | input.type | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | log.file.path | 426.4kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | log.flags | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | log.flags.offsets | 3b
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | log.offset | 44.2mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | mysql.slowlog.current_user | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | mysql.slowlog.lock_time.sec | 54.8mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | mysql.slowlog.query | 8.1mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | mysql.slowlog.query._original | 351.9kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | mysql.slowlog.rows_examined | 2mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | mysql.slowlog.rows_sent | 1mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | mysql.thread_id | 37.2mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | rally.doc_size | 6.5mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | rally.message_size | 6.5mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | service.type | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | source.ip | 3mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | stream | 426.1kb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | user.name | 24.8mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | user.name.text | 13.9mb
.ds-logs-mysql.slowlog-default-2025.05.30-000001 | user.name.text._original | 16.1mb
.ds-logs-nginx.access-default-2025.05.30-000001 | @timestamp | 117.4mb
.ds-logs-nginx.access-default-2025.05.30-000001 | @version | 549.9kb
.ds-logs-nginx.access-default-2025.05.30-000001 | __root_doc_for_nested | 0b
.ds-logs-nginx.access-default-2025.05.30-000001 | _field_names | 25.4mb
.ds-logs-nginx.access-default-2025.05.30-000001 | _id | 153.4mb
.ds-logs-nginx.access-default-2025.05.30-000001 | _ignored | 191kb
.ds-logs-nginx.access-default-2025.05.30-000001 | _primary_term | 0b
.ds-logs-nginx.access-default-2025.05.30-000001 | _recovery_source_size | 0b
.ds-logs-nginx.access-default-2025.05.30-000001 | _seq_no | 216mb
.ds-logs-nginx.access-default-2025.05.30-000001 | _version | 0b
.ds-logs-nginx.access-default-2025.05.30-000001 | agent.ephemeral_id | 1.8mb
.ds-logs-nginx.access-default-2025.05.30-000001 | agent.hostname | 2mb
.ds-logs-nginx.access-default-2025.05.30-000001 | agent.id | 2mb
.ds-logs-nginx.access-default-2025.05.30-000001 | agent.name | 2mb
.ds-logs-nginx.access-default-2025.05.30-000001 | agent.name.text | 7.8mb
.ds-logs-nginx.access-default-2025.05.30-000001 | agent.name.text._original | 84.9mb
.ds-logs-nginx.access-default-2025.05.30-000001 | agent.type | 1.3mb
.ds-logs-nginx.access-default-2025.05.30-000001 | agent.version | 1.6mb
.ds-logs-nginx.access-default-2025.05.30-000001 | cloud.availability_zone | 1.3mb
.ds-logs-nginx.access-default-2025.05.30-000001 | cloud.instance.id | 1.9mb
.ds-logs-nginx.access-default-2025.05.30-000001 | cloud.instance.name | 2mb
.ds-logs-nginx.access-default-2025.05.30-000001 | cloud.machine.type | 1.9mb
.ds-logs-nginx.access-default-2025.05.30-000001 | cloud.project.id | 1.6mb
.ds-logs-nginx.access-default-2025.05.30-000001 | cloud.provider | 1.3mb
.ds-logs-nginx.access-default-2025.05.30-000001 | data_stream.dataset | 437.4kb
.ds-logs-nginx.access-default-2025.05.30-000001 | data_stream.namespace | 437.4kb
.ds-logs-nginx.access-default-2025.05.30-000001 | data_stream.type | 437.4kb
.ds-logs-nginx.access-default-2025.05.30-000001 | ecs.version | 1.3mb
.ds-logs-nginx.access-default-2025.05.30-000001 | event.agent_id_status | 1.3mb
.ds-logs-nginx.access-default-2025.05.30-000001 | event.category | 1.3mb
.ds-logs-nginx.access-default-2025.05.30-000001 | event.category.offsets | 3b
.ds-logs-nginx.access-default-2025.05.30-000001 | event.created | 147.4mb
.ds-logs-nginx.access-default-2025.05.30-000001 | event.dataset | 437.4kb
.ds-logs-nginx.access-default-2025.05.30-000001 | event.ingested | 104.1mb
.ds-logs-nginx.access-default-2025.05.30-000001 | event.kind | 1.3mb
.ds-logs-nginx.access-default-2025.05.30-000001 | event.module | 437.4kb
.ds-logs-nginx.access-default-2025.05.30-000001 | event.outcome | 5.6mb
.ds-logs-nginx.access-default-2025.05.30-000001 | event.timezone | 1.3mb
.ds-logs-nginx.access-default-2025.05.30-000001 | event.type | 1.3mb
.ds-logs-nginx.access-default-2025.05.30-000001 | event.type.offsets | 3b
.ds-logs-nginx.access-default-2025.05.30-000001 | fileset.name | 1.3mb
.ds-logs-nginx.access-default-2025.05.30-000001 | fileset.name.text | 1.3mb
.ds-logs-nginx.access-default-2025.05.30-000001 | fileset.name.text._original | 29.8mb
.ds-logs-nginx.access-default-2025.05.30-000001 | host.architecture | 1.3mb
.ds-logs-nginx.access-default-2025.05.30-000001 | host.containerized | 1.5mb
.ds-logs-nginx.access-default-2025.05.30-000001 | host.hostname | 2mb
.ds-logs-nginx.access-default-2025.05.30-000001 | host.id | 1.9mb
.ds-logs-nginx.access-default-2025.05.30-000001 | host.ip | 2.2mb
.ds-logs-nginx.access-default-2025.05.30-000001 | host.ip.offsets | 250.7kb
.ds-logs-nginx.access-default-2025.05.30-000001 | host.mac | 2mb
.ds-logs-nginx.access-default-2025.05.30-000001 | host.mac.offsets | 3b
.ds-logs-nginx.access-default-2025.05.30-000001 | host.name | 2mb
.ds-logs-nginx.access-default-2025.05.30-000001 | host.os.codename | 1.9mb
.ds-logs-nginx.access-default-2025.05.30-000001 | host.os.family | 1.6mb
.ds-logs-nginx.access-default-2025.05.30-000001 | host.os.kernel | 1.6mb
.ds-logs-nginx.access-default-2025.05.30-000001 | host.os.name | 1.6mb
.ds-logs-nginx.access-default-2025.05.30-000001 | host.os.name.text | 65.4mb
.ds-logs-nginx.access-default-2025.05.30-000001 | host.os.platform | 1.6mb
.ds-logs-nginx.access-default-2025.05.30-000001 | host.os.version | 1.6mb
.ds-logs-nginx.access-default-2025.05.30-000001 | http.request.method | 23.1mb
.ds-logs-nginx.access-default-2025.05.30-000001 | http.request.referrer | 8.8mb
.ds-logs-nginx.access-default-2025.05.30-000001 | http.response.body.bytes | 118.4mb
.ds-logs-nginx.access-default-2025.05.30-000001 | http.response.status_code | 27.1mb
.ds-logs-nginx.access-default-2025.05.30-000001 | http.version | 1.7mb
.ds-logs-nginx.access-default-2025.05.30-000001 | input.type | 1.6mb
.ds-logs-nginx.access-default-2025.05.30-000001 | kubernetes.container.image | 516.4kb
.ds-logs-nginx.access-default-2025.05.30-000001 | kubernetes.container.name | 516.3kb
.ds-logs-nginx.access-default-2025.05.30-000001 | kubernetes.container.name.text | 1.3mb
.ds-logs-nginx.access-default-2025.05.30-000001 | kubernetes.container.name.text._original | 16.7mb
.ds-logs-nginx.access-default-2025.05.30-000001 | kubernetes.labels.app | 516.3kb
.ds-logs-nginx.access-default-2025.05.30-000001 | kubernetes.labels.heartbeat_port | 516.3kb
.ds-logs-nginx.access-default-2025.05.30-000001 | kubernetes.labels.heartbeat_type | 516.3kb
.ds-logs-nginx.access-default-2025.05.30-000001 | kubernetes.labels.pod-template-hash | 516.3kb
.ds-logs-nginx.access-default-2025.05.30-000001 | kubernetes.namespace | 516.3kb
.ds-logs-nginx.access-default-2025.05.30-000001 | kubernetes.node.name | 876.2kb
.ds-logs-nginx.access-default-2025.05.30-000001 | kubernetes.node.name.text | 6.5mb
.ds-logs-nginx.access-default-2025.05.30-000001 | kubernetes.node.name.text._original | 40.5mb
.ds-logs-nginx.access-default-2025.05.30-000001 | kubernetes.pod.name | 876.2kb
.ds-logs-nginx.access-default-2025.05.30-000001 | kubernetes.pod.name.text | 5mb
.ds-logs-nginx.access-default-2025.05.30-000001 | kubernetes.pod.name.text._original | 40.5mb
.ds-logs-nginx.access-default-2025.05.30-000001 | kubernetes.pod.uid | 904.4kb
.ds-logs-nginx.access-default-2025.05.30-000001 | kubernetes.replicaset.name | 516.4kb
.ds-logs-nginx.access-default-2025.05.30-000001 | kubernetes.replicaset.name.text | 3.9mb
.ds-logs-nginx.access-default-2025.05.30-000001 | kubernetes.replicaset.name.text._original | 36.3mb
.ds-logs-nginx.access-default-2025.05.30-000001 | log.file.path | 2mb
.ds-logs-nginx.access-default-2025.05.30-000001 | log.offset | 179mb
.ds-logs-nginx.access-default-2025.05.30-000001 | nginx.access.remote_ip_list | 65.4mb
.ds-logs-nginx.access-default-2025.05.30-000001 | nginx.access.remote_ip_list.offsets | 3b
.ds-logs-nginx.access-default-2025.05.30-000001 | rally.doc_size | 29.9mb
.ds-logs-nginx.access-default-2025.05.30-000001 | rally.message_size | 29.9mb
.ds-logs-nginx.access-default-2025.05.30-000001 | related.ip | 91.1mb
.ds-logs-nginx.access-default-2025.05.30-000001 | related.ip.offsets | 3b
.ds-logs-nginx.access-default-2025.05.30-000001 | related.user | 81.8mb
.ds-logs-nginx.access-default-2025.05.30-000001 | related.user.offsets | 3b
.ds-logs-nginx.access-default-2025.05.30-000001 | service.type | 1.3mb
.ds-logs-nginx.access-default-2025.05.30-000001 | source.address | 65.4mb
.ds-logs-nginx.access-default-2025.05.30-000001 | source.as.number | 91.9mb
.ds-logs-nginx.access-default-2025.05.30-000001 | source.as.organization.name | 53.6mb
.ds-logs-nginx.access-default-2025.05.30-000001 | source.as.organization.name.text | 59.7mb
.ds-logs-nginx.access-default-2025.05.30-000001 | source.as.organization.name.text._original | 48.2mb
.ds-logs-nginx.access-default-2025.05.30-000001 | source.geo.city_name | 24.5mb
.ds-logs-nginx.access-default-2025.05.30-000001 | source.geo.continent_name | 27.3mb
.ds-logs-nginx.access-default-2025.05.30-000001 | source.geo.country_iso_code | 44.3mb
.ds-logs-nginx.access-default-2025.05.30-000001 | source.geo.country_name | 44.3mb
.ds-logs-nginx.access-default-2025.05.30-000001 | source.geo.location | 256mb
.ds-logs-nginx.access-default-2025.05.30-000001 | source.geo.region_iso_code | 23.7mb
.ds-logs-nginx.access-default-2025.05.30-000001 | source.geo.region_name | 23.7mb
.ds-logs-nginx.access-default-2025.05.30-000001 | source.ip | 91.1mb
.ds-logs-nginx.access-default-2025.05.30-000001 | stream | 516.3kb
.ds-logs-nginx.access-default-2025.05.30-000001 | tags | 5.7mb
.ds-logs-nginx.access-default-2025.05.30-000001 | tags.offsets | 29kb
.ds-logs-nginx.access-default-2025.05.30-000001 | type | 549.9kb
.ds-logs-nginx.access-default-2025.05.30-000001 | url.domain | 448.9kb
.ds-logs-nginx.access-default-2025.05.30-000001 | url.extension | 10.7mb
.ds-logs-nginx.access-default-2025.05.30-000001 | url.fragment | 2.3kb
.ds-logs-nginx.access-default-2025.05.30-000001 | url.original | 1.3gb
.ds-logs-nginx.access-default-2025.05.30-000001 | url.original._original | 1mb
.ds-logs-nginx.access-default-2025.05.30-000001 | url.original.text | 85mb
.ds-logs-nginx.access-default-2025.05.30-000001 | url.original.text._original | 68.3mb
.ds-logs-nginx.access-default-2025.05.30-000001 | url.path | 1.1gb
.ds-logs-nginx.access-default-2025.05.30-000001 | url.path._original | 1mb
.ds-logs-nginx.access-default-2025.05.30-000001 | url.query | 11mb
.ds-logs-nginx.access-default-2025.05.30-000001 | url.scheme | 246.4kb
.ds-logs-nginx.access-default-2025.05.30-000001 | user.name | 81.8mb
.ds-logs-nginx.access-default-2025.05.30-000001 | user.name.text | 44mb
.ds-logs-nginx.access-default-2025.05.30-000001 | user.name.text._original | 36.2mb
.ds-logs-nginx.access-default-2025.05.30-000001 | user_agent.device.name | 22.2mb
.ds-logs-nginx.access-default-2025.05.30-000001 | user_agent.name | 36.7mb
.ds-logs-nginx.access-default-2025.05.30-000001 | user_agent.original | 49.5mb
.ds-logs-nginx.access-default-2025.05.30-000001 | user_agent.original.text | 144.1mb
.ds-logs-nginx.access-default-2025.05.30-000001 | user_agent.original.text._original | 130.2mb
.ds-logs-nginx.access-default-2025.05.30-000001 | user_agent.os.full | 10.7mb
.ds-logs-nginx.access-default-2025.05.30-000001 | user_agent.os.full.text | 10.4mb
.ds-logs-nginx.access-default-2025.05.30-000001 | user_agent.os.full.text._original | 7.4mb
.ds-logs-nginx.access-default-2025.05.30-000001 | user_agent.os.name | 17.9mb
.ds-logs-nginx.access-default-2025.05.30-000001 | user_agent.os.name.text | 10.7mb
.ds-logs-nginx.access-default-2025.05.30-000001 | user_agent.os.name.text._original | 16.5mb
.ds-logs-nginx.access-default-2025.05.30-000001 | user_agent.os.version | 10.7mb
.ds-logs-nginx.access-default-2025.05.30-000001 | user_agent.version | 23mb
.ds-logs-nginx.error-default-2025.05.30-000001 | @timestamp | 17.6mb
.ds-logs-nginx.error-default-2025.05.30-000001 | @version | 168.4kb
.ds-logs-nginx.error-default-2025.05.30-000001 | __root_doc_for_nested | 0b
.ds-logs-nginx.error-default-2025.05.30-000001 | _field_names | 1.3mb
.ds-logs-nginx.error-default-2025.05.30-000001 | _id | 30.4mb
.ds-logs-nginx.error-default-2025.05.30-000001 | _primary_term | 0b
.ds-logs-nginx.error-default-2025.05.30-000001 | _recovery_source_size | 0b
.ds-logs-nginx.error-default-2025.05.30-000001 | _seq_no | 35.4mb
.ds-logs-nginx.error-default-2025.05.30-000001 | _version | 0b
.ds-logs-nginx.error-default-2025.05.30-000001 | agent.ephemeral_id | 399.8kb
.ds-logs-nginx.error-default-2025.05.30-000001 | agent.hostname | 421.5kb
.ds-logs-nginx.error-default-2025.05.30-000001 | agent.id | 409.7kb
.ds-logs-nginx.error-default-2025.05.30-000001 | agent.name | 421.9kb
.ds-logs-nginx.error-default-2025.05.30-000001 | agent.name.text | 1.6mb
.ds-logs-nginx.error-default-2025.05.30-000001 | agent.name.text._original | 24.6mb
.ds-logs-nginx.error-default-2025.05.30-000001 | agent.type | 268.4kb
.ds-logs-nginx.error-default-2025.05.30-000001 | agent.version | 341.6kb
.ds-logs-nginx.error-default-2025.05.30-000001 | cloud.availability_zone | 268.4kb
.ds-logs-nginx.error-default-2025.05.30-000001 | cloud.instance.id | 407.1kb
.ds-logs-nginx.error-default-2025.05.30-000001 | cloud.instance.name | 421.5kb
.ds-logs-nginx.error-default-2025.05.30-000001 | cloud.machine.type | 394.6kb
.ds-logs-nginx.error-default-2025.05.30-000001 | cloud.project.id | 341.6kb
.ds-logs-nginx.error-default-2025.05.30-000001 | cloud.provider | 268.4kb
.ds-logs-nginx.error-default-2025.05.30-000001 | data_stream.dataset | 87.3kb
.ds-logs-nginx.error-default-2025.05.30-000001 | data_stream.namespace | 87.3kb
.ds-logs-nginx.error-default-2025.05.30-000001 | data_stream.type | 87.3kb
.ds-logs-nginx.error-default-2025.05.30-000001 | ecs.version | 268.4kb
.ds-logs-nginx.error-default-2025.05.30-000001 | event.agent_id_status | 268.5kb
.ds-logs-nginx.error-default-2025.05.30-000001 | event.category | 268.4kb
.ds-logs-nginx.error-default-2025.05.30-000001 | event.category.offsets | 3b
.ds-logs-nginx.error-default-2025.05.30-000001 | event.created | 22.1mb
.ds-logs-nginx.error-default-2025.05.30-000001 | event.dataset | 87.3kb
.ds-logs-nginx.error-default-2025.05.30-000001 | event.ingested | 12.9mb
.ds-logs-nginx.error-default-2025.05.30-000001 | event.kind | 268.4kb
.ds-logs-nginx.error-default-2025.05.30-000001 | event.module | 87.3kb
.ds-logs-nginx.error-default-2025.05.30-000001 | event.timezone | 268.4kb
.ds-logs-nginx.error-default-2025.05.30-000001 | event.type | 268.4kb
.ds-logs-nginx.error-default-2025.05.30-000001 | event.type.offsets | 3b
.ds-logs-nginx.error-default-2025.05.30-000001 | fileset.name | 268.4kb
.ds-logs-nginx.error-default-2025.05.30-000001 | fileset.name.text | 268.4kb
.ds-logs-nginx.error-default-2025.05.30-000001 | fileset.name.text._original | 7.3mb
.ds-logs-nginx.error-default-2025.05.30-000001 | host.architecture | 268.4kb
.ds-logs-nginx.error-default-2025.05.30-000001 | host.containerized | 312.1kb
.ds-logs-nginx.error-default-2025.05.30-000001 | host.hostname | 421.5kb
.ds-logs-nginx.error-default-2025.05.30-000001 | host.id | 407.6kb
.ds-logs-nginx.error-default-2025.05.30-000001 | host.ip | 546.7kb
.ds-logs-nginx.error-default-2025.05.30-000001 | host.ip.offsets | 54.6kb
.ds-logs-nginx.error-default-2025.05.30-000001 | host.mac | 398.9kb
.ds-logs-nginx.error-default-2025.05.30-000001 | host.mac.offsets | 3b
.ds-logs-nginx.error-default-2025.05.30-000001 | host.name | 421.9kb
.ds-logs-nginx.error-default-2025.05.30-000001 | host.os.codename | 402.6kb
.ds-logs-nginx.error-default-2025.05.30-000001 | host.os.family | 341.6kb
.ds-logs-nginx.error-default-2025.05.30-000001 | host.os.kernel | 326.7kb
.ds-logs-nginx.error-default-2025.05.30-000001 | host.os.name | 308.9kb
.ds-logs-nginx.error-default-2025.05.30-000001 | host.os.name.text | 14.3mb
.ds-logs-nginx.error-default-2025.05.30-000001 | host.os.platform | 308.9kb
.ds-logs-nginx.error-default-2025.05.30-000001 | host.os.version | 353.5kb
.ds-logs-nginx.error-default-2025.05.30-000001 | input.type | 308.9kb
.ds-logs-nginx.error-default-2025.05.30-000001 | kubernetes.container.image | 60.1kb
.ds-logs-nginx.error-default-2025.05.30-000001 | kubernetes.container.name | 60.1kb
.ds-logs-nginx.error-default-2025.05.30-000001 | kubernetes.container.name.text | 154.6kb
.ds-logs-nginx.error-default-2025.05.30-000001 | kubernetes.container.name.text._original | 1.7mb
.ds-logs-nginx.error-default-2025.05.30-000001 | kubernetes.labels.app | 60.1kb
.ds-logs-nginx.error-default-2025.05.30-000001 | kubernetes.labels.heartbeat_port | 60.1kb
.ds-logs-nginx.error-default-2025.05.30-000001 | kubernetes.labels.heartbeat_type | 60.1kb
.ds-logs-nginx.error-default-2025.05.30-000001 | kubernetes.labels.pod-template-hash | 60.1kb
.ds-logs-nginx.error-default-2025.05.30-000001 | kubernetes.namespace | 60.1kb
.ds-logs-nginx.error-default-2025.05.30-000001 | kubernetes.node.name | 122.8kb
.ds-logs-nginx.error-default-2025.05.30-000001 | kubernetes.node.name.text | 823.9kb
.ds-logs-nginx.error-default-2025.05.30-000001 | kubernetes.node.name.text._original | 4.1mb
.ds-logs-nginx.error-default-2025.05.30-000001 | kubernetes.pod.name | 122.8kb
.ds-logs-nginx.error-default-2025.05.30-000001 | kubernetes.pod.name.text | 646.4kb
.ds-logs-nginx.error-default-2025.05.30-000001 | kubernetes.pod.name.text._original | 4.1mb
.ds-logs-nginx.error-default-2025.05.30-000001 | kubernetes.pod.uid | 122.8kb
.ds-logs-nginx.error-default-2025.05.30-000001 | kubernetes.replicaset.name | 60.1kb
.ds-logs-nginx.error-default-2025.05.30-000001 | kubernetes.replicaset.name.text | 489.4kb
.ds-logs-nginx.error-default-2025.05.30-000001 | kubernetes.replicaset.name.text._original | 3.6mb
.ds-logs-nginx.error-default-2025.05.30-000001 | log.file.path | 422.5kb
.ds-logs-nginx.error-default-2025.05.30-000001 | log.level | 1.5mb
.ds-logs-nginx.error-default-2025.05.30-000001 | log.offset | 30.5mb
.ds-logs-nginx.error-default-2025.05.30-000001 | message | 83.7mb
.ds-logs-nginx.error-default-2025.05.30-000001 | message._original | 127mb
.ds-logs-nginx.error-default-2025.05.30-000001 | nginx.error.connection_id | 24.1mb
.ds-logs-nginx.error-default-2025.05.30-000001 | process.pid | 2.6mb
.ds-logs-nginx.error-default-2025.05.30-000001 | process.thread.id | 2.6mb
.ds-logs-nginx.error-default-2025.05.30-000001 | rally.doc_size | 6.6mb
.ds-logs-nginx.error-default-2025.05.30-000001 | rally.message_size | 6.6mb
.ds-logs-nginx.error-default-2025.05.30-000001 | service.type | 268.4kb
.ds-logs-nginx.error-default-2025.05.30-000001 | stream | 60.1kb
.ds-logs-nginx.error-default-2025.05.30-000001 | tags | 1.5mb
.ds-logs-nginx.error-default-2025.05.30-000001 | tags.offsets | 25.7kb
.ds-logs-nginx.error-default-2025.05.30-000001 | type | 168.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | @timestamp | 13.8mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | __root_doc_for_nested | 0b
.ds-logs-postgresql.log-default-2025.05.30-000001 | _field_names | 1.8mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | _id | 10.7mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | _ignored | 765b
.ds-logs-postgresql.log-default-2025.05.30-000001 | _primary_term | 0b
.ds-logs-postgresql.log-default-2025.05.30-000001 | _recovery_source_size | 0b
.ds-logs-postgresql.log-default-2025.05.30-000001 | _seq_no | 19.2mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | _version | 0b
.ds-logs-postgresql.log-default-2025.05.30-000001 | agent.ephemeral_id | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | agent.hostname | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | agent.id | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | agent.name | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | agent.name.text | 843.1kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | agent.name.text._original | 1.6mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | agent.type | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | agent.version | 169.3kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | cloud.availability_zone | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | cloud.instance.id | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | cloud.instance.name | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | cloud.machine.type | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | cloud.project.id | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | cloud.provider | 169.3kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | data_stream.dataset | 55.1kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | data_stream.namespace | 55.1kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | data_stream.type | 55.1kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | ecs.version | 169.3kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | error.message | 2.3kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | error.message._original | 1.4mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | event.agent_id_status | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | event.category | 186.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | event.category.offsets | 17.1kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | event.dataset | 55.1kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | event.duration | 13.4mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | event.ingested | 3.6mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | event.kind | 186.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | event.module | 55.1kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | event.timezone | 169.3kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | event.type | 186.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | event.type.offsets | 17.1kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | fileset.name | 169.3kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | fileset.name.text | 169.3kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | fileset.name.text._original | 664.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | host.architecture | 169.3kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | host.containerized | 224.5kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | host.hostname | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | host.ip | 186.6kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | host.ip.offsets | 3b
.ds-logs-postgresql.log-default-2025.05.30-000001 | host.mac | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | host.mac.offsets | 3b
.ds-logs-postgresql.log-default-2025.05.30-000001 | host.name | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | host.os.codename | 169.3kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | host.os.family | 169.3kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | host.os.kernel | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | host.os.name | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | host.os.name.text | 1.7mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | host.os.platform | 169.3kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | host.os.version | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | input.type | 169.3kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | kubernetes.container.image | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | kubernetes.container.name | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | kubernetes.container.name.text | 169.3kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | kubernetes.container.name.text._original | 974.5kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | kubernetes.labels.app | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | kubernetes.labels.heartbeat_port | 169.3kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | kubernetes.labels.heartbeat_type | 169.3kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | kubernetes.labels.pod-template-hash | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | kubernetes.namespace | 169.3kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | kubernetes.node.name | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | kubernetes.node.name.text | 1.7mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | kubernetes.node.name.text._original | 2.5mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | kubernetes.pod.name | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | kubernetes.pod.name.text | 843.1kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | kubernetes.pod.name.text._original | 1.9mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | kubernetes.pod.uid | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | kubernetes.replicaset.name | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | kubernetes.replicaset.name.text | 618.5kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | kubernetes.replicaset.name.text._original | 1.6mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | log.file.path | 169.7kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | log.file.path.text | 1.2mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | log.file.path.text._original | 7.6mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | log.flags | 40.9kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | log.flags.offsets | 24.2kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | log.level | 1.7mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | log.offset | 19mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | message | 475.2kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | message._original | 43.9kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | postgresql.log.database | 1.4mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | postgresql.log.query | 18.4mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | postgresql.log.query_name | 303.1kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | postgresql.log.query_step | 1.6mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | postgresql.log.timestamp | 44.2mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | process.pid | 7.3mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | rally.doc_size | 4.1mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | rally.message_size | 4.1mb
.ds-logs-postgresql.log-default-2025.05.30-000001 | raw_message | 2.2kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | related.user | 522.5kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | related.user.offsets | 17.1kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | separator | 1kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | service.type | 169.4kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | stream | 169.3kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | user.name | 522.5kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | user.name.text | 338.3kb
.ds-logs-postgresql.log-default-2025.05.30-000001 | user.name.text._original | 610kb
.ds-logs-redis.log-default-2025.05.30-000001 | @timestamp | 70.3mb
.ds-logs-redis.log-default-2025.05.30-000001 | __root_doc_for_nested | 0b
.ds-logs-redis.log-default-2025.05.30-000001 | _field_names | 8.9mb
.ds-logs-redis.log-default-2025.05.30-000001 | _id | 68.5mb
.ds-logs-redis.log-default-2025.05.30-000001 | _primary_term | 0b
.ds-logs-redis.log-default-2025.05.30-000001 | _recovery_source_size | 0b
.ds-logs-redis.log-default-2025.05.30-000001 | _seq_no | 110.7mb
.ds-logs-redis.log-default-2025.05.30-000001 | _version | 0b
.ds-logs-redis.log-default-2025.05.30-000001 | agent.ephemeral_id | 888.1kb
.ds-logs-redis.log-default-2025.05.30-000001 | agent.hostname | 888.1kb
.ds-logs-redis.log-default-2025.05.30-000001 | agent.id | 888.1kb
.ds-logs-redis.log-default-2025.05.30-000001 | agent.name | 888.1kb
.ds-logs-redis.log-default-2025.05.30-000001 | agent.name.text | 4.3mb
.ds-logs-redis.log-default-2025.05.30-000001 | agent.name.text._original | 14.9mb
.ds-logs-redis.log-default-2025.05.30-000001 | agent.type | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | agent.version | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | cloud.availability_zone | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | cloud.instance.id | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | cloud.instance.name | 888.1kb
.ds-logs-redis.log-default-2025.05.30-000001 | cloud.machine.type | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | cloud.project.id | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | cloud.provider | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | data_stream.dataset | 288.4kb
.ds-logs-redis.log-default-2025.05.30-000001 | data_stream.namespace | 288.4kb
.ds-logs-redis.log-default-2025.05.30-000001 | data_stream.type | 288.4kb
.ds-logs-redis.log-default-2025.05.30-000001 | ecs.version | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | event.agent_id_status | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | event.created | 129.2mb
.ds-logs-redis.log-default-2025.05.30-000001 | event.dataset | 288.4kb
.ds-logs-redis.log-default-2025.05.30-000001 | event.ingested | 26.5mb
.ds-logs-redis.log-default-2025.05.30-000001 | event.module | 288.4kb
.ds-logs-redis.log-default-2025.05.30-000001 | fileset.name | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | fileset.name.text | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | fileset.name.text._original | 6mb
.ds-logs-redis.log-default-2025.05.30-000001 | host.architecture | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | host.containerized | 1mb
.ds-logs-redis.log-default-2025.05.30-000001 | host.hostname | 888.1kb
.ds-logs-redis.log-default-2025.05.30-000001 | host.id | 888.1kb
.ds-logs-redis.log-default-2025.05.30-000001 | host.ip | 992.6kb
.ds-logs-redis.log-default-2025.05.30-000001 | host.ip.offsets | 3b
.ds-logs-redis.log-default-2025.05.30-000001 | host.mac | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | host.mac.offsets | 3b
.ds-logs-redis.log-default-2025.05.30-000001 | host.name | 888.1kb
.ds-logs-redis.log-default-2025.05.30-000001 | host.os.codename | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | host.os.family | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | host.os.kernel | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | host.os.name | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | host.os.name.text | 13.2mb
.ds-logs-redis.log-default-2025.05.30-000001 | host.os.platform | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | host.os.version | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | input.type | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.container.image | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.container.name | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.container.name.text | 2mb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.container.name.text._original | 9.6mb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.labels.app | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.labels.heartbeat_port | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.labels.heartbeat_type | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.labels.pod-template-hash | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.labels.role | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.labels.tier | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.namespace | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.node.name | 888.1kb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.node.name.text | 8.9mb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.node.name.text._original | 23.3mb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.pod.name | 888.1kb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.pod.name.text | 4.3mb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.pod.name.text._original | 16.1mb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.pod.uid | 888.1kb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.replicaset.name | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.replicaset.name.text | 3.1mb
.ds-logs-redis.log-default-2025.05.30-000001 | kubernetes.replicaset.name.text._original | 13.7mb
.ds-logs-redis.log-default-2025.05.30-000001 | log.file.path | 888.3kb
.ds-logs-redis.log-default-2025.05.30-000001 | log.file.path.text | 6.6mb
.ds-logs-redis.log-default-2025.05.30-000001 | log.file.path.text._original | 71.3mb
.ds-logs-redis.log-default-2025.05.30-000001 | log.level | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | log.offset | 119.7mb
.ds-logs-redis.log-default-2025.05.30-000001 | message | 58.5mb
.ds-logs-redis.log-default-2025.05.30-000001 | message._original | 15.5mb
.ds-logs-redis.log-default-2025.05.30-000001 | process.pid | 992.6kb
.ds-logs-redis.log-default-2025.05.30-000001 | rally.doc_size | 9.3mb
.ds-logs-redis.log-default-2025.05.30-000001 | rally.message_size | 9.2mb
.ds-logs-redis.log-default-2025.05.30-000001 | redis.log.role | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | service.type | 888kb
.ds-logs-redis.log-default-2025.05.30-000001 | stream | 888kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | @timestamp | 65.4mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | __root_doc_for_nested | 0b
.ds-logs-redis.slowlog-default-2025.05.30-000001 | _field_names | 7.6mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | _id | 134.9mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | _primary_term | 0b
.ds-logs-redis.slowlog-default-2025.05.30-000001 | _recovery_source_size | 0b
.ds-logs-redis.slowlog-default-2025.05.30-000001 | _seq_no | 108.5mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | _version | 0b
.ds-logs-redis.slowlog-default-2025.05.30-000001 | agent.ephemeral_id | 873kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | agent.hostname | 873kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | agent.id | 873kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | agent.name | 873kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | agent.name.text | 4.2mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | agent.name.text._original | 116.4mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | agent.type | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | agent.version | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | cloud.availability_zone | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | cloud.instance.id | 873kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | cloud.instance.name | 873kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | cloud.machine.type | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | cloud.project.id | 873kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | cloud.provider | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | data_stream.dataset | 283.5kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | data_stream.namespace | 283.5kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | data_stream.type | 283.5kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | ecs.version | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | event.agent_id_status | 873kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | event.created | 128.8mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | event.dataset | 283.5kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | event.ingested | 22mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | event.module | 283.5kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | fileset.name | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | fileset.name.text | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | fileset.name.text._original | 59.8mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | host.architecture | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | host.containerized | 1014.7kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | host.hostname | 873kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | host.id | 873kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | host.ip | 975.8kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | host.ip.offsets | 3b
.ds-logs-redis.slowlog-default-2025.05.30-000001 | host.mac | 873kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | host.mac.offsets | 3b
.ds-logs-redis.slowlog-default-2025.05.30-000001 | host.name | 873kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | host.os.codename | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | host.os.family | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | host.os.kernel | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | host.os.name | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | host.os.name.text | 79mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | host.os.platform | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | host.os.version | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | input.type | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.container.image | 8.7mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.container.name | 8.7mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.container.name.text | 9.3mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.container.name.text._original | 78.6mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.labels.app | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.labels.heartbeat_port | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.labels.heartbeat_type | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.labels.pod-template-hash | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.labels.role | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.labels.tier | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.namespace | 872.9kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.node.name | 873kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.node.name.text | 8.7mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.node.name.text._original | 182.6mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.pod.name | 873kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.pod.name.text | 4.2mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.pod.name.text._original | 125.9mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.pod.uid | 873kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.replicaset.name | 873kb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.replicaset.name.text | 3.1mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | kubernetes.replicaset.name.text._original | 107mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | message | 402.6mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | message._original | 418.7mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | rally.doc_size | 26.9mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | rally.message_size | 24.4mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | redis.slowlog.args | 198.6mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | redis.slowlog.args.offsets | 24.5mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | redis.slowlog.cmd | 26.4mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | redis.slowlog.duration.us | 48.3mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | redis.slowlog.id | 116.6mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | redis.slowlog.key | 55.1mb
.ds-logs-redis.slowlog-default-2025.05.30-000001 | service.type | 872.9kb
.ds-logs-system.auth-default-2025.05.30-000001 | @timestamp | 32.8mb
.ds-logs-system.auth-default-2025.05.30-000001 | @version | 861.7kb
.ds-logs-system.auth-default-2025.05.30-000001 | __root_doc_for_nested | 0b
.ds-logs-system.auth-default-2025.05.30-000001 | _field_names | 8.5mb
.ds-logs-system.auth-default-2025.05.30-000001 | _id | 75.2mb
.ds-logs-system.auth-default-2025.05.30-000001 | _primary_term | 0b
.ds-logs-system.auth-default-2025.05.30-000001 | _recovery_source_size | 0b
.ds-logs-system.auth-default-2025.05.30-000001 | _seq_no | 108.8mb
.ds-logs-system.auth-default-2025.05.30-000001 | _version | 0b
.ds-logs-system.auth-default-2025.05.30-000001 | agent.ephemeral_id | 20.7mb
.ds-logs-system.auth-default-2025.05.30-000001 | agent.hostname | 7.6mb
.ds-logs-system.auth-default-2025.05.30-000001 | agent.id | 1.5mb
.ds-logs-system.auth-default-2025.05.30-000001 | agent.name | 353.3kb
.ds-logs-system.auth-default-2025.05.30-000001 | agent.name.text | 409.1kb
.ds-logs-system.auth-default-2025.05.30-000001 | agent.name.text._original | 3mb
.ds-logs-system.auth-default-2025.05.30-000001 | agent.type | 778.4kb
.ds-logs-system.auth-default-2025.05.30-000001 | agent.version | 778.4kb
.ds-logs-system.auth-default-2025.05.30-000001 | cloud.account.id | 29.8kb
.ds-logs-system.auth-default-2025.05.30-000001 | cloud.availability_zone | 5.2mb
.ds-logs-system.auth-default-2025.05.30-000001 | cloud.image.id | 48kb
.ds-logs-system.auth-default-2025.05.30-000001 | cloud.instance.id | 19.4mb
.ds-logs-system.auth-default-2025.05.30-000001 | cloud.instance.name | 19.2mb
.ds-logs-system.auth-default-2025.05.30-000001 | cloud.machine.type | 1.2mb
.ds-logs-system.auth-default-2025.05.30-000001 | cloud.project.id | 1.1mb
.ds-logs-system.auth-default-2025.05.30-000001 | cloud.provider | 885.2kb
.ds-logs-system.auth-default-2025.05.30-000001 | cloud.region | 29.8kb
.ds-logs-system.auth-default-2025.05.30-000001 | data_stream.dataset | 252.8kb
.ds-logs-system.auth-default-2025.05.30-000001 | data_stream.namespace | 252.8kb
.ds-logs-system.auth-default-2025.05.30-000001 | data_stream.type | 252.8kb
.ds-logs-system.auth-default-2025.05.30-000001 | ecs.version | 778.4kb
.ds-logs-system.auth-default-2025.05.30-000001 | event.action | 6.6mb
.ds-logs-system.auth-default-2025.05.30-000001 | event.agent_id_status | 778.4kb
.ds-logs-system.auth-default-2025.05.30-000001 | event.category | 8.8mb
.ds-logs-system.auth-default-2025.05.30-000001 | event.category.offsets | 2.2mb
.ds-logs-system.auth-default-2025.05.30-000001 | event.dataset | 252.8kb
.ds-logs-system.auth-default-2025.05.30-000001 | event.ingested | 61.3mb
.ds-logs-system.auth-default-2025.05.30-000001 | event.kind | 778.4kb
.ds-logs-system.auth-default-2025.05.30-000001 | event.module | 252.8kb
.ds-logs-system.auth-default-2025.05.30-000001 | event.outcome | 1.6mb
.ds-logs-system.auth-default-2025.05.30-000001 | event.timezone | 1.1mb
.ds-logs-system.auth-default-2025.05.30-000001 | event.type | 3.8mb
.ds-logs-system.auth-default-2025.05.30-000001 | event.type.offsets | 1.1mb
.ds-logs-system.auth-default-2025.05.30-000001 | fileset.name | 778.4kb
.ds-logs-system.auth-default-2025.05.30-000001 | fileset.name.text | 778.4kb
.ds-logs-system.auth-default-2025.05.30-000001 | fileset.name.text._original | 12.9mb
.ds-logs-system.auth-default-2025.05.30-000001 | group.id | 1mb
.ds-logs-system.auth-default-2025.05.30-000001 | group.name | 681kb
.ds-logs-system.auth-default-2025.05.30-000001 | host.architecture | 1000.1kb
.ds-logs-system.auth-default-2025.05.30-000001 | host.containerized | 904.8kb
.ds-logs-system.auth-default-2025.05.30-000001 | host.hostname | 4mb
.ds-logs-system.auth-default-2025.05.30-000001 | host.id | 1.4mb
.ds-logs-system.auth-default-2025.05.30-000001 | host.ip | 57.2mb
.ds-logs-system.auth-default-2025.05.30-000001 | host.ip.offsets | 492.7kb
.ds-logs-system.auth-default-2025.05.30-000001 | host.mac | 14.5mb
.ds-logs-system.auth-default-2025.05.30-000001 | host.mac.offsets | 435.6kb
.ds-logs-system.auth-default-2025.05.30-000001 | host.name | 7.6mb
.ds-logs-system.auth-default-2025.05.30-000001 | host.os.codename | 1.2mb
.ds-logs-system.auth-default-2025.05.30-000001 | host.os.family | 1.2mb
.ds-logs-system.auth-default-2025.05.30-000001 | host.os.kernel | 1.4mb
.ds-logs-system.auth-default-2025.05.30-000001 | host.os.name | 1mb
.ds-logs-system.auth-default-2025.05.30-000001 | host.os.name.text | 1mb
.ds-logs-system.auth-default-2025.05.30-000001 | host.os.name.text._original | 15.6mb
.ds-logs-system.auth-default-2025.05.30-000001 | host.os.platform | 1mb
.ds-logs-system.auth-default-2025.05.30-000001 | host.os.version | 1.3mb
.ds-logs-system.auth-default-2025.05.30-000001 | input.type | 778.4kb
.ds-logs-system.auth-default-2025.05.30-000001 | log.file.path | 1.1mb
.ds-logs-system.auth-default-2025.05.30-000001 | log.offset | 61.7mb
.ds-logs-system.auth-default-2025.05.30-000001 | message | 43.7mb
.ds-logs-system.auth-default-2025.05.30-000001 | message._original | 43.7mb
.ds-logs-system.auth-default-2025.05.30-000001 | process.name | 12.3mb
.ds-logs-system.auth-default-2025.05.30-000001 | process.name.text | 6.9mb
.ds-logs-system.auth-default-2025.05.30-000001 | process.name.text._original | 16mb
.ds-logs-system.auth-default-2025.05.30-000001 | process.pid | 25.3mb
.ds-logs-system.auth-default-2025.05.30-000001 | rally.doc_size | 14.3mb
.ds-logs-system.auth-default-2025.05.30-000001 | rally.message_size | 14mb
.ds-logs-system.auth-default-2025.05.30-000001 | related.hosts | 4mb
.ds-logs-system.auth-default-2025.05.30-000001 | related.hosts.offsets | 3b
.ds-logs-system.auth-default-2025.05.30-000001 | related.ip | 455.7kb
.ds-logs-system.auth-default-2025.05.30-000001 | related.ip.offsets | 86.3kb
.ds-logs-system.auth-default-2025.05.30-000001 | related.user | 15.5mb
.ds-logs-system.auth-default-2025.05.30-000001 | related.user.offsets | 3.7mb
.ds-logs-system.auth-default-2025.05.30-000001 | service.type | 778.4kb
.ds-logs-system.auth-default-2025.05.30-000001 | source.address | 291.5kb
.ds-logs-system.auth-default-2025.05.30-000001 | source.as.number | 370.1kb
.ds-logs-system.auth-default-2025.05.30-000001 | source.as.organization.name | 226.2kb
.ds-logs-system.auth-default-2025.05.30-000001 | source.as.organization.name.text | 177.4kb
.ds-logs-system.auth-default-2025.05.30-000001 | source.as.organization.name.text._original | 561.6kb
.ds-logs-system.auth-default-2025.05.30-000001 | source.geo.city_name | 128.9kb
.ds-logs-system.auth-default-2025.05.30-000001 | source.geo.continent_name | 153.1kb
.ds-logs-system.auth-default-2025.05.30-000001 | source.geo.country_iso_code | 185.2kb
.ds-logs-system.auth-default-2025.05.30-000001 | source.geo.country_name | 185.8kb
.ds-logs-system.auth-default-2025.05.30-000001 | source.geo.location | 584.8kb
.ds-logs-system.auth-default-2025.05.30-000001 | source.geo.region_iso_code | 127.1kb
.ds-logs-system.auth-default-2025.05.30-000001 | source.geo.region_name | 128.7kb
.ds-logs-system.auth-default-2025.05.30-000001 | source.ip | 455.7kb
.ds-logs-system.auth-default-2025.05.30-000001 | source.port | 394.6kb
.ds-logs-system.auth-default-2025.05.30-000001 | system.auth.ssh.dropped_ip | 33.9kb
.ds-logs-system.auth-default-2025.05.30-000001 | system.auth.ssh.event | 167.2kb
.ds-logs-system.auth-default-2025.05.30-000001 | system.auth.ssh.method | 123kb
.ds-logs-system.auth-default-2025.05.30-000001 | system.auth.ssh.signature | 32.5kb
.ds-logs-system.auth-default-2025.05.30-000001 | system.auth.sudo.command | 10.3mb
.ds-logs-system.auth-default-2025.05.30-000001 | system.auth.sudo.pwd | 2.1mb
.ds-logs-system.auth-default-2025.05.30-000001 | system.auth.sudo.tty | 1.9mb
.ds-logs-system.auth-default-2025.05.30-000001 | system.auth.sudo.user | 2mb
.ds-logs-system.auth-default-2025.05.30-000001 | system.auth.useradd.home | 687kb
.ds-logs-system.auth-default-2025.05.30-000001 | system.auth.useradd.shell | 621kb
.ds-logs-system.auth-default-2025.05.30-000001 | tags | 4.8mb
.ds-logs-system.auth-default-2025.05.30-000001 | tags.offsets | 93.7kb
.ds-logs-system.auth-default-2025.05.30-000001 | type | 861.7kb
.ds-logs-system.auth-default-2025.05.30-000001 | user.effective.name | 3.7mb
.ds-logs-system.auth-default-2025.05.30-000001 | user.effective.name.text | 1.7mb
.ds-logs-system.auth-default-2025.05.30-000001 | user.effective.name.text._original | 3.6mb
.ds-logs-system.auth-default-2025.05.30-000001 | user.id | 3.9mb
.ds-logs-system.auth-default-2025.05.30-000001 | user.name | 17.3mb
.ds-logs-system.auth-default-2025.05.30-000001 | user.name.text | 2.9mb
.ds-logs-system.auth-default-2025.05.30-000001 | user.name.text._original | 6.5mb
.ds-logs-system.syslog-default-2025.05.30-000001 | @timestamp | 187.6mb
.ds-logs-system.syslog-default-2025.05.30-000001 | @version | 1.6mb
.ds-logs-system.syslog-default-2025.05.30-000001 | __root_doc_for_nested | 0b
.ds-logs-system.syslog-default-2025.05.30-000001 | _field_names | 8.2mb
.ds-logs-system.syslog-default-2025.05.30-000001 | _id | 165.5mb
.ds-logs-system.syslog-default-2025.05.30-000001 | _primary_term | 0b
.ds-logs-system.syslog-default-2025.05.30-000001 | _recovery_source_size | 0b
.ds-logs-system.syslog-default-2025.05.30-000001 | _seq_no | 287mb
.ds-logs-system.syslog-default-2025.05.30-000001 | _version | 0b
.ds-logs-system.syslog-default-2025.05.30-000001 | agent.ephemeral_id | 7.9mb
.ds-logs-system.syslog-default-2025.05.30-000001 | agent.hostname | 7.2mb
.ds-logs-system.syslog-default-2025.05.30-000001 | agent.id | 2.6mb
.ds-logs-system.syslog-default-2025.05.30-000001 | agent.type | 1.6mb
.ds-logs-system.syslog-default-2025.05.30-000001 | agent.version | 1.6mb
.ds-logs-system.syslog-default-2025.05.30-000001 | cloud.availability_zone | 3.4mb
.ds-logs-system.syslog-default-2025.05.30-000001 | cloud.instance.id | 7.4mb
.ds-logs-system.syslog-default-2025.05.30-000001 | cloud.instance.name | 7.2mb
.ds-logs-system.syslog-default-2025.05.30-000001 | cloud.machine.type | 2.6mb
.ds-logs-system.syslog-default-2025.05.30-000001 | cloud.project.id | 1.9mb
.ds-logs-system.syslog-default-2025.05.30-000001 | cloud.provider | 1.6mb
.ds-logs-system.syslog-default-2025.05.30-000001 | data_stream.dataset | 550.9kb
.ds-logs-system.syslog-default-2025.05.30-000001 | data_stream.namespace | 550.9kb
.ds-logs-system.syslog-default-2025.05.30-000001 | data_stream.type | 550.9kb
.ds-logs-system.syslog-default-2025.05.30-000001 | ecs.version | 1.6mb
.ds-logs-system.syslog-default-2025.05.30-000001 | event.agent_id_status | 1.6mb
.ds-logs-system.syslog-default-2025.05.30-000001 | event.dataset | 550.9kb
.ds-logs-system.syslog-default-2025.05.30-000001 | event.ingested | 155.9mb
.ds-logs-system.syslog-default-2025.05.30-000001 | event.module | 550.9kb
.ds-logs-system.syslog-default-2025.05.30-000001 | event.timezone | 1.6mb
.ds-logs-system.syslog-default-2025.05.30-000001 | fileset.name | 1.6mb
.ds-logs-system.syslog-default-2025.05.30-000001 | fileset.name.text | 1.6mb
.ds-logs-system.syslog-default-2025.05.30-000001 | fileset.name.text._original | 42mb
.ds-logs-system.syslog-default-2025.05.30-000001 | host.architecture | 1.6mb
.ds-logs-system.syslog-default-2025.05.30-000001 | host.containerized | 1.9mb
.ds-logs-system.syslog-default-2025.05.30-000001 | host.hostname | 2.6mb
.ds-logs-system.syslog-default-2025.05.30-000001 | host.id | 2.8mb
.ds-logs-system.syslog-default-2025.05.30-000001 | host.ip | 48.7mb
.ds-logs-system.syslog-default-2025.05.30-000001 | host.ip.offsets | 385.8kb
.ds-logs-system.syslog-default-2025.05.30-000001 | host.mac | 10.6mb
.ds-logs-system.syslog-default-2025.05.30-000001 | host.mac.offsets | 376.3kb
.ds-logs-system.syslog-default-2025.05.30-000001 | host.name | 7.2mb
.ds-logs-system.syslog-default-2025.05.30-000001 | host.os.codename | 2.1mb
.ds-logs-system.syslog-default-2025.05.30-000001 | host.os.family | 2.5mb
.ds-logs-system.syslog-default-2025.05.30-000001 | host.os.kernel | 2.4mb
.ds-logs-system.syslog-default-2025.05.30-000001 | host.os.name | 2.5mb
.ds-logs-system.syslog-default-2025.05.30-000001 | host.os.name.text | 3.5mb
.ds-logs-system.syslog-default-2025.05.30-000001 | host.os.name.text._original | 51mb
.ds-logs-system.syslog-default-2025.05.30-000001 | host.os.platform | 2.1mb
.ds-logs-system.syslog-default-2025.05.30-000001 | host.os.version | 2.5mb
.ds-logs-system.syslog-default-2025.05.30-000001 | input.type | 1.6mb
.ds-logs-system.syslog-default-2025.05.30-000001 | log.file.path | 6.3mb
.ds-logs-system.syslog-default-2025.05.30-000001 | log.offset | 151mb
.ds-logs-system.syslog-default-2025.05.30-000001 | message | 258.7mb
.ds-logs-system.syslog-default-2025.05.30-000001 | message._original | 182.5mb
.ds-logs-system.syslog-default-2025.05.30-000001 | process.name | 44.1mb
.ds-logs-system.syslog-default-2025.05.30-000001 | process.name.text | 18.7mb
.ds-logs-system.syslog-default-2025.05.30-000001 | process.name.text._original | 44.9mb
.ds-logs-system.syslog-default-2025.05.30-000001 | process.pid | 45.3mb
.ds-logs-system.syslog-default-2025.05.30-000001 | rally.doc_size | 42.6mb
.ds-logs-system.syslog-default-2025.05.30-000001 | rally.message_size | 42.1mb
.ds-logs-system.syslog-default-2025.05.30-000001 | service.type | 1.6mb
.ds-logs-system.syslog-default-2025.05.30-000001 | tags | 10.1mb
.ds-logs-system.syslog-default-2025.05.30-000001 | tags.offsets | 22.9kb
.ds-logs-system.syslog-default-2025.05.30-000001 | type | 1.6mb

@parkertimmins
Copy link
Contributor Author

Also, here are the per index/format sizes from the previous baseline I ran off of commit 9db1837 . This commit includes the recent changes which removed points from seq_no

Index Name Total Inverted Index Storage Field Doc Values Points Norms
.ds-logs-apache.access-default-2025.05.29-000001 1.2gb 442.6mb 243.2mb 490.7mb 151.1mb 0b
.ds-logs-apache.error-default-2025.05.29-000001 539.4mb 118.3mb 154.8mb 116.3mb 149.8mb 0b
.ds-logs-k8-application.log-default-2025.05.29-000001 16.1gb 5.2gb 6.6gb 2.5gb 1.7gb 0b
.ds-logs-k8-application.log-default-2025.05.29-000002 7gb 2.2gb 2.9gb 1gb 770.2mb 0b
.ds-logs-kafka.log-default-2025.05.29-000001 650mb 213.1mb 131.6mb 164mb 137.5mb 3.6mb
.ds-logs-mysql.error-default-2025.05.29-000001 233.5mb 57mb 50.4mb 57.4mb 68.5mb 0b
.ds-logs-mysql.slowlog-default-2025.05.29-000001 435.8mb 81.4mb 95.6mb 130.1mb 128.6mb 0b
.ds-logs-nginx.access-default-2025.05.29-000001 5.7gb 1.7gb 636.6mb 2.7gb 663.3mb 27.3mb
.ds-logs-nginx.error-default-2025.05.29-000001 463.1mb 121.8mb 192.6mb 60.6mb 82.5mb 5.4mb
.ds-logs-postgresql.log-default-2025.05.29-000001 190.6mb 64mb 21.2mb 69.8mb 35.5mb 0b
.ds-logs-redis.log-default-2025.05.29-000001 804.1mb 198.7mb 191mb 190.8mb 223.4mb 0b
.ds-logs-redis.slowlog-default-2025.05.29-000001 2.5gb 700.2mb 1.2gb 382.4mb 248.7mb 0b
.ds-logs-system.auth-default-2025.05.29-000001 794.9mb 244.4mb 122.2mb 262.2mb 166mb 0b
.ds-logs-system.syslog-default-2025.05.29-000001 1.6gb 513.3mb 373.8mb 447.5mb 390.6mb 0b

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants