diff --git a/x-pack/plugin/esql/qa/testFixtures/src/main/java/org/elasticsearch/xpack/esql/CsvTestsDataLoader.java b/x-pack/plugin/esql/qa/testFixtures/src/main/java/org/elasticsearch/xpack/esql/CsvTestsDataLoader.java index 53a223c1453e1..8a92f02a6f2ec 100644 --- a/x-pack/plugin/esql/qa/testFixtures/src/main/java/org/elasticsearch/xpack/esql/CsvTestsDataLoader.java +++ b/x-pack/plugin/esql/qa/testFixtures/src/main/java/org/elasticsearch/xpack/esql/CsvTestsDataLoader.java @@ -143,6 +143,11 @@ public class CsvTestsDataLoader { private static final TestDataset MULTIVALUE_POINTS = new TestDataset("multivalue_points"); private static final TestDataset DISTANCES = new TestDataset("distances"); private static final TestDataset K8S = new TestDataset("k8s", "k8s-mappings.json", "k8s.csv").withSetting("k8s-settings.json"); + private static final TestDataset K8S_DOWNSAMPLED = new TestDataset( + "k8s-downsampled", + "k8s-downsampled-mappings.json", + "k8s-downsampled.csv" + ).withSetting("k8s-downsampled-settings.json"); private static final TestDataset ADDRESSES = new TestDataset("addresses"); private static final TestDataset BOOKS = new TestDataset("books").withSetting("books-settings.json"); private static final TestDataset SEMANTIC_TEXT = new TestDataset("semantic_text").withInferenceEndpoint(true); @@ -206,6 +211,7 @@ public class CsvTestsDataLoader { Map.entry(DATE_NANOS.indexName, DATE_NANOS), Map.entry(DATE_NANOS_UNION_TYPES.indexName, DATE_NANOS_UNION_TYPES), Map.entry(K8S.indexName, K8S), + Map.entry(K8S_DOWNSAMPLED.indexName, K8S_DOWNSAMPLED), Map.entry(DISTANCES.indexName, DISTANCES), Map.entry(ADDRESSES.indexName, ADDRESSES), Map.entry(BOOKS.indexName, BOOKS), diff --git a/x-pack/plugin/esql/qa/testFixtures/src/main/resources/data/k8s-downsampled.csv b/x-pack/plugin/esql/qa/testFixtures/src/main/resources/data/k8s-downsampled.csv new file mode 100644 index 0000000000000..8dc1c44b1ae9f --- /dev/null +++ b/x-pack/plugin/esql/qa/testFixtures/src/main/resources/data/k8s-downsampled.csv @@ -0,0 +1,28 @@ +@timestamp:date,cluster:keyword,pod:keyword,client.ip:ip,network.bytes_in:long,network.total_bytes_in:counter_long,network.cost:double,network.total_cost:counter_double,network.eth0.up:boolean,network.eth0.tx:aggregate_metric_double,network.eth0.rx:aggregate_metric_double,network.eth0.last_up:date_nanos,network.eth0.firmware_version:version,network.eth0.currently_connected_clients:integer,events_received:long,event_log:text +2024-05-09T23:30:00.000Z,staging,one,10.10.20.34,699,821,9.375,9.875,true,{"min":263.0\,"max":740.0\,"sum":5390.0\,"value_count":10},{"min":397.0\,"max":1079.0\,"sum":6348.0\,"value_count":6},2024-04-13T05:15:29.735829818Z,7.8.4,862,10,Lorem ipsum dolor sit amet consectetur adipiscing elit nulla ut in nullam tristique viverra penatibus ac integer +2024-05-09T23:30:00.000Z,staging,two,10.10.20.34,473,838,1.25,8.125,true,{"min":442.0\,"max":1011.0\,"sum":3850.0\,"value_count":7},{"min":226.0\,"max":226.0\,"sum":226.0\,"value_count":1},2024-05-03T15:37:33.324440296Z,6.2.3,369,6,interdum ridiculus tellus risus iaculis faucibus. Eu cursus ante et nullam litora nulla habitasse nisl dignissim quisque molestie pretium +2024-05-09T23:30:00.000Z,staging,three,10.10.20.30,113,930,9.25,6.5,false,{"min":341.0\,"max":592.0\,"sum":1956.0\,"value_count":5},{"min":289.0\,"max":869.0\,"sum":2604.0\,"value_count":6},2024-03-25T09:57:51.755620402Z,13.10.4,949,,integer +2024-05-09T23:30:00.000Z,prod,one,10.10.20.30,677,285,12.125,5.75,false,{"min":565.0\,"max":829.0\,"sum":7290.0\,"value_count":10},{"min":221.0\,"max":836.0\,"sum":6696.0\,"value_count":9},2024-03-20T09:48:57.054739676Z,13.10.4,429,2,tortor felis +2024-05-09T23:30:00.000Z,prod,two,10.10.20.31,278,1038,5.375,3.75,true,{"min":20.0\,"max":190.0\,"sum":370.0\,"value_count":10},{"min":478.0\,"max":1371.0\,"sum":1849.0\,"value_count":2},2024-03-31T23:14:25.575848186Z,10.3.2,173,,dapibus condimentum vulputate +2024-05-09T23:30:00.000Z,prod,three,10.10.20.33,799,210,12.375,11.875,false,{"min":201.0\,"max":582.0\,"sum":1794.0\,"value_count":6},{"min":452.0\,"max":882.0\,"sum":1786.0\,"value_count":3},2024-03-04T17:45:29.246148803Z,1.1.7,707,[6,5],lacus sociosqu +2024-05-09T23:30:00.000Z,qa,one,10.10.20.31,903,363,7.625,6.75,false,{"min":346.0\,"max":356.0\,"sum":1765.0\,"value_count":5},{"min":329.0\,"max":655.0\,"sum":3780.0\,"value_count":9},2024-04-09T03:20:29.012174065Z,13.10.4,112,5,dignissim libero ultrices posuere nam facilisis parturient +2024-05-09T23:30:00.000Z,qa,two,10.10.20.31,354,1032,6.0,10.0,true,{"min":304.0\,"max":1148.0\,"sum":8590.0\,"value_count":10},{"min":382.0\,"max":461.0\,"sum":3825.0\,"value_count":9},2024-03-26T14:35:33.804256950Z,9.10.4,681,8,congue tempus nullam nostra +2024-05-09T23:30:00.000Z,qa,three,10.10.20.30,913,1143,5.875,3.75,true,{"min":605.0\,"max":605.0\,"sum":605.0\,"value_count":1},{"min":1.0\,"max":1.0\,"sum":1.0\,"value_count":1},2024-03-08T22:53:05.640952745Z,1.1.7,342,,vivamus varius massa nisi in sociosqu egestas +2024-05-09T23:40:00.000Z,staging,one,10.10.20.32,369,860,6.75,12.25,true,{"min":231.0\,"max":795.0\,"sum":4096.0\,"value_count":8},{"min":130.0\,"max":478.0\,"sum":984.0\,"value_count":4},2024-03-16T00:22:05.915277155Z,13.10.4,382,,nam tellus scelerisque nostra suscipit +2024-05-09T23:40:00.000Z,staging,two,10.10.20.34,585,902,4.0,9.375,true,{"min":604.0\,"max":664.0\,"sum":3100.0\,"value_count":5},{"min":359.0\,"max":968.0\,"sum":1327.0\,"value_count":2},2024-05-02T13:22:35.021783722Z,1.7.2,788,2,eget pretium diam +2024-05-09T23:40:00.000Z,staging,three,10.10.20.35,178,995,2.25,7.875,true,{"min":172.0\,"max":411.0\,"sum":755.0\,"value_count":3},{"min":402.0\,"max":1353.0\,"sum":1755.0\,"value_count":2},2024-05-02T02:15:40.627302753Z,6.2.3,16,[4,3,6,4],lacinia elementum vivamus +2024-05-09T23:40:00.000Z,prod,one,10.10.20.30,723,309,11.25,6.125,false,{"min":94.0\,"max":94.0\,"sum":94.0\,"value_count":1},{"min":291.0\,"max":317.0\,"sum":1818.0\,"value_count":6},2024-04-30T05:39:40.656342946Z,7.8.4,837,2,netus magna sed diam iaculis etiam arcu +2024-05-09T23:40:00.000Z,prod,two,10.10.20.35,807,1102,2.375,4.125,true,{"min":663.0\,"max":1419.0\,"sum":11259.0\,"value_count":9},{"min":342.0\,"max":342.0\,"sum":342.0\,"value_count":1},2024-03-21T19:14:43.937075439Z,6.2.5,937,5,lacus. Pretium varius placerat cras platea potenti pellentesque imperdiet tortor felis +2024-05-09T23:40:00.000Z,prod,three,10.10.20.34,587,245,5.125,13.175,true,{"min":113.0\,"max":341.0\,"sum":1112.0\,"value_count":4},{"min":98.0\,"max":220.0\,"sum":416.0\,"value_count":3},2024-05-08T10:03:43.290628939Z,7.8.4,394,,semper laoreet +2024-05-09T23:40:00.000Z,qa,one,10.10.20.35,855,395,9.625,8.125,false,{"min":176.0\,"max":1042.0\,"sum":5579.0\,"value_count":7},{"min":684.0\,"max":1049.0\,"sum":8850.0\,"value_count":10},2024-05-06T19:01:53.843370676Z,6.2.5,883,[5,4,9],duis +2024-05-09T23:40:00.000Z,qa,two,10.10.20.33,626,1152,9.25,12.5,true,{"min":441.0\,"max":1248.0\,"sum":11960.0\,"value_count":10},{"min":80.0\,"max":131.0\,"sum":530.0\,"value_count":5},2024-03-19T02:09:13.266861811Z,15.6.9,990,4,libero ultrices a facilisi fermentum tempor blandit +2024-05-09T23:40:00.000Z,qa,three,10.10.20.34,658,1209,2.5,6.75,true,{"min":321.0\,"max":685.0\,"sum":1932.0\,"value_count":3},{"min":690.0\,"max":1237.0\,"sum":7447.0\,"value_count":10},2024-04-08T06:06:26.066279299Z,15.6.9,367,10,vitae malesuada hendrerit proin. Lobortis arcu sociosqu porta pretium faucibus +2024-05-09T23:50:00.000Z,staging,one,10.10.20.33,970,1094,8.375,13.875,false,{"min":157.0\,"max":193.0\,"sum":1232.0\,"value_count":7},{"min":362.0\,"max":741.0\,"sum":3360.0\,"value_count":8},2024-04-04T01:13:26.805245198Z,9.10.4,742,,Aenean himenaeos urna +2024-05-09T23:50:00.000Z,staging,two,10.10.20.32,277,930,8.125,10.875,true,{"min":315.0\,"max":815.0\,"sum":4320.0\,"value_count":8},{"min":420.0\,"max":583.0\,"sum":4592.0\,"value_count":8},2024-04-09T01:32:26.195310764Z,1.7.2,635,8,posuere nam facilisis parturient +2024-05-09T23:50:00.000Z,staging,three,10.10.20.32,888,1027,12.125,8.75,false,{"min":690.0\,"max":824.0\,"sum":2936.0\,"value_count":4},{"min":673.0\,"max":995.0\,"sum":5033.0\,"value_count":7},2024-05-02T09:02:26.799002478Z,7.8.4,354,[2,8,1],vulputate suscipit fames imperdiet per scelerisque viverra. Odio sem mi molestie luctus dictumst sagittis inceptos +2024-05-09T23:50:00.000Z,prod,one,10.10.20.33,567,336,1.25,8.125,false,{"min":598.0\,"max":1060.0\,"sum":6986.0\,"value_count":7},{"min":228.0\,"max":228.0\,"sum":228.0\,"value_count":1},2024-04-09T11:53:40.737436413Z,7.8.4,347,[5,1],leo habitant integer at mi platea id +2024-05-09T23:50:00.000Z,prod,two,10.10.20.34,61,1286,11.375,5.0,true,{"min":377.0\,"max":602.0\,"sum":2190.0\,"value_count":5},{"min":437.0\,"max":559.0\,"sum":2744.0\,"value_count":6},2024-03-27T01:47:53.333418071Z,1.7.2,728,[2],erat. Placerat mi litora fringilla tellus pretium aliquet ut ridiculus magnis magna +2024-05-09T23:50:00.000Z,prod,three,10.10.20.35,685,250,1.125,16.375,true,{"min":162.0\,"max":715.0\,"sum":1912.0\,"value_count":8},{"min":163.0\,"max":989.0\,"sum":7448.0\,"value_count":8},2024-04-28T06:40:53.255612616Z,1.1.7,180,3,augue nullam rutrum nisl semper. Arcu posuere eu dictum dictumst class semper tristique velit lobortis +2024-05-09T23:50:00.000Z,qa,one,10.10.20.30,56,421,9.875,8.5,false,{"min":468.0\,"max":694.0\,"sum":3075.0\,"value_count":5},{"min":512.0\,"max":1509.0\,"sum":2021.0\,"value_count":2},2024-04-13T19:39:21.309897250Z,1.1.8,591,1,penatibus fusce nisl interdum erat. Donec per congue quam augue netus nec platea ut faucibus pretium sollicitudin +2024-05-09T23:50:00.000Z,qa,two,10.10.20.32,166,1210,7.625,13.0,false,{"min":75.0\,"max":594.0\,"sum":5760.0\,"value_count":10},{"min":178.0\,"max":815.0\,"sum":3875.0\,"value_count":5},2024-04-20T17:10:23.239086129Z,1.1.8,79,,nisl +2024-05-09T23:50:00.000Z,qa,three,10.10.20.35,978,1302,10.375,7.25,false,{"min":243.0\,"max":398.0\,"sum":2585.0\,"value_count":10},{"min":138.0\,"max":669.0\,"sum":5211.0\,"value_count":9},2024-04-13T14:28:49.596411037Z,1.1.8,880,,Sed ultricies mus nostra mauris vivamus velit habitant aenean diff --git a/x-pack/plugin/esql/qa/testFixtures/src/main/resources/data/k8s.csv b/x-pack/plugin/esql/qa/testFixtures/src/main/resources/data/k8s.csv index d2c17d7971a58..77256c9a5a794 100644 --- a/x-pack/plugin/esql/qa/testFixtures/src/main/resources/data/k8s.csv +++ b/x-pack/plugin/esql/qa/testFixtures/src/main/resources/data/k8s.csv @@ -1,201 +1,201 @@ -@timestamp:date,cluster:keyword,pod:keyword,client.ip:ip,network.bytes_in:long,network.total_bytes_in:counter_long,network.cost:double,network.total_cost:counter_double -2024-05-10T00:00:29.000Z,staging,two,10.10.20.34,699,953,9.375,11.25 -2024-05-10T00:00:33.000Z,staging,three,10.10.20.34,473,1111,1.25,9.125 -2024-05-10T00:00:51.000Z,prod,three,10.10.20.30,113,278,9.25,17.375 -2024-05-10T00:00:57.000Z,prod,three,10.10.20.30,677,955,12.125,29.5 -2024-05-10T00:01:25.000Z,qa,one,10.10.20.31,278,449,5.375,9.0 -2024-05-10T00:01:29.000Z,qa,two,10.10.20.33,799,1226,12.375,13.875 -2024-05-10T00:01:29.000Z,prod,three,10.10.20.31,903,1858,7.625,7.625 -2024-05-10T00:01:33.000Z,prod,one,10.10.20.31,354,354,6.0,9.875 -2024-05-10T00:02:05.000Z,qa,two,10.10.20.30,913,2139,5.875,19.75 -2024-05-10T00:02:05.000Z,prod,three,10.10.20.32,369,2227,6.75,6.75 -2024-05-10T00:02:35.000Z,qa,three,10.10.20.34,585,1441,4.0,7.875 -2024-05-10T00:02:40.000Z,staging,three,10.10.20.35,178,1289,2.25,11.375 -2024-05-10T00:02:40.000Z,staging,two,10.10.20.30,723,1676,11.25,22.5 -2024-05-10T00:02:43.000Z,prod,two,10.10.20.35,807,1395,2.375,5.25 -2024-05-10T00:02:43.000Z,staging,two,10.10.20.34,587,2263,5.125,5.125 -2024-05-10T00:02:53.000Z,prod,two,10.10.20.35,855,2250,9.625,14.875 -2024-05-10T00:03:13.000Z,staging,one,10.10.20.33,626,1103,9.25,16.875 -2024-05-10T00:03:26.000Z,staging,one,10.10.20.34,658,1761,2.5,19.375 -2024-05-10T00:03:26.000Z,prod,one,10.10.20.33,970,1324,8.375,18.25 -2024-05-10T00:03:26.000Z,qa,three,10.10.20.32,277,1718,8.125,16.0 -2024-05-10T00:03:26.000Z,staging,two,10.10.20.32,888,3151,12.125,17.25 -2024-05-10T00:03:40.000Z,staging,two,10.10.20.33,567,3718,1.25,18.5 -2024-05-10T00:03:53.000Z,qa,three,10.10.20.34,61,1779,11.375,27.375 -2024-05-10T00:03:53.000Z,qa,two,10.10.20.35,685,2824,1.125,20.875 -2024-05-10T00:04:21.000Z,qa,two,10.10.20.30,56,2880,9.875,30.75 -2024-05-10T00:04:23.000Z,qa,two,10.10.20.32,166,3046,7.625,38.375 -2024-05-10T00:04:49.000Z,qa,two,10.10.20.35,978,4024,10.375,10.375 -2024-05-10T00:04:49.000Z,prod,one,10.10.20.34,3,1327,5.625,23.875 -2024-05-10T00:04:49.000Z,qa,one,10.10.20.32,576,1025,11.0,20.0 -2024-05-10T00:05:06.000Z,prod,one,10.10.20.31,485,1812,8.25,8.25 -2024-05-10T00:05:06.000Z,qa,one,10.10.20.34,839,1864,3.875,23.875 -2024-05-10T00:05:16.000Z,prod,one,10.10.20.35,3,1815,2.75,11.0 -2024-05-10T00:05:17.000Z,qa,two,10.10.20.31,873,4897,3.5,13.875 -2024-05-10T00:05:17.000Z,qa,three,10.10.20.35,28,1807,2.5,29.875 -2024-05-10T00:05:39.000Z,qa,two,10.10.20.31,617,5514,9.75,23.625 -2024-05-10T00:05:39.000Z,prod,three,10.10.20.35,271,2498,11.5,18.25 -2024-05-10T00:05:58.000Z,qa,two,10.10.20.30,3,5517,8.0,31.625 -2024-05-10T00:06:07.000Z,staging,three,10.10.20.34,204,1493,2.875,2.875 -2024-05-10T00:06:07.000Z,qa,three,10.10.20.31,400,2207,8.125,38.0 -2024-05-10T00:06:07.000Z,staging,two,10.10.20.32,3,3,2.75,21.25 -2024-05-10T00:06:14.000Z,qa,one,10.10.20.32,289,2153,11.75,35.625 -2024-05-10T00:06:14.000Z,prod,three,10.10.20.35,374,2872,5.0,23.25 -2024-05-10T00:06:21.000Z,staging,three,10.10.20.31,741,2234,0.625,3.5 -2024-05-10T00:06:35.000Z,staging,two,10.10.20.31,599,602,5.25,26.5 -2024-05-10T00:06:42.000Z,qa,one,10.10.20.30,837,2990,12.375,48.0 -2024-05-10T00:06:42.000Z,qa,three,10.10.20.35,376,376,4.625,42.625 -2024-05-10T00:06:42.000Z,qa,two,10.10.20.30,667,6184,11.25,42.875 -2024-05-10T00:07:19.000Z,qa,three,10.10.20.33,537,913,1.0,43.625 -2024-05-10T00:07:19.000Z,qa,one,10.10.20.32,3,2993,12.125,60.125 -2024-05-10T00:07:33.000Z,qa,one,10.10.20.34,446,3439,9.875,70.0 -2024-05-10T00:07:33.000Z,qa,three,10.10.20.35,906,1819,2.625,46.25 -2024-05-10T00:07:33.000Z,qa,two,10.10.20.32,1,6185,0.25,43.125 -2024-05-10T00:08:00.000Z,qa,one,10.10.20.34,842,4281,10.75,80.75 -2024-05-10T00:08:00.000Z,prod,one,10.10.20.34,569,2384,8.125,19.125 -2024-05-10T00:08:00.000Z,staging,one,10.10.20.33,680,2441,10.125,29.5 -2024-05-10T00:08:08.000Z,prod,two,10.10.20.34,211,2461,2.375,17.25 -2024-05-10T00:08:08.000Z,prod,one,10.10.20.31,23,2407,12.0,31.125 -2024-05-10T00:08:08.000Z,staging,two,10.10.20.30,656,1258,6.5,33.0 -2024-05-10T00:08:10.000Z,qa,one,10.10.20.30,352,4633,5.25,86.0 -2024-05-10T00:08:10.000Z,prod,three,10.10.20.30,102,2974,5.5,28.75 -2024-05-10T00:08:16.000Z,staging,three,10.10.20.34,170,2404,6.5,10.0 -2024-05-10T00:08:40.000Z,qa,one,10.10.20.30,461,5094,1.25,87.25 -2024-05-10T00:08:40.000Z,qa,two,10.10.20.30,743,6928,7.5,50.625 -2024-05-10T00:08:56.000Z,qa,two,10.10.20.31,885,7813,12.0,62.625 -2024-05-10T00:09:03.000Z,qa,one,10.10.20.30,39,5133,8.875,96.125 -2024-05-10T00:09:04.000Z,qa,one,10.10.20.32,830,5963,5.875,102.0 -2024-05-10T00:09:04.000Z,staging,three,10.10.20.35,437,437,9.75,19.75 -2024-05-10T00:09:08.000Z,prod,three,10.10.20.33,95,3069,11.375,40.125 -2024-05-10T00:09:08.000Z,staging,one,10.10.20.34,29,2470,10.0,39.5 -2024-05-10T00:09:08.000Z,staging,three,10.10.20.35,606,1043,8.25,28.0 -2024-05-10T00:09:13.000Z,qa,three,10.10.20.32,734,2553,7.875,54.125 -2024-05-10T00:09:13.000Z,prod,three,10.10.20.34,606,3675,3.75,43.875 -2024-05-10T00:09:19.000Z,prod,one,10.10.20.33,227,2634,1.0,32.125 -2024-05-10T00:09:34.000Z,staging,one,10.10.20.35,219,2689,5.375,44.875 -2024-05-10T00:09:34.000Z,prod,two,10.10.20.33,178,2639,8.875,26.125 -2024-05-10T00:09:34.000Z,staging,three,10.10.20.35,399,1442,8.625,36.625 -2024-05-10T00:09:34.000Z,staging,two,10.10.20.33,676,1934,2.125,35.125 -2024-05-10T00:09:34.000Z,qa,three,10.10.20.32,873,3426,7.125,61.25 -2024-05-10T00:09:52.000Z,staging,two,10.10.20.34,566,566,12.5,47.625 -2024-05-10T00:09:58.000Z,qa,three,10.10.20.33,540,3966,6.5,67.75 -2024-05-10T00:09:58.000Z,prod,one,10.10.20.35,3,2637,2.0,34.125 -2024-05-10T00:09:58.000Z,prod,three,10.10.20.31,494,4169,10.5,54.375 -2024-05-10T00:09:58.000Z,staging,one,10.10.20.30,753,3442,9.125,54.0 -2024-05-10T00:09:58.000Z,qa,two,10.10.20.33,87,7900,11.875,74.5 -2024-05-10T00:10:10.000Z,prod,one,10.10.20.32,262,2899,0.625,34.75 -2024-05-10T00:10:19.000Z,qa,one,10.10.20.30,114,6077,3.125,3.125 -2024-05-10T00:10:19.000Z,staging,one,10.10.20.32,604,4046,4.625,58.625 -2024-05-10T00:10:55.000Z,qa,one,10.10.20.34,866,6943,6.625,9.75 -2024-05-10T00:10:55.000Z,qa,two,10.10.20.32,17,17,3.125,77.625 -2024-05-10T00:11:24.000Z,qa,two,10.10.20.35,4,21,0.0,77.625 -2024-05-10T00:11:32.000Z,qa,one,10.10.20.33,883,883,9.375,19.125 -2024-05-10T00:11:32.000Z,prod,two,10.10.20.35,839,3478,5.75,31.875 -2024-05-10T00:11:42.000Z,qa,one,10.10.20.35,640,1523,11.875,31.0 -2024-05-10T00:11:45.000Z,qa,three,10.10.20.34,182,4148,11.375,79.125 -2024-05-10T00:11:53.000Z,staging,three,10.10.20.35,130,1572,10.0,46.625 -2024-05-10T00:11:53.000Z,qa,three,10.10.20.32,907,5055,8.625,87.75 -2024-05-10T00:12:08.000Z,qa,three,10.10.20.30,130,5185,4.75,92.5 -2024-05-10T00:12:08.000Z,qa,two,10.10.20.30,131,152,7.75,85.375 -2024-05-10T00:12:11.000Z,staging,three,10.10.20.35,489,2061,3.75,50.375 -2024-05-10T00:12:18.000Z,prod,three,10.10.20.34,31,4200,11.625,66.0 -2024-05-10T00:12:42.000Z,staging,three,10.10.20.31,515,2576,11.375,61.75 -2024-05-10T00:12:42.000Z,staging,one,10.10.20.34,947,4993,0.375,59.0 -2024-05-10T00:12:48.000Z,qa,two,10.10.20.32,35,187,7.25,92.625 -2024-05-10T00:12:48.000Z,staging,two,10.10.20.31,124,690,6.125,53.75 -2024-05-10T00:13:11.000Z,staging,one,10.10.20.35,137,5130,2.625,61.625 -2024-05-10T00:13:11.000Z,staging,three,10.10.20.35,66,2642,1.625,63.375 -2024-05-10T00:13:32.000Z,staging,three,10.10.20.31,731,3373,9.5,72.875 -2024-05-10T00:13:50.000Z,staging,three,10.10.20.35,156,3529,10.0,82.875 -2024-05-10T00:13:50.000Z,qa,one,10.10.20.32,1006,2529,7.25,38.25 -2024-05-10T00:13:50.000Z,prod,one,10.10.20.30,747,3646,7.625,7.625 -2024-05-10T00:13:50.000Z,prod,two,10.10.20.30,761,4239,3.625,35.5 -2024-05-10T00:13:50.000Z,prod,three,10.10.20.35,156,4356,11.25,77.25 -2024-05-10T00:13:56.000Z,prod,one,10.10.20.31,894,4540,7.875,15.5 -2024-05-10T00:14:16.000Z,prod,one,10.10.20.30,525,5065,3.625,19.125 -2024-05-10T00:14:16.000Z,staging,two,10.10.20.35,601,1291,2.625,56.375 -2024-05-10T00:14:16.000Z,qa,one,10.10.20.34,465,2994,1.0,39.25 -2024-05-10T00:14:25.000Z,prod,three,10.10.20.33,652,5008,11.25,88.5 -2024-05-10T00:14:30.000Z,prod,three,10.10.20.30,677,5685,7.0,95.5 -2024-05-10T00:14:30.000Z,qa,three,10.10.20.32,500,5685,3.5,96.0 -2024-05-10T00:14:33.000Z,prod,one,10.10.20.34,875,5940,9.375,28.5 -2024-05-10T00:14:33.000Z,prod,two,10.10.20.30,4,4243,0.125,35.625 -2024-05-10T00:14:33.000Z,staging,three,10.10.20.32,908,4437,2.125,85.0 -2024-05-10T00:15:09.000Z,qa,three,10.10.20.30,286,5971,9.75,105.75 -2024-05-10T00:15:15.000Z,staging,three,10.10.20.32,150,4587,2.625,87.625 -2024-05-10T00:15:15.000Z,staging,one,10.10.20.33,516,5646,8.125,69.75 -2024-05-10T00:15:15.000Z,prod,two,10.10.20.35,550,4793,1.0,36.625 -2024-05-10T00:15:21.000Z,qa,two,10.10.20.32,1021,1208,1.625,94.25 -2024-05-10T00:15:21.000Z,qa,one,10.10.20.32,219,3213,6.25,45.5 -2024-05-10T00:15:43.000Z,qa,three,10.10.20.32,606,6577,4.5,110.25 -2024-05-10T00:15:49.000Z,qa,two,10.10.20.33,783,1991,4.25,98.5 -2024-05-10T00:15:51.000Z,qa,three,10.10.20.30,913,7490,11.625,121.875 -2024-05-10T00:15:51.000Z,prod,three,10.10.20.34,417,6102,11.875,107.375 -2024-05-10T00:15:51.000Z,staging,two,10.10.20.33,598,1889,4.375,60.75 -2024-05-10T00:16:00.000Z,staging,three,10.10.20.32,380,4967,5.25,92.875 -2024-05-10T00:16:11.000Z,staging,two,10.10.20.33,48,1937,11.5,72.25 -2024-05-10T00:16:18.000Z,prod,two,10.10.20.32,263,5056,3.0,39.625 -2024-05-10T00:16:26.000Z,qa,one,10.10.20.31,234,3447,6.875,52.375 -2024-05-10T00:16:32.000Z,prod,one,10.10.20.32,354,6294,1.0,29.5 -2024-05-10T00:16:55.000Z,prod,one,10.10.20.30,462,6756,4.0,33.5 -2024-05-10T00:16:55.000Z,staging,two,10.10.20.32,3,1940,9.125,81.375 -2024-05-10T00:17:02.000Z,prod,two,10.10.20.35,899,5955,0.625,0.625 -2024-05-10T00:17:02.000Z,qa,one,10.10.20.33,878,4325,7.75,60.125 -2024-05-10T00:17:12.000Z,prod,two,10.10.20.35,64,6019,2.0,2.625 -2024-05-10T00:17:12.000Z,qa,two,10.10.20.30,82,2073,9.5,9.5 -2024-05-10T00:17:12.000Z,qa,three,10.10.20.33,221,7711,7.5,129.375 -2024-05-10T00:17:12.000Z,qa,one,10.10.20.30,428,4753,2.625,62.75 -2024-05-10T00:17:12.000Z,prod,three,10.10.20.34,983,7085,12.375,119.75 -2024-05-10T00:17:14.000Z,prod,one,10.10.20.35,0,6756,5.25,38.75 -2024-05-10T00:17:16.000Z,qa,three,10.10.20.32,214,7925,11.125,140.5 -2024-05-10T00:17:20.000Z,qa,two,10.10.20.33,988,3061,8.625,18.125 -2024-05-10T00:17:30.000Z,qa,two,10.10.20.32,987,4048,7.875,26.0 -2024-05-10T00:17:30.000Z,staging,three,10.10.20.33,964,5931,8.0,100.875 -2024-05-10T00:17:39.000Z,qa,one,10.10.20.30,277,5030,12.125,74.875 -2024-05-10T00:17:39.000Z,prod,one,10.10.20.31,966,7722,3.5,42.25 -2024-05-10T00:17:55.000Z,qa,two,10.10.20.30,916,4964,0.5,26.5 -2024-05-10T00:18:02.000Z,staging,one,10.10.20.33,4,5650,0.625,70.375 -2024-05-10T00:18:02.000Z,qa,one,10.10.20.33,2,5032,10.875,85.75 -2024-05-10T00:18:02.000Z,qa,three,10.10.20.32,689,8614,3.625,144.125 -2024-05-10T00:18:07.000Z,prod,three,10.10.20.34,45,7130,7.0,126.75 -2024-05-10T00:18:16.000Z,qa,three,10.10.20.32,216,8830,0.625,144.75 -2024-05-10T00:18:29.000Z,qa,two,10.10.20.31,67,5031,10.125,36.625 -2024-05-10T00:18:29.000Z,prod,three,10.10.20.35,107,7237,3.875,130.625 -2024-05-10T00:18:33.000Z,prod,three,10.10.20.32,1018,8255,11.5,11.5 -2024-05-10T00:18:33.000Z,staging,three,10.10.20.30,601,6532,1.5,102.375 -2024-05-10T00:18:33.000Z,qa,one,10.10.20.31,747,5779,2.875,88.625 -2024-05-10T00:18:43.000Z,staging,two,10.10.20.30,804,2744,5.75,87.125 -2024-05-10T00:18:43.000Z,prod,one,10.10.20.30,990,8712,6.125,48.375 -2024-05-10T00:18:43.000Z,qa,one,10.10.20.35,187,5966,1.625,90.25 -2024-05-10T00:18:57.000Z,qa,two,10.10.20.30,811,5842,2.5,39.125 -2024-05-10T00:18:57.000Z,prod,two,10.10.20.30,1005,7024,0.375,3.0 -2024-05-10T00:18:58.000Z,prod,three,10.10.20.34,936,9191,0.875,12.375 -2024-05-10T00:18:58.000Z,staging,two,10.10.20.30,842,3586,10.5,97.625 -2024-05-10T00:19:36.000Z,qa,two,10.10.20.34,936,6778,8.625,47.75 -2024-05-10T00:19:38.000Z,prod,one,10.10.20.30,542,9254,11.125,59.5 -2024-05-10T00:19:48.000Z,prod,two,10.10.20.32,1007,8031,5.625,8.625 -2024-05-10T00:19:48.000Z,prod,three,10.10.20.32,4,9195,12.25,24.625 -2024-05-10T00:19:53.000Z,qa,two,10.10.20.33,877,7655,6.75,54.5 -2024-05-10T00:20:00.000Z,staging,three,10.10.20.35,1,6533,8.375,110.75 -2024-05-10T00:20:00.000Z,qa,three,10.10.20.31,995,9825,7.5,7.5 -2024-05-10T00:20:00.000Z,prod,three,10.10.20.30,774,9969,0.0,24.625 -2024-05-10T00:20:03.000Z,staging,two,10.10.20.31,1009,4595,0.75,98.375 -2024-05-10T00:20:16.000Z,staging,two,10.10.20.34,589,5184,8.625,107.0 -2024-05-10T00:20:25.000Z,prod,two,10.10.20.31,678,8709,1.375,1.375 -2024-05-10T00:20:25.000Z,prod,one,10.10.20.31,953,10207,0.875,60.375 -2024-05-10T00:20:44.000Z,prod,two,10.10.20.31,756,9465,7.625,7.625 -2024-05-10T00:20:44.000Z,staging,three,10.10.20.32,600,7133,9.5,120.25 -2024-05-10T00:20:46.000Z,qa,two,10.10.20.35,913,8568,9.375,63.875 -2024-05-10T00:21:19.000Z,staging,three,10.10.20.33,198,7331,2.375,122.625 -2024-05-10T00:21:26.000Z,qa,one,10.10.20.33,917,6883,3.875,94.125 -2024-05-10T00:21:56.000Z,qa,one,10.10.20.30,197,7080,11.875,106.0 -2024-05-10T00:21:59.000Z,staging,one,10.10.20.31,749,6399,0.0,70.375 -2024-05-10T00:22:08.000Z,staging,three,10.10.20.32,69,7400,5.25,127.875 -2024-05-10T00:22:08.000Z,prod,one,10.10.20.33,16,16,5.5,65.875 -2024-05-10T00:22:12.000Z,prod,one,10.10.20.31,931,947,7.875,73.75 -2024-05-10T00:22:42.000Z,staging,three,10.10.20.30,3,7403,9.5,137.375 -2024-05-10T00:22:49.000Z,staging,two,10.10.20.34,3,5187,1.75,108.75 -2024-05-10T00:22:53.000Z,staging,one,10.10.20.31,238,6637,4.625,4.625 -2024-05-10T00:22:53.000Z,prod,two,10.10.20.33,812,10277,10.75,18.375 -2024-05-10T00:22:54.000Z,qa,three,10.10.20.33,972,10797,10.875,18.375 -2024-05-10T00:22:59.000Z,qa,one,10.10.20.35,206,7286,6.25,112.25 +@timestamp:date,cluster:keyword,pod:keyword,client.ip:ip,network.bytes_in:long,network.total_bytes_in:counter_long,network.cost:double,network.total_cost:counter_double,network.eth0.up:boolean,network.eth0.tx:integer,network.eth0.rx:integer,network.eth0.last_up:date_nanos,network.eth0.firmware_version:version,network.eth0.currently_connected_clients:integer,events_received:long,event_log:text +2024-05-10T00:00:29.000Z,staging,two,10.10.20.34,699,953,9.375,11.25,true,81,42,2024-04-13T05:15:29.735829818Z,7.8.4,862,9,Lorem ipsum dolor sit amet consectetur adipiscing elit nulla ut in nullam tristique viverra penatibus ac integer +2024-05-10T00:00:33.000Z,staging,three,10.10.20.34,473,1111,1.25,9.125,true,48,77,2024-05-03T15:37:33.324440296Z,6.2.3,369,9,interdum ridiculus tellus risus iaculis faucibus. Eu cursus ante et nullam litora nulla habitasse nisl dignissim quisque molestie pretium\, a +2024-05-10T00:00:51.000Z,prod,three,10.10.20.30,113,278,9.25,17.375,false,58,96,2024-03-25T09:57:51.755620402Z,13.10.4,949,5,integer\, non imperdiet massa luctus condimentum lacus eu vitae libero nam euismod nostra eleifend enim. Cubilia +2024-05-10T00:00:57.000Z,prod,three,10.10.20.30,677,955,12.125,29.5,false,131,151,2024-03-20T09:48:57.054739676Z,13.10.4,429,3,tortor felis\, vulputate tempor suscipit dui +2024-05-10T00:01:25.000Z,qa,one,10.10.20.31,278,449,5.375,9.0,true,31,63,2024-03-31T23:14:25.575848186Z,10.3.2,173,10,dapibus condimentum vulputate +2024-05-10T00:01:29.000Z,qa,two,10.10.20.33,799,1226,12.375,13.875,false,81,6,2024-03-04T17:45:29.246148803Z,1.1.7,707,6,lacus sociosqu\, lacinia suspendisse quisque tristique cursus phasellus. Parturient aliquam cubilia libero ultrices a facilisi fermentum tempor blandit per\, bibendum fringilla platea imperdiet phasellus nam euismod justo curae. Leo +2024-05-10T00:01:29.000Z,prod,three,10.10.20.31,903,1858,7.625,7.625,false,142,166,2024-04-09T03:20:29.012174065Z,13.10.4,112,6,dignissim libero ultrices posuere nam facilisis parturient\, luctus +2024-05-10T00:01:33.000Z,prod,one,10.10.20.31,354,354,6.0,9.875,true,18,96,2024-03-26T14:35:33.804256950Z,9.10.4,681,8,congue tempus nullam nostra\, penatibus sed semper leo vitae +2024-05-10T00:02:05.000Z,qa,two,10.10.20.30,913,2139,5.875,19.75,true,157,26,2024-03-08T22:53:05.640952745Z,1.1.7,342,7,vivamus varius massa nisi in sociosqu egestas\, quam +2024-05-10T00:02:05.000Z,prod,three,10.10.20.32,369,2227,6.75,6.75,true,149,195,2024-03-16T00:22:05.915277155Z,13.10.4,382,1,nam tellus scelerisque nostra suscipit\, mattis +2024-05-10T00:02:35.000Z,qa,three,10.10.20.34,585,1441,4.0,7.875,true,75,23,2024-05-02T13:22:35.021783722Z,1.7.2,788,4,eget pretium diam\, egestas ad ac nam tellus scelerisque nostra suscipit\, mattis nisl magna ornare torquent +2024-05-10T00:02:40.000Z,staging,three,10.10.20.35,178,1289,2.25,11.375,true,139,84,2024-05-02T02:15:40.627302753Z,6.2.3,16,4,lacinia elementum vivamus\, sociis erat lectus torquent luctus pharetra\, nunc cubilia imperdiet malesuada. +2024-05-10T00:02:40.000Z,staging,two,10.10.20.30,723,1676,11.25,22.5,false,138,70,2024-04-30T05:39:40.656342946Z,7.8.4,837,5,netus magna sed diam iaculis etiam arcu\, parturient orci augue nullam rutrum nisl semper. Arcu posuere eu dictum dictumst class semper +2024-05-10T00:02:43.000Z,prod,two,10.10.20.35,807,1395,2.375,5.25,true,98,66,2024-03-21T19:14:43.937075439Z,6.2.5,937,9,lacus. Pretium varius placerat cras platea potenti pellentesque imperdiet tortor felis\, vulputate tempor suscipit dui primis habitant nullam porta pharetra\, purus eleifend dictumst semper morbi +2024-05-10T00:02:43.000Z,staging,two,10.10.20.34,587,2263,5.125,5.125,true,165,169,2024-05-08T10:03:43.290628939Z,7.8.4,394,0,semper laoreet\, egestas erat cursus nibh nisl curabitur. Posuere neque mauris mattis sed tempus nisl +2024-05-10T00:02:53.000Z,prod,two,10.10.20.35,855,2250,9.625,14.875,false,178,92,2024-05-06T19:01:53.843370676Z,6.2.5,883,3,duis +2024-05-10T00:03:13.000Z,staging,one,10.10.20.33,626,1103,9.25,16.875,true,79,66,2024-03-19T02:09:13.266861811Z,15.6.9,990,0,libero ultrices a facilisi fermentum tempor blandit +2024-05-10T00:03:26.000Z,staging,one,10.10.20.34,658,1761,2.5,19.375,true,90,69,2024-04-08T06:06:26.066279299Z,15.6.9,367,9,vitae malesuada hendrerit proin. Lobortis arcu sociosqu porta pretium faucibus\, cursus ultrices netus diam nunc tincidunt\, feugiat posuere enim rutrum. +2024-05-10T00:03:26.000Z,prod,one,10.10.20.33,970,1324,8.375,18.25,false,25,114,2024-04-04T01:13:26.805245198Z,9.10.4,742,3,Aenean himenaeos urna +2024-05-10T00:03:26.000Z,qa,three,10.10.20.32,277,1718,8.125,16.0,true,77,95,2024-04-09T01:32:26.195310764Z,1.7.2,635,6,posuere nam facilisis parturient\, luctus praesent aptent a vestibulum malesuada semper laoreet\, egestas erat cursus nibh nisl curabitur. Posuere neque mauris mattis sed tempus nisl nec velit +2024-05-10T00:03:26.000Z,staging,two,10.10.20.32,888,3151,12.125,17.25,false,237,258,2024-05-02T09:02:26.799002478Z,7.8.4,354,2,vulputate suscipit fames imperdiet per scelerisque viverra. Odio sem mi molestie luctus dictumst sagittis inceptos\, sociis congue aenean vitae himenaeos quam sociosqu\, class parturient +2024-05-10T00:03:40.000Z,staging,two,10.10.20.33,567,3718,1.25,18.5,false,317,295,2024-04-09T11:53:40.737436413Z,7.8.4,347,3,leo habitant integer at mi platea id\, +2024-05-10T00:03:53.000Z,qa,three,10.10.20.34,61,1779,11.375,27.375,true,134,178,2024-03-27T01:47:53.333418071Z,1.7.2,728,5,erat. Placerat mi litora fringilla tellus pretium aliquet ut ridiculus magnis magna\, interdum dictumst lacinia hendrerit gravida torquent bibendum netus posuere\, sodales aenean mauris +2024-05-10T00:03:53.000Z,qa,two,10.10.20.35,685,2824,1.125,20.875,true,254,117,2024-04-28T06:40:53.255612616Z,1.1.7,180,6,augue nullam rutrum nisl semper. Arcu posuere eu dictum dictumst class semper tristique velit lobortis +2024-05-10T00:04:21.000Z,qa,two,10.10.20.30,56,2880,9.875,30.75,false,290,135,2024-04-13T19:39:21.309897250Z,1.1.8,591,2,penatibus fusce nisl interdum erat. Donec per congue quam augue netus nec platea ut faucibus pretium sollicitudin\, cubilia mus consequat himenaeos elementum nunc eros justo mauris. Eget volutpat vestibulum +2024-05-10T00:04:23.000Z,qa,two,10.10.20.32,166,3046,7.625,38.375,false,367,192,2024-04-20T17:10:23.239086129Z,1.1.8,79,6, +2024-05-10T00:04:49.000Z,qa,two,10.10.20.35,978,4024,10.375,10.375,false,439,288,2024-04-13T14:28:49.596411037Z,1.1.8,880,10,Sed ultricies mus nostra mauris vivamus velit habitant aenean\, venenatis nisi parturient faucibus facilisis himenaeos varius\, nunc dictumst per metus magna facilisi etiam. Nunc tortor maecenas +2024-05-10T00:04:49.000Z,prod,one,10.10.20.34,3,1327,5.625,23.875,true,77,156,2024-03-03T23:28:49.442806226Z,9.10.4,653,3,quisque tristique cursus phasellus. Parturient aliquam cubilia libero ultrices a facilisi fermentum tempor blandit per\, bibendum fringilla +2024-05-10T00:04:49.000Z,qa,one,10.10.20.32,576,1025,11.0,20.0,true,38,162,2024-05-09T23:18:49.214537497Z,10.3.2,106,0,a et turpis\, praesent fermentum auctor massa at tortor dis. Pulvinar id quam enim lobortis pellentesque neque facilisis dapibus\, velit interdum mattis magna iaculis +2024-05-10T00:05:06.000Z,prod,one,10.10.20.31,485,1812,8.25,8.25,true,112,182,2024-03-19T15:02:06.612869888Z,9.10.4,961,[1,1,10,5],mus nostra mauris vivamus velit habitant aenean\, venenatis nisi parturient faucibus facilisis himenaeos varius\, nunc dictumst per +2024-05-10T00:05:06.000Z,qa,one,10.10.20.34,839,1864,3.875,23.875,false,110,243,2024-04-25T19:33:06.187780912Z,10.4.2,592,[2,4,4,7],velit lobortis mattis\, venenatis aenean dui fringilla curabitur non senectus est consequat quis\, varius montes vulputate suscipit fames imperdiet per scelerisque viverra. Odio sem mi molestie luctus +2024-05-10T00:05:16.000Z,prod,one,10.10.20.35,3,1815,2.75,11.0,false,185,225,2024-04-23T19:31:16.689357419Z,9.10.4,159,0,pretium sollicitudin\, cubilia mus consequat himenaeos elementum nunc eros justo mauris. +2024-05-10T00:05:17.000Z,qa,two,10.10.20.31,873,4897,3.5,13.875,false,504,290,2024-03-20T00:48:17.019507922Z,1.1.8,832,[5,1,3,4],eleifend enim. Cubilia lacinia luctus tincidunt convallis ridiculus habitant vel potenti\, arcu pellentesque semper sociis ac felis. Vitae +2024-05-10T00:05:17.000Z,qa,three,10.10.20.35,28,1807,2.5,29.875,true,214,198,2024-04-25T11:07:17.571680358Z,1.7.2,683,[1],varius placerat cras platea potenti pellentesque imperdiet tortor felis\, vulputate tempor suscipit +2024-05-10T00:05:39.000Z,qa,two,10.10.20.31,617,5514,9.75,23.625,true,554,291,2024-04-25T03:03:39.237360870Z,1.1.8,538,5,convallis ridiculus habitant vel potenti\, arcu pellentesque semper sociis ac felis. Vitae sagittis natoque mollis arcu diam lacus sociosqu\, lacinia suspendisse quisque +2024-05-10T00:05:39.000Z,prod,three,10.10.20.35,271,2498,11.5,18.25,false,149,254,2024-03-31T22:34:39.678773566Z,13.10.4,981,[7,7],vivamus\, sociis erat lectus torquent luctus pharetra\, nunc cubilia imperdiet malesuada. Scelerisque donec luctus laoreet vulputate phasellus interdum cursus a sapien\, penatibus dictum malesuada nostra suscipit congue aptent sociis\, dictumst +2024-05-10T00:05:58.000Z,qa,two,10.10.20.30,3,5517,8.0,31.625,false,592,306,2024-04-12T10:16:58.988633790Z,1.1.8,762,[7,7,4,1],vulputate quisque neque aliquam per cras sed mauris cubilia\, +2024-05-10T00:06:07.000Z,staging,three,10.10.20.34,204,1493,2.875,2.875,true,215,177,2024-03-19T14:08:07.897619909Z,6.2.3,371,[2,8,10],Sed ultricies mus nostra mauris vivamus velit habitant aenean\, venenatis nisi parturient faucibus facilisis himenaeos varius\, nunc dictumst per metus magna +2024-05-10T00:06:07.000Z,qa,three,10.10.20.31,400,2207,8.125,38.0,true,222,214,2024-04-26T20:54:07.389462499Z,2.7.2,614,[5,5,6,7],turpis donec est rutrum penatibus\, velit quam ante condimentum dictum at nibh\, nisl a lobortis lacus ultrices primis\, vulputate quis volutpat hac tristique mattis. Hendrerit integer mattis venenatis +2024-05-10T00:06:07.000Z,staging,two,10.10.20.32,3,3,2.75,21.25,false,325,332,2024-05-08T01:35:07.955894784Z,7.8.4,100,[1,3],non leo mattis duis. Sed ultricies mus +2024-05-10T00:06:14.000Z,qa,one,10.10.20.32,289,2153,11.75,35.625,false,124,300,2024-04-20T11:50:14.086356636Z,10.4.2,900,8,aptent proin semper arcu\, interdum congue dignissim neque nisl odio quis aliquam\, in penatibus hendrerit non leo mattis +2024-05-10T00:06:14.000Z,prod,three,10.10.20.35,374,2872,5.0,23.25,false,218,338,2024-04-29T07:31:14.888937625Z,13.10.4,839,[3,6,1],ut faucibus pretium sollicitudin\, cubilia mus consequat himenaeos elementum nunc eros +2024-05-10T00:06:21.000Z,staging,three,10.10.20.31,741,2234,0.625,3.5,false,238,248,2024-04-02T11:41:21.345739017Z,6.2.3,467,[1,5],interdum mattis magna iaculis non fusce\, morbi tempus sapien nulla maecenas +2024-05-10T00:06:35.000Z,staging,two,10.10.20.31,599,602,5.25,26.5,true,380,406,2024-04-28T00:07:35.920287079Z,7.8.4,123,[3],mollis bibendum\, tempor torquent dis rhoncus in cursus sollicitudin\, dapibus pretium nec taciti faucibus felis +2024-05-10T00:06:42.000Z,qa,one,10.10.20.30,837,2990,12.375,48.0,false,208,336,2024-04-08T08:18:42.112624080Z,10.4.2,953,[8,6,8,4],hendrerit non leo mattis duis. Sed ultricies mus nostra mauris vivamus velit habitant aenean\, venenatis nisi parturient faucibus facilisis himenaeos varius\, nunc dictumst per metus +2024-05-10T00:06:42.000Z,qa,three,10.10.20.35,376,376,4.625,42.625,true,239,264,2024-03-09T08:48:42.195832389Z,2.7.2,911,8,pellentesque rutrum leo +2024-05-10T00:06:42.000Z,qa,two,10.10.20.30,667,6184,11.25,42.875,true,689,393,2024-03-02T16:35:42.095522606Z,1.1.8,648,[2,9],quisque inceptos luctus\, sagittis consequat feugiat nibh +2024-05-10T00:07:19.000Z,qa,three,10.10.20.33,537,913,1.0,43.625,false,337,311,2024-03-14T23:43:19.864470236Z,2.7.2,616,7, +2024-05-10T00:07:19.000Z,qa,one,10.10.20.32,3,2993,12.125,60.125,true,223,410,2024-03-13T06:53:19.879852861Z,10.4.2,990,[1,6,9,8], +2024-05-10T00:07:33.000Z,qa,one,10.10.20.34,446,3439,9.875,70.0,false,288,508,2024-04-04T18:40:33.706317028Z,10.4.3,224,2,condimentum mollis ultrices\, suspendisse conubia class vitae bibendum curabitur tempus litora\, blandit +2024-05-10T00:07:33.000Z,qa,three,10.10.20.35,906,1819,2.625,46.25,false,436,366,2024-05-02T07:53:33.802839368Z,2.7.2,954,[9,9],per cras sed mauris cubilia\, +2024-05-10T00:07:33.000Z,qa,two,10.10.20.32,1,6185,0.25,43.125,true,726,418,2024-04-19T06:08:33.072053267Z,1.1.8,524,0,montes a nunc dapibus nibh +2024-05-10T00:08:00.000Z,qa,one,10.10.20.34,842,4281,10.75,80.75,false,313,510,2024-04-13T02:13:00.462211238Z,10.4.3,120,7,cubilia urna vehicula suscipit lacus. Pretium varius placerat cras platea potenti pellentesque imperdiet tortor felis\, vulputate tempor +2024-05-10T00:08:00.000Z,prod,one,10.10.20.34,569,2384,8.125,19.125,false,223,271,2024-03-31T22:05:00.479415977Z,9.10.4,498,3,hendrerit non leo mattis duis. Sed ultricies mus nostra mauris vivamus velit +2024-05-10T00:08:00.000Z,staging,one,10.10.20.33,680,2441,10.125,29.5,true,175,143,2024-05-08T06:59:00.224636703Z,15.6.9,646,[7,3],tempus fames etiam gravida\, integer habitasse urna. Morbi dignissim libero ultrices posuere nam +2024-05-10T00:08:08.000Z,prod,two,10.10.20.34,211,2461,2.375,17.25,false,228,127,2024-04-22T13:11:08.255657106Z,6.2.5,424,[10,2,6,5],phasellus +2024-05-10T00:08:08.000Z,prod,one,10.10.20.31,23,2407,12.0,31.125,true,237,350,2024-04-20T15:45:08.634069700Z,9.10.4,248,10,nunc cubilia imperdiet malesuada. Scelerisque donec luctus laoreet vulputate phasellus interdum cursus a sapien\, penatibus dictum malesuada nostra suscipit congue aptent sociis\, dictumst tristique condimentum gravida proin +2024-05-10T00:08:08.000Z,staging,two,10.10.20.30,656,1258,6.5,33.0,true,396,494,2024-04-15T01:10:08.978164128Z,7.8.4,508,[2,1,2,9],odio quis +2024-05-10T00:08:10.000Z,qa,one,10.10.20.30,352,4633,5.25,86.0,false,366,591,2024-04-14T23:28:10.675107255Z,10.4.3,170,[2,2,7,6],integer at mi platea id\, mus conubia scelerisque etiam vel faucibus felis velit\, fringilla posuere ultrices +2024-05-10T00:08:10.000Z,prod,three,10.10.20.30,102,2974,5.5,28.75,false,250,342,2024-03-12T13:37:10.924925919Z,13.10.4,834,[5,4,3,1],phasellus interdum cursus a sapien\, penatibus dictum malesuada nostra suscipit congue aptent sociis\, +2024-05-10T00:08:16.000Z,staging,three,10.10.20.34,170,2404,6.5,10.0,false,311,263,2024-03-17T03:46:16.145975760Z,7.2.3,563,[7],ullamcorper maecenas nulla\, neque eu tellus mus +2024-05-10T00:08:40.000Z,qa,one,10.10.20.30,461,5094,1.25,87.25,false,428,632,2024-03-16T07:23:40.356426848Z,10.4.3,371,[9,3,7],lacus +2024-05-10T00:08:40.000Z,qa,two,10.10.20.30,743,6928,7.5,50.625,true,813,441,2024-05-08T18:36:40.027496014Z,1.1.8,998,[8,6,1,7],torquent non vulputate enim ac ut senectus\, quam litora ante quisque mollis tincidunt ridiculus pharetra dictum mus. +2024-05-10T00:08:56.000Z,qa,two,10.10.20.31,885,7813,12.0,62.625,false,824,528,2024-03-28T01:22:56.303415719Z,1.1.8,755,[6,5,4],faucibus bibendum. Nam odio vel suspendisse ligula in gravida\, +2024-05-10T00:09:03.000Z,qa,one,10.10.20.30,39,5133,8.875,96.125,false,442,726,2024-03-03T03:08:03.368012170Z,10.4.3,67,[10,9,10],semper sociis ac felis. Vitae sagittis natoque mollis arcu diam lacus sociosqu\, lacinia suspendisse quisque tristique cursus phasellus. Parturient aliquam cubilia +2024-05-10T00:09:04.000Z,qa,one,10.10.20.32,830,5963,5.875,102.0,true,506,818,2024-04-12T10:02:04.555388268Z,10.4.3,433,[10,9,1,8],nisl +2024-05-10T00:09:04.000Z,staging,three,10.10.20.35,437,437,9.75,19.75,false,391,273,2024-04-20T22:15:04.293241715Z,7.2.3,633,[5,10,4,6],feugiat nibh cubilia maecenas\, vitae donec sem tempus mus. Penatibus metus id blandit rhoncus eget pretium diam\, egestas ad ac nam tellus scelerisque nostra suscipit\, mattis nisl +2024-05-10T00:09:08.000Z,prod,three,10.10.20.33,95,3069,11.375,40.125,false,286,346,2024-03-09T01:12:08.185124897Z,13.10.4,121,6,turpis bibendum justo posuere morbi nisi\, himenaeos blandit id suspendisse ornare nulla scelerisque aliquam laoreet sollicitudin\, primis aptent elementum condimentum neque +2024-05-10T00:09:08.000Z,staging,one,10.10.20.34,29,2470,10.0,39.5,false,209,237,2024-03-17T11:41:08.444415308Z,15.6.9,812,8,pretium aliquet ut ridiculus magnis magna\, interdum dictumst lacinia hendrerit gravida torquent bibendum netus posuere\, sodales aenean mauris ante +2024-05-10T00:09:08.000Z,staging,three,10.10.20.35,606,1043,8.25,28.0,false,429,343,2024-03-21T21:09:08.613528665Z,7.2.3,126,7,pretium diam\, egestas ad ac nam tellus scelerisque nostra suscipit\, mattis nisl magna ornare +2024-05-10T00:09:13.000Z,qa,three,10.10.20.32,734,2553,7.875,54.125,true,457,453,2024-05-04T03:12:13.909384597Z,2.7.2,115,[2,1],pretium nec taciti faucibus felis congue. Habitasse congue condimentum lacinia elementum vivamus\, sociis erat lectus torquent luctus pharetra\, nunc cubilia imperdiet malesuada. Scelerisque donec luctus laoreet vulputate +2024-05-10T00:09:13.000Z,prod,three,10.10.20.34,606,3675,3.75,43.875,true,334,350,2024-03-03T06:21:13.225780445Z,13.10.4,750,[10,2],gravida proin facilisi at praesent. Diam primis euismod fusce dapibus condimentum vulputate orci himenaeos\, enim luctus viverra vitae sollicitudin ullamcorper maecenas nulla\, neque +2024-05-10T00:09:19.000Z,prod,one,10.10.20.33,227,2634,1.0,32.125,false,322,400,2024-04-19T06:45:19.719563270Z,9.10.5,872,5,suscipit congue aptent sociis\, dictumst +2024-05-10T00:09:34.000Z,staging,one,10.10.20.35,219,2689,5.375,44.875,false,297,280,2024-04-20T16:04:34.503390178Z,15.6.9,43,0,potenti\, arcu pellentesque semper sociis ac felis. Vitae sagittis +2024-05-10T00:09:34.000Z,prod,two,10.10.20.33,178,2639,8.875,26.125,true,298,159,2024-05-08T23:33:34.427591080Z,6.2.5,100,6,cubilia maecenas\, vitae donec sem tempus mus. Penatibus metus id blandit rhoncus eget pretium diam\, egestas +2024-05-10T00:09:34.000Z,staging,three,10.10.20.35,399,1442,8.625,36.625,true,448,388,2024-04-09T03:07:34.257754791Z,7.2.3,417,[6,5,7,4],etiam arcu\, parturient orci +2024-05-10T00:09:34.000Z,staging,two,10.10.20.33,676,1934,2.125,35.125,true,456,556,2024-04-09T12:59:34.821470557Z,7.8.4,878,2,integer mattis venenatis nibh ad nascetur posuere et\, viverra tincidunt eu sagittis torquent nunc velit\, nulla auctor molestie pellentesque lacinia tellus praesent. Tristique +2024-05-10T00:09:34.000Z,qa,three,10.10.20.32,873,3426,7.125,61.25,true,492,497,2024-04-21T12:28:34.356940837Z,2.7.2,581,[4,4],vel potenti\, arcu pellentesque semper sociis ac felis. Vitae sagittis natoque mollis arcu diam lacus sociosqu\, +2024-05-10T00:09:52.000Z,staging,two,10.10.20.34,566,566,12.5,47.625,true,472,603,2024-03-12T23:16:52.881471311Z,7.8.5,472,[3,4,6,3],amet consectetur adipiscing elit nulla ut in nullam tristique +2024-05-10T00:09:58.000Z,qa,three,10.10.20.33,540,3966,6.5,67.75,true,500,529,2024-03-03T16:37:58.414497750Z,2.7.2,14,0,fringilla tellus pretium aliquet ut ridiculus +2024-05-10T00:09:58.000Z,prod,one,10.10.20.35,3,2637,2.0,34.125,false,409,440,2024-03-27T15:22:58.882635338Z,9.10.5,540,[6,2,9,9],lobortis odio +2024-05-10T00:09:58.000Z,prod,three,10.10.20.31,494,4169,10.5,54.375,true,361,369,2024-04-01T00:02:58.166195149Z,13.10.4,726,[5,6,7],ac +2024-05-10T00:09:58.000Z,staging,one,10.10.20.30,753,3442,9.125,54.0,false,346,364,2024-03-26T05:15:58.435385241Z,15.6.9,569,6,condimentum mollis ultrices\, suspendisse conubia class vitae bibendum curabitur tempus litora\, blandit netus +2024-05-10T00:09:58.000Z,qa,two,10.10.20.33,87,7900,11.875,74.5,true,908,620,2024-04-01T04:35:58.687569914Z,1.1.8,720,[6,8,4,3],leo vitae malesuada hendrerit proin. Lobortis arcu sociosqu porta pretium faucibus\, cursus ultrices netus diam nunc tincidunt\, feugiat posuere enim rutrum. +2024-05-10T00:10:10.000Z,prod,one,10.10.20.32,262,2899,0.625,34.75,false,494,448,2024-04-16T19:30:10.904158081Z,10.10.5,200,2,platea morbi. Maecenas etiam venenatis augue orci +2024-05-10T00:10:19.000Z,qa,one,10.10.20.30,114,6077,3.125,3.125,false,524,824,2024-04-28T04:57:19.229111862Z,10.4.3,148,,Nunc +2024-05-10T00:10:19.000Z,staging,one,10.10.20.32,604,4046,4.625,58.625,true,349,364,2024-03-14T20:20:19.596833187Z,15.6.9,644,9,lacinia +2024-05-10T00:10:55.000Z,qa,one,10.10.20.34,866,6943,6.625,9.75,true,593,846,2024-03-11T07:36:55.445303694Z,10.4.3,798,,a lobortis lacus ultrices primis\, vulputate quis volutpat hac tristique mattis. Hendrerit integer mattis venenatis nibh ad nascetur posuere et\, viverra tincidunt eu sagittis torquent nunc +2024-05-10T00:10:55.000Z,qa,two,10.10.20.32,17,17,3.125,77.625,true,1002,675,2024-03-28T07:42:55.308871364Z,1.1.8,475,7,at nibh\, nisl a lobortis lacus ultrices primis\, vulputate quis volutpat hac tristique mattis. Hendrerit integer mattis venenatis nibh ad nascetur posuere et\, viverra tincidunt eu +2024-05-10T00:11:24.000Z,qa,two,10.10.20.35,4,21,0.0,77.625,true,1021,684,2024-03-11T23:33:24.489863912Z,1.1.8,15,5,condimentum mollis ultrices\, suspendisse conubia class vitae bibendum curabitur tempus litora\, blandit netus pulvinar eros senectus sem ut erat. Placerat mi litora fringilla tellus pretium aliquet ut ridiculus magnis +2024-05-10T00:11:32.000Z,qa,one,10.10.20.33,883,883,9.375,19.125,true,689,911,2024-04-13T20:54:32.164351270Z,10.4.3,629,,nulla ut in nullam tristique viverra penatibus +2024-05-10T00:11:32.000Z,prod,two,10.10.20.35,839,3478,5.75,31.875,true,379,258,2024-03-20T18:46:32.312629716Z,6.2.5,70,,vivamus\, sociis erat lectus torquent luctus pharetra\, nunc cubilia imperdiet malesuada. Scelerisque donec luctus laoreet vulputate phasellus interdum cursus a sapien\, penatibus dictum malesuada nostra suscipit +2024-05-10T00:11:42.000Z,qa,one,10.10.20.35,640,1523,11.875,31.0,false,730,951,2024-03-07T00:48:42.836550204Z,10.4.3,112,9,consequat quis\, varius +2024-05-10T00:11:45.000Z,qa,three,10.10.20.34,182,4148,11.375,79.125,false,562,583,2024-04-29T08:07:45.263067451Z,2.7.2,745,,morbi nisi\, himenaeos blandit id suspendisse ornare nulla scelerisque aliquam laoreet sollicitudin\, primis aptent elementum condimentum neque litora maecenas aenean ante. Ridiculus purus mattis +2024-05-10T00:11:53.000Z,staging,three,10.10.20.35,130,1572,10.0,46.625,false,458,424,2024-03-19T05:40:53.133918098Z,7.2.3,689,2,viverra. Odio sem mi molestie luctus dictumst sagittis inceptos\, sociis congue aenean vitae himenaeos quam sociosqu\, class parturient torquent sollicitudin platea morbi. Maecenas +2024-05-10T00:11:53.000Z,qa,three,10.10.20.32,907,5055,8.625,87.75,true,649,599,2024-04-09T02:26:53.944940909Z,2.7.2,277,,cursus phasellus. Parturient aliquam cubilia libero ultrices a facilisi fermentum tempor blandit per\, bibendum fringilla platea imperdiet phasellus nam euismod +2024-05-10T00:12:08.000Z,qa,three,10.10.20.30,130,5185,4.75,92.5,true,694,648,2024-03-02T15:25:08.814037456Z,2.7.2,76,1, +2024-05-10T00:12:08.000Z,qa,two,10.10.20.30,131,152,7.75,85.375,true,1116,704,2024-03-18T17:32:08.640031579Z,1.1.8,314,7,eu pretium\, netus magna sed diam iaculis etiam arcu\, parturient orci augue nullam +2024-05-10T00:12:11.000Z,staging,three,10.10.20.35,489,2061,3.75,50.375,true,544,469,2024-03-12T12:32:11.936526569Z,7.2.3,231,2,litora fringilla tellus pretium aliquet ut ridiculus magnis magna\, interdum dictumst lacinia hendrerit gravida torquent bibendum netus posuere\, sodales aenean +2024-05-10T00:12:18.000Z,prod,three,10.10.20.34,31,4200,11.625,66.0,true,399,373,2024-04-19T18:57:18.840856062Z,13.10.4,695,4,eu pretium\, netus magna sed diam iaculis etiam arcu\, parturient orci augue nullam rutrum +2024-05-10T00:12:42.000Z,staging,three,10.10.20.31,515,2576,11.375,61.75,false,608,545,2024-04-08T17:19:42.519538837Z,7.2.3,346,,vulputate quisque neque aliquam per cras sed mauris cubilia\, ornare netus id laoreet bibendum lacus lacinia +2024-05-10T00:12:42.000Z,staging,one,10.10.20.34,947,4993,0.375,59.0,true,353,429,2024-03-19T05:40:42.029623797Z,15.6.9,475,,sodales aenean mauris ante orci curabitur feugiat sociis in. Magna cursus netus +2024-05-10T00:12:48.000Z,qa,two,10.10.20.32,35,187,7.25,92.625,false,1156,733,2024-04-30T20:54:48.161175593Z,1.1.8,635,9,dictumst tristique condimentum gravida proin facilisi at praesent. Diam primis euismod fusce dapibus condimentum vulputate orci himenaeos\, enim luctus viverra vitae sollicitudin ullamcorper maecenas +2024-05-10T00:12:48.000Z,staging,two,10.10.20.31,124,690,6.125,53.75,false,550,603,2024-05-05T06:06:48.460838268Z,7.8.5,211,9,a magnis +2024-05-10T00:13:11.000Z,staging,one,10.10.20.35,137,5130,2.625,61.625,true,445,511,2024-05-01T01:38:11.386216970Z,15.6.9,627,10,sociis in. Magna cursus netus integer lectus ac a et turpis\, praesent fermentum auctor massa at tortor dis. Pulvinar id quam enim lobortis pellentesque neque +2024-05-10T00:13:11.000Z,staging,three,10.10.20.35,66,2642,1.625,63.375,true,658,557,2024-04-17T14:27:11.531929919Z,7.2.3,40,3,aenean +2024-05-10T00:13:32.000Z,staging,three,10.10.20.31,731,3373,9.5,72.875,false,722,624,2024-03-29T18:29:32.558736978Z,7.2.3,991,9,sapien nulla maecenas cum nisl. Arcu porttitor nam suscipit eget nibh diam mi\, fusce senectus +2024-05-10T00:13:50.000Z,staging,three,10.10.20.35,156,3529,10.0,82.875,true,803,650,2024-03-28T09:30:50.040960170Z,7.2.3,700,9,et eu pretium\, netus magna sed diam +2024-05-10T00:13:50.000Z,qa,one,10.10.20.32,1006,2529,7.25,38.25,true,809,962,2024-04-03T10:06:50.902685392Z,10.4.3,160,,condimentum lacinia elementum vivamus\, sociis erat lectus torquent luctus pharetra\, nunc cubilia imperdiet +2024-05-10T00:13:50.000Z,prod,one,10.10.20.30,747,3646,7.625,7.625,true,555,523,2024-04-03T02:04:50.567095752Z,10.10.5,27,7,penatibus fusce nisl interdum erat. Donec per congue quam augue netus nec platea ut faucibus pretium sollicitudin\, cubilia mus consequat himenaeos elementum nunc eros justo mauris. Eget volutpat vestibulum elementum +2024-05-10T00:13:50.000Z,prod,two,10.10.20.30,761,4239,3.625,35.5,true,422,323,2024-04-23T22:48:50.149591147Z,6.3.5,706,,ut faucibus pretium sollicitudin\, cubilia mus consequat himenaeos elementum nunc eros justo mauris. Eget volutpat vestibulum elementum auctor +2024-05-10T00:13:50.000Z,prod,three,10.10.20.35,156,4356,11.25,77.25,true,472,445,2024-04-17T11:32:50.249407418Z,13.10.4,951,,Nunc tortor maecenas turpis donec est rutrum penatibus\, velit quam ante condimentum dictum at nibh\, nisl a lobortis lacus ultrices primis\, vulputate quis volutpat hac tristique mattis. Hendrerit integer mattis +2024-05-10T00:13:56.000Z,prod,one,10.10.20.31,894,4540,7.875,15.5,false,648,538,2024-04-27T08:34:56.382279701Z,10.10.5,282,6, +2024-05-10T00:14:16.000Z,prod,one,10.10.20.30,525,5065,3.625,19.125,false,709,622,2024-03-20T17:09:16.154505597Z,10.10.5,871,,bibendum netus posuere\, sodales aenean mauris ante orci curabitur +2024-05-10T00:14:16.000Z,staging,two,10.10.20.35,601,1291,2.625,56.375,true,649,638,2024-03-20T00:19:16.698052877Z,7.8.5,138,10,quisque tristique cursus phasellus. Parturient aliquam cubilia libero ultrices a facilisi fermentum tempor blandit per\, bibendum fringilla platea imperdiet phasellus nam euismod justo curae. Leo +2024-05-10T00:14:16.000Z,qa,one,10.10.20.34,465,2994,1.0,39.25,false,839,962,2024-03-31T22:35:16.081649871Z,10.4.3,702,6,leo. Commodo accumsan conubia class dictum sollicitudin et eu pretium\, netus magna +2024-05-10T00:14:25.000Z,prod,three,10.10.20.33,652,5008,11.25,88.5,false,528,479,2024-03-19T08:06:25.659025836Z,13.10.4,623,,cum nisl. Arcu porttitor nam +2024-05-10T00:14:30.000Z,prod,three,10.10.20.30,677,5685,7.0,95.5,false,571,493,2024-04-01T09:10:30.321243846Z,13.10.5,834,1,aenean vitae +2024-05-10T00:14:30.000Z,qa,three,10.10.20.32,500,5685,3.5,96.0,true,777,690,2024-03-05T15:34:30.540606085Z,2.7.2,957,2,sapien nulla maecenas cum nisl. Arcu porttitor nam suscipit eget nibh diam mi\, fusce senectus est mattis ac nec\, interdum ridiculus tellus risus iaculis faucibus. Eu cursus ante et nullam +2024-05-10T00:14:33.000Z,prod,one,10.10.20.34,875,5940,9.375,28.5,false,747,721,2024-03-10T07:57:33.064287887Z,10.10.5,852,10,condimentum mollis ultrices\, suspendisse conubia class vitae bibendum +2024-05-10T00:14:33.000Z,prod,two,10.10.20.30,4,4243,0.125,35.625,false,474,369,2024-05-08T09:24:33.189709092Z,6.3.5,141,10,adipiscing elit nulla ut in nullam tristique viverra penatibus ac integer\, non imperdiet +2024-05-10T00:14:33.000Z,staging,three,10.10.20.32,908,4437,2.125,85.0,false,843,747,2024-04-26T11:28:33.225756156Z,7.2.3,830,,sociis in. Magna cursus netus integer lectus ac a et turpis\, praesent fermentum auctor massa at tortor dis. Pulvinar id quam enim +2024-05-10T00:15:09.000Z,qa,three,10.10.20.30,286,5971,9.75,105.75,false,858,737,2024-05-02T16:55:09.741954709Z,2.7.2,477,10,sapien nulla maecenas cum nisl. Arcu porttitor nam suscipit eget nibh diam mi\, fusce senectus est mattis ac nec\, interdum ridiculus tellus +2024-05-10T00:15:15.000Z,staging,three,10.10.20.32,150,4587,2.625,87.625,false,929,770,2024-04-07T09:39:15.579429169Z,7.2.3,910,6,sociis congue aenean vitae himenaeos quam +2024-05-10T00:15:15.000Z,staging,one,10.10.20.33,516,5646,8.125,69.75,true,521,592,2024-04-10T22:42:15.399407968Z,15.6.9,684,,Placerat mi litora fringilla tellus pretium aliquet ut ridiculus magnis magna\, interdum dictumst lacinia hendrerit +2024-05-10T00:15:15.000Z,prod,two,10.10.20.35,550,4793,1.0,36.625,true,560,405,2024-03-25T07:08:15.986071446Z,6.3.5,740,,eros senectus sem ut +2024-05-10T00:15:21.000Z,qa,two,10.10.20.32,1021,1208,1.625,94.25,true,1177,813,2024-04-09T18:37:21.524990091Z,1.1.8,55,2,parturient faucibus +2024-05-10T00:15:21.000Z,qa,one,10.10.20.32,219,3213,6.25,45.5,true,890,1009,2024-04-26T00:13:21.029212369Z,10.4.3,853,,volutpat hac tristique mattis. Hendrerit integer mattis venenatis nibh ad nascetur posuere et\, viverra tincidunt eu sagittis torquent nunc velit\, nulla auctor molestie pellentesque lacinia +2024-05-10T00:15:43.000Z,qa,three,10.10.20.32,606,6577,4.5,110.25,false,953,745,2024-03-20T01:06:43.364890419Z,2.7.2,2,[6,5],mauris cubilia\, ornare +2024-05-10T00:15:49.000Z,qa,two,10.10.20.33,783,1991,4.25,98.5,false,1266,861,2024-03-20T10:46:49.966062605Z,1.1.8,483,5,rutrum congue tempus nullam nostra\, penatibus sed semper leo vitae malesuada hendrerit proin. Lobortis arcu sociosqu +2024-05-10T00:15:51.000Z,qa,three,10.10.20.30,913,7490,11.625,121.875,false,957,803,2024-04-21T01:30:51.976833022Z,2.7.2,757,8,Scelerisque donec luctus laoreet vulputate phasellus interdum cursus a +2024-05-10T00:15:51.000Z,prod,three,10.10.20.34,417,6102,11.875,107.375,true,598,538,2024-03-02T09:11:51.804032851Z,13.10.5,154,,semper morbi volutpat tristique erat. Metus urna vestibulum ornare sodales torquent pulvinar leo ante varius\, montes a nunc dapibus nibh laoreet mi ullamcorper at proin\, viverra cras aenean penatibus +2024-05-10T00:15:51.000Z,staging,two,10.10.20.33,598,1889,4.375,60.75,false,661,690,2024-03-03T18:02:51.726599652Z,7.8.5,198,,volutpat vestibulum elementum auctor posuere lacus mollis bibendum\, tempor torquent dis rhoncus +2024-05-10T00:16:00.000Z,staging,three,10.10.20.32,380,4967,5.25,92.875,false,981,786,2024-03-29T12:46:00.320401674Z,8.2.3,435,2,semper morbi volutpat +2024-05-10T00:16:11.000Z,staging,two,10.10.20.33,48,1937,11.5,72.25,true,700,773,2024-03-27T11:06:11.476058340Z,7.8.5,627,[4,3,6,4],suspendisse ornare nulla scelerisque aliquam laoreet sollicitudin\, primis aptent elementum condimentum neque litora maecenas aenean ante. Ridiculus purus mattis laoreet dui tortor at nascetur metus mauris\, mi imperdiet +2024-05-10T00:16:18.000Z,prod,two,10.10.20.32,263,5056,3.0,39.625,false,570,422,2024-03-01T23:31:18.822658926Z,6.3.5,41,2,sapien nulla maecenas cum nisl. Arcu porttitor nam suscipit eget nibh diam mi\, fusce senectus est mattis ac nec\, interdum ridiculus tellus +2024-05-10T00:16:26.000Z,qa,one,10.10.20.31,234,3447,6.875,52.375,false,966,1014,2024-04-06T05:27:26.753531014Z,10.4.3,204,5,mi ullamcorper at proin\, +2024-05-10T00:16:32.000Z,prod,one,10.10.20.32,354,6294,1.0,29.5,false,787,763,2024-04-03T22:29:32.191342727Z,10.10.5,272,,nam euismod nostra eleifend enim. Cubilia lacinia luctus tincidunt convallis ridiculus habitant +2024-05-10T00:16:55.000Z,prod,one,10.10.20.30,462,6756,4.0,33.5,true,807,849,2024-03-16T06:28:55.787221762Z,10.10.5,169,[5,4,9],quisque inceptos luctus\, sagittis consequat feugiat nibh cubilia maecenas\, vitae donec sem tempus mus. Penatibus metus id blandit rhoncus eget pretium diam\, egestas ad ac nam tellus scelerisque +2024-05-10T00:16:55.000Z,staging,two,10.10.20.32,3,1940,9.125,81.375,false,773,866,2024-03-29T21:54:55.940664583Z,7.8.5,19,4,condimentum lacinia elementum vivamus\, sociis erat lectus torquent luctus pharetra\, nunc cubilia imperdiet malesuada. Scelerisque donec luctus laoreet vulputate phasellus interdum cursus a sapien\, penatibus dictum malesuada nostra +2024-05-10T00:17:02.000Z,prod,two,10.10.20.35,899,5955,0.625,0.625,true,577,449,2024-03-01T14:05:02.180557886Z,6.3.5,825,10,hendrerit proin. Lobortis arcu +2024-05-10T00:17:02.000Z,qa,one,10.10.20.33,878,4325,7.75,60.125,true,987,1079,2024-03-15T17:04:02.001969282Z,10.4.3,292,8,tellus praesent. Tristique fames porta iaculis odio tellus eleifend rhoncus dis mollis rutrum ac\, curae gravida vulputate quisque neque aliquam per cras sed mauris cubilia\, ornare +2024-05-10T00:17:12.000Z,prod,two,10.10.20.35,64,6019,2.0,2.625,true,620,535,2024-05-07T10:35:12.354511265Z,6.3.5,495,[2,8,1], +2024-05-10T00:17:12.000Z,qa,two,10.10.20.30,82,2073,9.5,9.5,true,1335,862,2024-04-22T23:00:12.110101790Z,1.1.8,230,[5,1],ipsum dolor sit amet consectetur adipiscing elit nulla ut in nullam tristique viverra penatibus ac integer\, non imperdiet massa luctus condimentum lacus eu vitae libero nam euismod +2024-05-10T00:17:12.000Z,qa,three,10.10.20.33,221,7711,7.5,129.375,false,1014,879,2024-03-18T08:47:12.733279058Z,2.7.2,651,[2],nunc cubilia imperdiet malesuada. Scelerisque donec luctus laoreet vulputate +2024-05-10T00:17:12.000Z,qa,one,10.10.20.30,428,4753,2.625,62.75,false,1043,1120,2024-04-29T15:48:12.743541609Z,10.4.3,437,3,interdum ridiculus tellus risus iaculis faucibus. Eu cursus +2024-05-10T00:17:12.000Z,prod,three,10.10.20.34,983,7085,12.375,119.75,true,610,597,2024-04-10T10:01:12.179817302Z,14.10.5,899,1,molestie pellentesque lacinia tellus praesent. Tristique fames porta iaculis odio tellus eleifend rhoncus dis mollis rutrum ac\, curae gravida vulputate quisque neque +2024-05-10T00:17:14.000Z,prod,one,10.10.20.35,0,6756,5.25,38.75,false,814,900,2024-03-09T00:38:14.301569248Z,10.10.5,97,, +2024-05-10T00:17:16.000Z,qa,three,10.10.20.32,214,7925,11.125,140.5,true,1088,937,2024-04-14T04:32:16.509248334Z,2.7.2,430,,consequat quisque auctor aliquet sed erat. Laoreet mi est pellentesque ullamcorper\, nibh tempus fames etiam gravida\, integer habitasse urna. Morbi dignissim libero ultrices posuere nam +2024-05-10T00:17:20.000Z,qa,two,10.10.20.33,988,3061,8.625,18.125,false,1346,890,2024-04-23T18:44:20.437003768Z,1.1.8,15,[5,7],velit\, nulla auctor molestie pellentesque lacinia tellus +2024-05-10T00:17:30.000Z,qa,two,10.10.20.32,987,4048,7.875,26.0,false,1445,900,2024-04-10T02:42:30.267021306Z,1.1.8,961,,nascetur posuere et\, viverra tincidunt eu sagittis torquent +2024-05-10T00:17:30.000Z,staging,three,10.10.20.33,964,5931,8.0,100.875,false,1050,853,2024-03-19T20:52:30.477231174Z,8.2.3,550,[3,7,4,5],mi litora fringilla tellus pretium aliquet ut ridiculus magnis magna\, +2024-05-10T00:17:39.000Z,qa,one,10.10.20.30,277,5030,12.125,74.875,false,1127,1167,2024-04-08T13:54:39.034143102Z,11.4.3,354,[6,1,5,10],nam euismod nostra eleifend enim. Cubilia lacinia luctus tincidunt convallis +2024-05-10T00:17:39.000Z,prod,one,10.10.20.31,966,7722,3.5,42.25,true,843,947,2024-05-09T22:14:39.717054712Z,10.10.5,274,,quisque molestie pretium\, a sapien +2024-05-10T00:17:55.000Z,qa,two,10.10.20.30,916,4964,0.5,26.5,true,1463,928,2024-03-13T01:40:55.838123062Z,1.1.8,258,9,congue aenean vitae himenaeos quam sociosqu\, class parturient torquent sollicitudin platea +2024-05-10T00:18:02.000Z,staging,one,10.10.20.33,4,5650,0.625,70.375,true,536,601,2024-04-07T14:22:02.632239869Z,15.7.9,900,4,sociosqu egestas\, quam at mollis accumsan lobortis +2024-05-10T00:18:02.000Z,qa,one,10.10.20.33,2,5032,10.875,85.75,false,1147,1205,2024-04-21T18:26:02.078122017Z,11.4.3,801,1,vitae donec sem tempus mus. Penatibus metus id blandit rhoncus eget pretium diam\, egestas ad ac nam tellus scelerisque +2024-05-10T00:18:02.000Z,qa,three,10.10.20.32,689,8614,3.625,144.125,true,1131,1030,2024-04-22T05:33:02.933276213Z,2.7.2,343,,neque nisl odio quis aliquam\, in penatibus hendrerit non leo mattis duis. Sed ultricies mus nostra mauris vivamus velit +2024-05-10T00:18:07.000Z,prod,three,10.10.20.34,45,7130,7.0,126.75,false,630,631,2024-04-19T12:48:07.257850932Z,14.10.5,990,5,Scelerisque donec luctus laoreet vulputate phasellus interdum cursus a sapien\, +2024-05-10T00:18:16.000Z,qa,three,10.10.20.32,216,8830,0.625,144.75,false,1143,1038,2024-04-23T02:30:16.208941912Z,2.7.2,649,10,nascetur. Hendrerit ridiculus quisque rutrum erat turpis bibendum justo posuere morbi nisi\, himenaeos blandit id suspendisse ornare nulla scelerisque +2024-05-10T00:18:29.000Z,qa,two,10.10.20.31,67,5031,10.125,36.625,true,1560,976,2024-04-17T10:28:29.927967646Z,1.1.8,539,[8,1,6,7],cursus ultrices netus diam nunc tincidunt\, feugiat posuere enim rutrum. Aenean himenaeos urna quam potenti aptent proin semper arcu\, interdum congue dignissim neque +2024-05-10T00:18:29.000Z,prod,three,10.10.20.35,107,7237,3.875,130.625,true,717,706,2024-03-31T22:56:29.207222547Z,14.10.5,128,[9,5,4],dis vivamus varius massa nisi in sociosqu egestas\, quam at mollis accumsan lobortis odio cubilia urna vehicula +2024-05-10T00:18:33.000Z,prod,three,10.10.20.32,1018,8255,11.5,11.5,true,783,722,2024-05-07T22:56:33.800402187Z,14.10.5,844,2,sociosqu porta pretium faucibus\, cursus ultrices netus diam nunc tincidunt\, feugiat posuere enim rutrum. Aenean himenaeos +2024-05-10T00:18:33.000Z,staging,three,10.10.20.30,601,6532,1.5,102.375,false,1096,878,2024-03-16T07:22:33.022696591Z,9.2.3,764,,porttitor nam suscipit eget nibh diam mi\, fusce senectus est mattis ac nec\, interdum ridiculus tellus risus iaculis faucibus. Eu cursus +2024-05-10T00:18:33.000Z,qa,one,10.10.20.31,747,5779,2.875,88.625,false,1229,1206,2024-04-04T22:34:33.699002327Z,11.4.3,987,6,Lorem ipsum dolor sit amet consectetur adipiscing elit nulla ut in +2024-05-10T00:18:43.000Z,staging,two,10.10.20.30,804,2744,5.75,87.125,false,838,869,2024-05-05T17:02:43.926744735Z,7.8.5,436,[3],orci himenaeos\, enim luctus viverra vitae sollicitudin ullamcorper maecenas nulla\, neque eu +2024-05-10T00:18:43.000Z,prod,one,10.10.20.30,990,8712,6.125,48.375,true,915,957,2024-04-15T19:01:43.249902708Z,10.10.5,530,0,arcu diam lacus sociosqu\, lacinia suspendisse quisque tristique cursus phasellus. Parturient aliquam cubilia libero ultrices a facilisi fermentum tempor blandit per\, bibendum fringilla platea imperdiet phasellus +2024-05-10T00:18:43.000Z,qa,one,10.10.20.35,187,5966,1.625,90.25,false,1248,1262,2024-03-29T08:28:43.537833771Z,11.4.3,824,,pellentesque ullamcorper\, nibh tempus fames etiam gravida\, integer habitasse urna. Morbi dignissim libero ultrices posuere nam facilisis parturient\, luctus praesent aptent a vestibulum malesuada semper laoreet\, egestas erat cursus +2024-05-10T00:18:57.000Z,qa,two,10.10.20.30,811,5842,2.5,39.125,true,1612,1000,2024-03-13T02:56:57.085143887Z,1.1.8,615,[3,10],imperdiet per scelerisque viverra. Odio sem mi molestie luctus dictumst sagittis inceptos\, sociis congue aenean +2024-05-10T00:18:57.000Z,prod,two,10.10.20.30,1005,7024,0.375,3.0,false,703,565,2024-05-05T16:10:57.703817712Z,6.3.5,38,,netus nec platea ut faucibus pretium sollicitudin\, cubilia mus consequat himenaeos elementum nunc eros justo mauris. Eget volutpat vestibulum elementum auctor posuere lacus mollis bibendum\, tempor torquent dis rhoncus +2024-05-10T00:18:58.000Z,prod,three,10.10.20.34,936,9191,0.875,12.375,false,851,790,2024-03-03T21:30:58.248694260Z,14.10.5,640,6, +2024-05-10T00:18:58.000Z,staging,two,10.10.20.30,842,3586,10.5,97.625,true,839,886,2024-03-11T18:42:58.980619980Z,7.8.5,921,[10,2],torquent +2024-05-10T00:19:36.000Z,qa,two,10.10.20.34,936,6778,8.625,47.75,false,1671,1064,2024-04-03T14:49:36.533258253Z,1.1.8,535,,penatibus dictum malesuada nostra suscipit congue aptent sociis\, dictumst tristique condimentum gravida proin facilisi at praesent. +2024-05-10T00:19:38.000Z,prod,one,10.10.20.30,542,9254,11.125,59.5,false,1014,962,2024-04-13T18:44:38.566810810Z,10.10.5,199,[10],pellentesque imperdiet tortor felis\, vulputate tempor suscipit dui primis habitant nullam porta pharetra\, purus eleifend dictumst semper morbi volutpat tristique erat. Metus urna vestibulum ornare sodales torquent pulvinar +2024-05-10T00:19:48.000Z,prod,two,10.10.20.32,1007,8031,5.625,8.625,true,734,581,2024-04-27T13:16:48.490229583Z,6.3.5,736,,primis habitant nullam porta pharetra\, purus eleifend dictumst semper morbi volutpat tristique erat. Metus urna vestibulum ornare sodales torquent pulvinar leo +2024-05-10T00:19:48.000Z,prod,three,10.10.20.32,4,9195,12.25,24.625,false,901,794,2024-03-16T10:01:48.108235874Z,14.10.5,641,[8,8],ante condimentum dictum at nibh\, nisl a lobortis +2024-05-10T00:19:53.000Z,qa,two,10.10.20.33,877,7655,6.75,54.5,true,1709,1068,2024-03-16T10:45:53.824172234Z,2.1.8,690,10,quam enim lobortis pellentesque neque facilisis dapibus\, velit interdum mattis magna iaculis non fusce\, morbi tempus sapien nulla maecenas cum nisl. Arcu porttitor nam suscipit eget nibh +2024-05-10T00:20:00.000Z,staging,three,10.10.20.35,1,6533,8.375,110.75,true,1141,926,2024-04-09T17:06:00.157632333Z,9.2.4,891,[3,9,5,9],mi\, fusce senectus est mattis +2024-05-10T00:20:00.000Z,qa,three,10.10.20.31,995,9825,7.5,7.5,true,1200,1079,2024-04-15T15:36:00.267053113Z,2.7.2,862,7,ut ridiculus fusce ligula senectus iaculis justo faucibus bibendum. Nam odio vel suspendisse ligula in gravida\, et primis curae ante ut enim lectus\, a magnis praesent hendrerit leo. Commodo +2024-05-10T00:20:00.000Z,prod,three,10.10.20.30,774,9969,0.0,24.625,false,928,802,2024-03-11T17:44:00.720044750Z,14.10.5,995,4,inceptos luctus\, sagittis consequat feugiat nibh cubilia maecenas\, vitae donec sem tempus mus. Penatibus metus id blandit rhoncus eget pretium diam\, egestas ad ac nam tellus +2024-05-10T00:20:03.000Z,staging,two,10.10.20.31,1009,4595,0.75,98.375,true,872,911,2024-04-16T05:09:03.776384072Z,7.8.5,208,[5,1],Cubilia lacinia luctus tincidunt convallis ridiculus habitant vel potenti\, arcu pellentesque semper sociis ac felis. Vitae sagittis natoque mollis arcu diam lacus sociosqu\, lacinia suspendisse quisque tristique cursus phasellus. +2024-05-10T00:20:16.000Z,staging,two,10.10.20.34,589,5184,8.625,107.0,false,948,946,2024-04-17T07:23:16.967811169Z,7.8.5,157,1,quisque auctor aliquet sed +2024-05-10T00:20:25.000Z,prod,two,10.10.20.31,678,8709,1.375,1.375,true,818,599,2024-03-13T10:26:25.139331096Z,7.3.5,922,,laoreet\, egestas erat cursus nibh +2024-05-10T00:20:25.000Z,prod,one,10.10.20.31,953,10207,0.875,60.375,false,1057,1052,2024-04-19T19:44:25.229804342Z,10.10.5,494,10,habitasse vivamus quisque inceptos luctus\, sagittis consequat feugiat nibh cubilia maecenas\, vitae donec sem tempus mus. Penatibus metus id blandit rhoncus +2024-05-10T00:20:44.000Z,prod,two,10.10.20.31,756,9465,7.625,7.625,true,873,684,2024-05-02T10:00:44.005112597Z,7.3.5,581,[4,6],mattis venenatis nibh ad nascetur posuere et\, viverra tincidunt eu sagittis torquent nunc velit\, nulla auctor molestie pellentesque lacinia tellus praesent. Tristique +2024-05-10T00:20:44.000Z,staging,three,10.10.20.32,600,7133,9.5,120.25,true,1168,961,2024-03-16T07:48:44.307636618Z,9.2.4,395,8,suscipit congue aptent sociis\, dictumst tristique condimentum gravida proin facilisi at praesent. Diam +2024-05-10T00:20:46.000Z,qa,two,10.10.20.35,913,8568,9.375,63.875,true,1716,1141,2024-03-28T20:52:46.023834027Z,2.1.8,713,[8,1,9,2],imperdiet massa luctus condimentum lacus eu vitae libero nam euismod nostra eleifend enim. Cubilia lacinia luctus tincidunt convallis ridiculus habitant vel potenti\, arcu +2024-05-10T00:21:19.000Z,staging,three,10.10.20.33,198,7331,2.375,122.625,false,1190,1034,2024-03-22T06:10:19.969517074Z,10.2.4,867,8,pretium sollicitudin\, cubilia +2024-05-10T00:21:26.000Z,qa,one,10.10.20.33,917,6883,3.875,94.125,true,1330,1300,2024-05-02T11:00:26.019823616Z,11.4.3,593,,bibendum lacus lacinia +2024-05-10T00:21:56.000Z,qa,one,10.10.20.30,197,7080,11.875,106.0,false,1379,1398,2024-04-08T11:14:56.944847548Z,11.4.3,567,2,nec platea ut faucibus pretium sollicitudin\, cubilia mus consequat himenaeos elementum nunc eros justo mauris. Eget volutpat vestibulum elementum auctor posuere lacus mollis bibendum\, tempor torquent dis rhoncus +2024-05-10T00:21:59.000Z,staging,one,10.10.20.31,749,6399,0.0,70.375,false,552,655,2024-04-24T01:03:59.290812343Z,15.7.9,339,,tortor maecenas turpis donec est rutrum penatibus\, velit quam ante condimentum dictum at nibh\, nisl a lobortis lacus ultrices primis\, vulputate quis volutpat hac tristique mattis. Hendrerit integer mattis venenatis +2024-05-10T00:22:08.000Z,staging,three,10.10.20.32,69,7400,5.25,127.875,false,1191,1114,2024-03-21T19:14:08.556875394Z,10.2.4,363,[10],porta pharetra\, purus eleifend +2024-05-10T00:22:08.000Z,prod,one,10.10.20.33,16,16,5.5,65.875,false,1114,1063,2024-05-05T12:26:08.918211717Z,10.10.5,525,,fusce\, morbi +2024-05-10T00:22:12.000Z,prod,one,10.10.20.31,931,947,7.875,73.75,false,1149,1088,2024-04-19T07:59:12.875420083Z,11.10.5,529,6,fringilla tellus pretium aliquet ut ridiculus magnis magna\, interdum dictumst lacinia hendrerit gravida torquent bibendum netus posuere\, sodales aenean mauris ante orci curabitur feugiat +2024-05-10T00:22:42.000Z,staging,three,10.10.20.30,3,7403,9.5,137.375,true,1209,1122,2024-04-24T21:15:42.304910733Z,10.3.4,327,[9,6,5],ac integer\, non imperdiet massa luctus condimentum lacus eu vitae libero nam euismod nostra eleifend enim. Cubilia lacinia luctus tincidunt convallis +2024-05-10T00:22:49.000Z,staging,two,10.10.20.34,3,5187,1.75,108.75,true,973,998,2024-04-30T21:55:49.304639455Z,7.8.5,710,3,fusce nisl interdum erat. Donec per congue quam augue netus nec +2024-05-10T00:22:53.000Z,staging,one,10.10.20.31,238,6637,4.625,4.625,false,581,670,2024-05-01T00:31:53.631634749Z,15.7.9,162,7,suscipit\, mattis nisl +2024-05-10T00:22:53.000Z,prod,two,10.10.20.33,812,10277,10.75,18.375,true,967,735,2024-05-03T20:24:53.330019055Z,7.3.5,498,[1,7,2],volutpat vestibulum elementum auctor +2024-05-10T00:22:54.000Z,qa,three,10.10.20.33,972,10797,10.875,18.375,false,1241,1104,2024-04-27T02:24:54.780591621Z,2.7.2,171,6,venenatis augue orci porttitor consequat condimentum mollis ultrices\, suspendisse conubia class vitae +2024-05-10T00:22:59.000Z,qa,one,10.10.20.35,206,7286,6.25,112.25,true,1380,1398,2024-03-02T00:49:59.609497396Z,11.4.3,448,,eros donec ullamcorper sociosqu eleifend condimentum orci\, quis maecenas litora congue porttitor velit ornare sociis\, nunc purus consequat quisque diff --git a/x-pack/plugin/esql/qa/testFixtures/src/main/resources/k8s-downsampled-mappings.json b/x-pack/plugin/esql/qa/testFixtures/src/main/resources/k8s-downsampled-mappings.json new file mode 100644 index 0000000000000..32c517e3eeb6b --- /dev/null +++ b/x-pack/plugin/esql/qa/testFixtures/src/main/resources/k8s-downsampled-mappings.json @@ -0,0 +1,91 @@ +{ + "properties": { + "@timestamp": { + "type": "date", + "meta" : { + "fixed_interval" : "1h", + "time_zone" : "UTC" + } + }, + "cluster": { + "type": "keyword", + "time_series_dimension": true + }, + "pod": { + "type": "keyword", + "time_series_dimension": true + }, + "client": { + "properties": { + "ip": { + "type": "ip" + } + } + }, + "event": { + "type": "keyword" + }, + "event_log": { + "type": "text" + }, + "events_received": { + "type": "long" + }, + "network": { + "properties": { + "bytes_in": { + "type": "long" + }, + "total_bytes_in": { + "type": "long", + "time_series_metric": "counter" + }, + "cost": { + "type": "double" + }, + "total_cost": { + "type": "double", + "time_series_metric": "counter" + }, + "eth0": { + "properties": { + "up": { + "type": "boolean" + }, + "tx": { + "type" : "aggregate_metric_double", + "metrics" : [ + "min", + "max", + "sum", + "value_count" + ], + "default_metric" : "max", + "time_series_metric": "gauge" + }, + "rx": { + "type" : "aggregate_metric_double", + "metrics" : [ + "min", + "max", + "sum", + "value_count" + ], + "default_metric" : "max", + "time_series_metric": "gauge" + }, + "last_up": { + "type": "date_nanos" + }, + "firmware_version": { + "type": "version" + }, + "currently_connected_clients": { + "type": "integer" + } + } + } + } + } + } +} diff --git a/x-pack/plugin/esql/qa/testFixtures/src/main/resources/k8s-downsampled-settings.json b/x-pack/plugin/esql/qa/testFixtures/src/main/resources/k8s-downsampled-settings.json new file mode 100644 index 0000000000000..944c3d0bb2800 --- /dev/null +++ b/x-pack/plugin/esql/qa/testFixtures/src/main/resources/k8s-downsampled-settings.json @@ -0,0 +1,10 @@ +{ + "index": { + "mode": "time_series", + "routing_path": ["cluster", "pod"], + "time_series": { + "start_time": "2024-05-01T00:00:00Z", + "end_time": "2024-05-09T23:59:59Z" + } + } +} diff --git a/x-pack/plugin/esql/qa/testFixtures/src/main/resources/k8s-mappings.json b/x-pack/plugin/esql/qa/testFixtures/src/main/resources/k8s-mappings.json index 0cde23454ac2f..ff413d74c2cb2 100644 --- a/x-pack/plugin/esql/qa/testFixtures/src/main/resources/k8s-mappings.json +++ b/x-pack/plugin/esql/qa/testFixtures/src/main/resources/k8s-mappings.json @@ -21,6 +21,12 @@ "event": { "type": "keyword" }, + "event_log": { + "type": "text" + }, + "events_received": { + "type": "long" + }, "network": { "properties": { "bytes_in": { @@ -40,6 +46,30 @@ "total_cost": { "type": "double", "time_series_metric": "counter" + }, + "eth0": { + "properties": { + "up": { + "type": "boolean" + }, + "tx": { + "type": "integer", + "time_series_metric": "gauge" + }, + "rx": { + "type": "integer", + "time_series_metric": "gauge" + }, + "last_up": { + "type": "date_nanos" + }, + "firmware_version": { + "type": "version" + }, + "currently_connected_clients": { + "type": "integer" + } + } } } } diff --git a/x-pack/plugin/esql/qa/testFixtures/src/main/resources/k8s-timeseries.csv-spec b/x-pack/plugin/esql/qa/testFixtures/src/main/resources/k8s-timeseries.csv-spec index c2b281e5e7e79..0f380d3d6ad1e 100644 --- a/x-pack/plugin/esql/qa/testFixtures/src/main/resources/k8s-timeseries.csv-spec +++ b/x-pack/plugin/esql/qa/testFixtures/src/main/resources/k8s-timeseries.csv-spec @@ -196,6 +196,508 @@ cost:double | cluster:keyword | time_bucket:datetime 22.75 | qa | 2024-05-10T00:08:00.000Z ; +max_over_time_of_double_no_grouping +required_capability: metrics_command +required_capability: max_over_time +TS k8s +| STATS cost=sum(max_over_time(network.cost)) BY time_bucket = bucket(@timestamp,1minute) +| SORT cost DESC, time_bucket DESC | LIMIT 10; + +cost:double | time_bucket:datetime +83.125 | 2024-05-10T00:09:00.000Z +65.75 | 2024-05-10T00:08:00.000Z +60.375 | 2024-05-10T00:17:00.000Z +55.25 | 2024-05-10T00:18:00.000Z +51.625 | 2024-05-10T00:22:00.000Z +50.125 | 2024-05-10T00:15:00.000Z +44.875 | 2024-05-10T00:06:00.000Z +43.5 | 2024-05-10T00:20:00.000Z +42.625 | 2024-05-10T00:13:00.000Z +42.25 | 2024-05-10T00:03:00.000Z +; + +max_over_time_of_ip +required_capability: metrics_command +required_capability: max_over_time +TS k8s | STATS ip = max(max_over_time(client.ip)) BY time_bucket = bucket(@timestamp,1minute) | SORT time_bucket | LIMIT 10; +ip:ip | time_bucket:datetime +10.10.20.34 | 2024-05-10T00:00:00.000Z +10.10.20.33 | 2024-05-10T00:01:00.000Z +10.10.20.35 | 2024-05-10T00:02:00.000Z +10.10.20.35 | 2024-05-10T00:03:00.000Z +10.10.20.35 | 2024-05-10T00:04:00.000Z +10.10.20.35 | 2024-05-10T00:05:00.000Z +10.10.20.35 | 2024-05-10T00:06:00.000Z +10.10.20.35 | 2024-05-10T00:07:00.000Z +10.10.20.34 | 2024-05-10T00:08:00.000Z +10.10.20.35 | 2024-05-10T00:09:00.000Z +; + +max_over_time_of_ip_grouping +required_capability: metrics_command +required_capability: max_over_time +TS k8s | STATS ip = max(max_over_time(client.ip)) BY cluster, time_bucket = bucket(@timestamp,1minute) | SORT time_bucket, cluster | LIMIT 10; + +ip:ip | cluster:keyword | time_bucket:datetime +10.10.20.30 | prod | 2024-05-10T00:00:00.000Z +10.10.20.34 | staging | 2024-05-10T00:00:00.000Z +10.10.20.31 | prod | 2024-05-10T00:01:00.000Z +10.10.20.33 | qa | 2024-05-10T00:01:00.000Z +10.10.20.35 | prod | 2024-05-10T00:02:00.000Z +10.10.20.34 | qa | 2024-05-10T00:02:00.000Z +10.10.20.35 | staging | 2024-05-10T00:02:00.000Z +10.10.20.33 | prod | 2024-05-10T00:03:00.000Z +10.10.20.35 | qa | 2024-05-10T00:03:00.000Z +10.10.20.34 | staging | 2024-05-10T00:03:00.000Z +; + +max_over_time_of_long +required_capability: metrics_command +required_capability: max_over_time +TS k8s | STATS bytes_in = sum(max_over_time(network.bytes_in)) BY time_bucket = bucket(@timestamp,1minute) | SORT bytes_in DESC, time_bucket | LIMIT 10; + +bytes_in:long | time_bucket:datetime +6707 | 2024-05-10T00:18:00.000Z +6000 | 2024-05-10T00:20:00.000Z +5899 | 2024-05-10T00:17:00.000Z +4836 | 2024-05-10T00:09:00.000Z +4384 | 2024-05-10T00:15:00.000Z +4115 | 2024-05-10T00:08:00.000Z +4030 | 2024-05-10T00:14:00.000Z +3685 | 2024-05-10T00:13:00.000Z +3623 | 2024-05-10T00:02:00.000Z +3618 | 2024-05-10T00:06:00.000Z +; + +max_over_time_of_long_grouping +required_capability: metrics_command +required_capability: max_over_time +TS k8s | STATS bytes_in = sum(max_over_time(network.bytes_in)) BY cluster, time_bucket = bucket(@timestamp,1minute) | SORT bytes_in DESC, time_bucket | LIMIT 10; + +bytes_in:long | cluster:keyword | time_bucket:datetime +3013 | prod | 2024-05-10T00:18:00.000Z +2848 | prod | 2024-05-10T00:17:00.000Z +2483 | prod | 2024-05-10T00:20:00.000Z +2247 | qa | 2024-05-10T00:18:00.000Z +2153 | qa | 2024-05-10T00:15:00.000Z +2087 | qa | 2024-05-10T00:17:00.000Z +2035 | staging | 2024-05-10T00:09:00.000Z +1908 | qa | 2024-05-10T00:20:00.000Z +1904 | qa | 2024-05-10T00:06:00.000Z +1811 | prod | 2024-05-10T00:13:00.000Z +; + +max_over_time_of_boolean +required_capability: metrics_command +required_capability: max_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS eth0_up = min(max_over_time(network.eth0.up)) BY time_bucket = bucket(@timestamp,1minute) | SORT time_bucket | LIMIT 10; + +eth0_up:boolean | time_bucket:datetime +false | 2024-05-10T00:00:00.000Z +false | 2024-05-10T00:01:00.000Z +true | 2024-05-10T00:02:00.000Z +false | 2024-05-10T00:03:00.000Z +false | 2024-05-10T00:04:00.000Z +false | 2024-05-10T00:05:00.000Z +false | 2024-05-10T00:06:00.000Z +false | 2024-05-10T00:07:00.000Z +false | 2024-05-10T00:08:00.000Z +false | 2024-05-10T00:09:00.000Z +; + +max_over_time_of_boolean_grouping +required_capability: metrics_command +required_capability: max_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS eth0_up = min(max_over_time(network.eth0.up)) BY cluster, time_bucket = bucket(@timestamp,1minute) | SORT time_bucket, cluster | LIMIT 10; + +eth0_up:boolean | cluster:keyword | time_bucket:datetime +false | prod | 2024-05-10T00:00:00.000Z +true | staging | 2024-05-10T00:00:00.000Z +false | prod | 2024-05-10T00:01:00.000Z +false | qa | 2024-05-10T00:01:00.000Z +true | prod | 2024-05-10T00:02:00.000Z +true | qa | 2024-05-10T00:02:00.000Z +true | staging | 2024-05-10T00:02:00.000Z +false | prod | 2024-05-10T00:03:00.000Z +true | qa | 2024-05-10T00:03:00.000Z +false | staging | 2024-05-10T00:03:00.000Z +; + +max_over_time_of_date_nanos +required_capability: metrics_command +required_capability: max_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS last_up = max(max_over_time(network.eth0.last_up)) BY time_bucket = bucket(@timestamp,1minute) | SORT time_bucket | LIMIT 10; + +last_up:date_nanos | time_bucket:datetime +2024-05-03T15:37:33.324440296Z | 2024-05-10T00:00:00.000Z +2024-04-09T03:20:29.012174065Z | 2024-05-10T00:01:00.000Z +2024-05-08T10:03:43.290628939Z | 2024-05-10T00:02:00.000Z +2024-05-02T09:02:26.799002478Z | 2024-05-10T00:03:00.000Z +2024-05-09T23:18:49.214537497Z | 2024-05-10T00:04:00.000Z +2024-04-25T19:33:06.187780912Z | 2024-05-10T00:05:00.000Z +2024-05-08T01:35:07.955894784Z | 2024-05-10T00:06:00.000Z +2024-05-02T07:53:33.802839368Z | 2024-05-10T00:07:00.000Z +2024-05-08T18:36:40.027496014Z | 2024-05-10T00:08:00.000Z +2024-05-08T23:33:34.42759108Z | 2024-05-10T00:09:00.000Z +; + +max_over_time_of_date_nanos_grouping +required_capability: metrics_command +required_capability: max_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS last_up = max(max_over_time(network.eth0.last_up)) BY cluster, time_bucket = bucket(@timestamp,1minute) | SORT time_bucket, cluster | LIMIT 10; + +last_up:date_nanos | cluster:keyword | time_bucket:datetime +2024-03-25T09:57:51.755620402Z | prod | 2024-05-10T00:00:00.000Z +2024-05-03T15:37:33.324440296Z | staging | 2024-05-10T00:00:00.000Z +2024-04-09T03:20:29.012174065Z | prod | 2024-05-10T00:01:00.000Z +2024-03-31T23:14:25.575848186Z | qa | 2024-05-10T00:01:00.000Z +2024-05-06T19:01:53.843370676Z | prod | 2024-05-10T00:02:00.000Z +2024-05-02T13:22:35.021783722Z | qa | 2024-05-10T00:02:00.000Z +2024-05-08T10:03:43.290628939Z | staging | 2024-05-10T00:02:00.000Z +2024-04-04T01:13:26.805245198Z | prod | 2024-05-10T00:03:00.000Z +2024-04-28T06:40:53.255612616Z | qa | 2024-05-10T00:03:00.000Z +2024-05-02T09:02:26.799002478Z | staging | 2024-05-10T00:03:00.000Z +; + +max_over_time_of_version +required_capability: metrics_command +required_capability: max_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS version = max(max_over_time(network.eth0.firmware_version)) BY time_bucket = bucket(@timestamp,1minute) | SORT time_bucket | LIMIT 10; + +version:version | time_bucket:datetime +13.10.4 | 2024-05-10T00:00:00.000Z +13.10.4 | 2024-05-10T00:01:00.000Z +13.10.4 | 2024-05-10T00:02:00.000Z +15.6.9 | 2024-05-10T00:03:00.000Z +10.3.2 | 2024-05-10T00:04:00.000Z +13.10.4 | 2024-05-10T00:05:00.000Z +13.10.4 | 2024-05-10T00:06:00.000Z +10.4.3 | 2024-05-10T00:07:00.000Z +15.6.9 | 2024-05-10T00:08:00.000Z +15.6.9 | 2024-05-10T00:09:00.000Z +; + +max_over_time_of_version_grouping +required_capability: metrics_command +required_capability: max_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS version = max(max_over_time(network.eth0.firmware_version)) BY cluster, time_bucket = bucket(@timestamp,1minute) | SORT time_bucket, cluster | LIMIT 10; + +version:version | cluster:keyword | time_bucket:datetime +13.10.4 | prod | 2024-05-10T00:00:00.000Z +7.8.4 | staging | 2024-05-10T00:00:00.000Z +13.10.4 | prod | 2024-05-10T00:01:00.000Z +10.3.2 | qa | 2024-05-10T00:01:00.000Z +13.10.4 | prod | 2024-05-10T00:02:00.000Z +1.7.2 | qa | 2024-05-10T00:02:00.000Z +7.8.4 | staging | 2024-05-10T00:02:00.000Z +9.10.4 | prod | 2024-05-10T00:03:00.000Z +1.7.2 | qa | 2024-05-10T00:03:00.000Z +15.6.9 | staging | 2024-05-10T00:03:00.000Z +; + +max_over_time_of_integer +required_capability: metrics_command +required_capability: max_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS clients = avg(max_over_time(network.eth0.currently_connected_clients)) BY time_bucket = bucket(@timestamp,1minute) | SORT time_bucket | LIMIT 10; + +clients:double | time_bucket:datetime +726.6666666666666 | 2024-05-10T00:00:00.000Z +418.25 | 2024-05-10T00:01:00.000Z +550.3333333333334 | 2024-05-10T00:02:00.000Z +598.8 | 2024-05-10T00:03:00.000Z +546.3333333333334 | 2024-05-10T00:04:00.000Z +809.8 | 2024-05-10T00:05:00.000Z +656.8333333333334 | 2024-05-10T00:06:00.000Z +822.6666666666666 | 2024-05-10T00:07:00.000Z +605.25 | 2024-05-10T00:08:00.000Z +642.1111111111111 | 2024-05-10T00:09:00.000Z +; + +max_over_time_of_integer_grouping +required_capability: metrics_command +required_capability: max_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS clients = avg(max_over_time(network.eth0.currently_connected_clients)) BY cluster, time_bucket = bucket(@timestamp,1minute) | SORT time_bucket, cluster | LIMIT 10; + +clients:double | cluster:keyword | time_bucket:datetime +949.0 | prod | 2024-05-10T00:00:00.000Z +615.5 | staging | 2024-05-10T00:00:00.000Z +396.5 | prod | 2024-05-10T00:01:00.000Z +440.0 | qa | 2024-05-10T00:01:00.000Z +659.5 | prod | 2024-05-10T00:02:00.000Z +565.0 | qa | 2024-05-10T00:02:00.000Z +426.5 | staging | 2024-05-10T00:02:00.000Z +742.0 | prod | 2024-05-10T00:03:00.000Z +454.0 | qa | 2024-05-10T00:03:00.000Z +672.0 | staging | 2024-05-10T00:03:00.000Z +; + +max_over_time_of_text +required_capability: metrics_command +required_capability: max_over_time +TS k8s | STATS event_log = max(max_over_time(event_log)) BY time_bucket = bucket(@timestamp,1minute) | SORT event_log, time_bucket | LIMIT 10; + +event_log:keyword | time_bucket:datetime +lacus sociosqu, lacinia suspendisse quisque tristique cursus phasellus. Parturient aliquam cubilia libero ultrices a facilisi fermentum tempor blandit per, bibendum fringilla platea imperdiet phasellus nam euismod justo curae. Leo | 2024-05-10T00:01:00.000Z +per cras sed mauris cubilia, | 2024-05-10T00:07:00.000Z +platea morbi. Maecenas etiam venenatis augue orci | 2024-05-10T00:10:00.000Z +quam enim lobortis pellentesque neque facilisis dapibus, velit interdum mattis magna iaculis non fusce, morbi tempus sapien nulla maecenas cum nisl. Arcu porttitor nam suscipit eget nibh | 2024-05-10T00:19:00.000Z +quisque tristique cursus phasellus. Parturient aliquam cubilia libero ultrices a facilisi fermentum tempor blandit per, bibendum fringilla | 2024-05-10T00:04:00.000Z +sociis in. Magna cursus netus integer lectus ac a et turpis, praesent fermentum auctor massa at tortor dis. Pulvinar id quam enim | 2024-05-10T00:14:00.000Z +suspendisse ornare nulla scelerisque aliquam laoreet sollicitudin, primis aptent elementum condimentum neque litora maecenas aenean ante. Ridiculus purus mattis laoreet dui tortor at nascetur metus mauris, mi imperdiet | 2024-05-10T00:16:00.000Z +tortor felis, vulputate tempor suscipit dui | 2024-05-10T00:00:00.000Z +tortor maecenas turpis donec est rutrum penatibus, velit quam ante condimentum dictum at nibh, nisl a lobortis lacus ultrices primis, vulputate quis volutpat hac tristique mattis. Hendrerit integer mattis venenatis | 2024-05-10T00:21:00.000Z +ullamcorper maecenas nulla, neque eu tellus mus | 2024-05-10T00:08:00.000Z +; + +max_over_time_of_text_grouping +required_capability: metrics_command +required_capability: max_over_time +TS k8s | STATS event_log = max(max_over_time(event_log)) BY cluster, time_bucket = bucket(@timestamp,1minute) | SORT event_log, time_bucket | LIMIT 10; + +event_log:keyword | cluster:keyword | time_bucket:datetime +Aenean himenaeos urna | prod | 2024-05-10T00:03:00.000Z +at nibh, nisl a lobortis lacus ultrices primis, vulputate quis volutpat hac tristique mattis. Hendrerit integer mattis venenatis nibh ad nascetur posuere et, viverra tincidunt eu | qa | 2024-05-10T00:10:00.000Z +condimentum lacinia elementum vivamus, sociis erat lectus torquent luctus pharetra, nunc cubilia imperdiet | qa | 2024-05-10T00:13:00.000Z +cum nisl. Arcu porttitor nam | prod | 2024-05-10T00:14:00.000Z +dignissim libero ultrices posuere nam facilisis parturient, luctus | prod | 2024-05-10T00:01:00.000Z +eu pretium, netus magna sed diam iaculis etiam arcu, parturient orci augue nullam | qa | 2024-05-10T00:12:00.000Z +eu pretium, netus magna sed diam iaculis etiam arcu, parturient orci augue nullam rutrum | prod | 2024-05-10T00:12:00.000Z +interdum ridiculus tellus risus iaculis faucibus. Eu cursus ante et nullam litora nulla habitasse nisl dignissim quisque molestie pretium, a | staging | 2024-05-10T00:00:00.000Z +lacinia | staging | 2024-05-10T00:10:00.000Z +lacus sociosqu, lacinia suspendisse quisque tristique cursus phasellus. Parturient aliquam cubilia libero ultrices a facilisi fermentum tempor blandit per, bibendum fringilla platea imperdiet phasellus nam euismod justo curae. Leo | qa | 2024-05-10T00:01:00.000Z +; + +max_over_time_of_keyword +required_capability: metrics_command +required_capability: max_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS pod = min(max_over_time(pod)) BY time_bucket = bucket(@timestamp,1minute) | SORT time_bucket | LIMIT 10; + +pod:keyword | time_bucket:datetime +three | 2024-05-10T00:00:00.000Z +one | 2024-05-10T00:01:00.000Z +three | 2024-05-10T00:02:00.000Z +one | 2024-05-10T00:03:00.000Z +one | 2024-05-10T00:04:00.000Z +one | 2024-05-10T00:05:00.000Z +one | 2024-05-10T00:06:00.000Z +one | 2024-05-10T00:07:00.000Z +one | 2024-05-10T00:08:00.000Z +one | 2024-05-10T00:09:00.000Z +; + +max_over_time_of_keyword_grouping +required_capability: metrics_command +required_capability: max_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS pod = min(max_over_time(pod)) BY cluster, time_bucket = bucket(@timestamp,1minute) | SORT time_bucket, cluster | LIMIT 10; + +pod:keyword | cluster:keyword | time_bucket:datetime +three | prod | 2024-05-10T00:00:00.000Z +three | staging | 2024-05-10T00:00:00.000Z +one | prod | 2024-05-10T00:01:00.000Z +one | qa | 2024-05-10T00:01:00.000Z +three | prod | 2024-05-10T00:02:00.000Z +three | qa | 2024-05-10T00:02:00.000Z +three | staging | 2024-05-10T00:02:00.000Z +one | prod | 2024-05-10T00:03:00.000Z +three | qa | 2024-05-10T00:03:00.000Z +one | staging | 2024-05-10T00:03:00.000Z +; + +max_over_time_of_aggregate_metric_double +required_capability: metrics_command +required_capability: max_over_time +TS k8s-downsampled | STATS tx = sum(max_over_time(network.eth0.tx)) BY time_bucket = bucket(@timestamp, 10minute) | SORT time_bucket | LIMIT 10; +tx:double | time_bucket:datetime +6053.0 | 2024-05-09T23:30:00.000Z +6699.0 | 2024-05-09T23:40:00.000Z +5895.0 | 2024-05-09T23:50:00.000Z +; + +max_over_time_of_aggregate_metric_double_grouping +required_capability: metrics_command +required_capability: max_over_time +TS k8s-downsampled | STATS tx = sum(max_over_time(network.eth0.tx)) BY cluster, time_bucket = bucket(@timestamp, 10minute) | SORT time_bucket, cluster | LIMIT 10; + +tx:double | cluster:keyword | time_bucket:datetime +1601.0 | prod | 2024-05-09T23:30:00.000Z +2109.0 | qa | 2024-05-09T23:30:00.000Z +2343.0 | staging | 2024-05-09T23:30:00.000Z +1854.0 | prod | 2024-05-09T23:40:00.000Z +2975.0 | qa | 2024-05-09T23:40:00.000Z +1870.0 | staging | 2024-05-09T23:40:00.000Z +2377.0 | prod | 2024-05-09T23:50:00.000Z +1686.0 | qa | 2024-05-09T23:50:00.000Z +1832.0 | staging | 2024-05-09T23:50:00.000Z +; + +max_over_time_with_filtering +required_capability: metrics_command +required_capability: max_over_time +TS k8s | WHERE pod == "one" | STATS tx = sum(max_over_time(network.bytes_in)) BY cluster, time_bucket = bucket(@timestamp, 10minute) | SORT time_bucket, cluster | LIMIT 10; + +tx:long | cluster:keyword | time_bucket:datetime +970 | prod | 2024-05-10T00:00:00.000Z +842 | qa | 2024-05-10T00:00:00.000Z +753 | staging | 2024-05-10T00:00:00.000Z +990 | prod | 2024-05-10T00:10:00.000Z +1006 | qa | 2024-05-10T00:10:00.000Z +947 | staging | 2024-05-10T00:10:00.000Z +953 | prod | 2024-05-10T00:20:00.000Z +917 | qa | 2024-05-10T00:20:00.000Z +749 | staging | 2024-05-10T00:20:00.000Z +; + +max_over_time_older_than_10h +required_capability: metrics_command +required_capability: max_over_time +TS k8s-downsampled | WHERE cluster == "qa" AND @timestamp < now() - 10 day | STATS cost = avg(max_over_time(network.eth0.rx)) BY pod, time_bucket = bucket(@timestamp, 10minute) | SORT time_bucket, pod | LIMIT 5; + +cost:double | pod:keyword | time_bucket:datetime +655.0 | one | 2024-05-09T23:30:00.000Z +1.0 | three | 2024-05-09T23:30:00.000Z +461.0 | two | 2024-05-09T23:30:00.000Z +1049.0 | one | 2024-05-09T23:40:00.000Z +1237.0 | three | 2024-05-09T23:40:00.000Z +; + +eval_on_max_over_time +required_capability: metrics_command +required_capability: max_over_time +TS k8s | STATS max_bytes = avg(max_over_time(network.bytes_in)) BY cluster, time_bucket = bucket(@timestamp, 10minute) | EVAL kb_minus_offset = (max_bytes - 100) / 1000.0 | LIMIT 10 | SORT time_bucket, cluster ; + +max_bytes:double | cluster:keyword | time_bucket:datetime | kb_minus_offset:double +909.3333333333334 | prod | 2024-05-10T00:00:00.000Z | 0.8093333333333333 +908.6666666666666 | qa | 2024-05-10T00:00:00.000Z | 0.8086666666666666 +794.0 | staging | 2024-05-10T00:00:00.000Z | 0.694 +1005.0 | prod | 2024-05-10T00:10:00.000Z | 0.905 +980.0 | qa | 2024-05-10T00:10:00.000Z | 0.88 +917.6666666666666 | staging | 2024-05-10T00:10:00.000Z | 0.8176666666666667 +846.3333333333334 | prod | 2024-05-10T00:20:00.000Z | 0.7463333333333334 +941.6666666666666 | qa | 2024-05-10T00:20:00.000Z | 0.8416666666666667 +786.0 | staging | 2024-05-10T00:20:00.000Z | 0.686 +; + +max_over_time_multi_values +required_capability: metrics_command +required_capability: max_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | WHERE @timestamp < "2024-05-10T00:10:00.000Z" | STATS events = sum(max_over_time(events_received)) by pod, time_bucket = bucket(@timestamp, 1minute) | SORT events desc, time_bucket | LIMIT 10; + +events:long | pod:keyword | time_bucket:datetime +27 | two | 2024-05-10T00:08:00.000Z +27 | one | 2024-05-10T00:09:00.000Z +26 | one | 2024-05-10T00:08:00.000Z +24 | three | 2024-05-10T00:06:00.000Z +24 | three | 2024-05-10T00:09:00.000Z +21 | two | 2024-05-10T00:02:00.000Z +20 | two | 2024-05-10T00:09:00.000Z +18 | one | 2024-05-10T00:01:00.000Z +17 | one | 2024-05-10T00:05:00.000Z +14 | three | 2024-05-10T00:00:00.000Z +; + +max_over_time_null_values +required_capability: metrics_command +required_capability: max_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | WHERE @timestamp > "2024-05-10T00:10:00.000Z" and @timestamp < "2024-05-10T00:15:00.000Z" | STATS events = sum(max_over_time(events_received)) by pod, time_bucket = bucket(@timestamp, 1minute) | SORT events desc, time_bucket | LIMIT 10; + +events:long | pod:keyword | time_bucket:datetime +null | one | 2024-05-10T00:12:00.000Z +null | two | 2024-05-10T00:13:00.000Z +20 | two | 2024-05-10T00:14:00.000Z +18 | two | 2024-05-10T00:12:00.000Z +17 | one | 2024-05-10T00:13:00.000Z +16 | one | 2024-05-10T00:14:00.000Z +11 | one | 2024-05-10T00:10:00.000Z +9 | one | 2024-05-10T00:11:00.000Z +9 | three | 2024-05-10T00:13:00.000Z +7 | two | 2024-05-10T00:10:00.000Z +; + +max_over_time_null_values +required_capability: metrics_command +required_capability: max_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | WHERE @timestamp > "2024-05-10T00:10:00.000Z" and @timestamp < "2024-05-10T00:15:00.000Z" | STATS events = sum(max_over_time(events_received)) by pod, time_bucket = bucket(@timestamp, 1minute) | SORT events desc, time_bucket | LIMIT 10; + +events:long | pod:keyword | time_bucket:datetime +null | one | 2024-05-10T00:12:00.000Z +null | two | 2024-05-10T00:13:00.000Z +20 | two | 2024-05-10T00:14:00.000Z +18 | two | 2024-05-10T00:12:00.000Z +17 | one | 2024-05-10T00:13:00.000Z +16 | one | 2024-05-10T00:14:00.000Z +11 | one | 2024-05-10T00:10:00.000Z +9 | one | 2024-05-10T00:11:00.000Z +9 | three | 2024-05-10T00:13:00.000Z +7 | two | 2024-05-10T00:10:00.000Z +; + +max_over_time_all_value_types +required_capability: metrics_command +required_capability: max_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS events = sum(max_over_time(events_received)) by pod, time_bucket = bucket(@timestamp, 10minute) | SORT events desc, pod, time_bucket | LIMIT 10 ; + +events:long | pod:keyword | time_bucket:datetime +30 | one | 2024-05-10T00:10:00.000Z +30 | two | 2024-05-10T00:10:00.000Z +29 | one | 2024-05-10T00:00:00.000Z +29 | three | 2024-05-10T00:00:00.000Z +29 | two | 2024-05-10T00:00:00.000Z +28 | three | 2024-05-10T00:10:00.000Z +21 | three | 2024-05-10T00:20:00.000Z +21 | two | 2024-05-10T00:20:00.000Z +19 | one | 2024-05-10T00:20:00.000Z +; + +max_over_time_aggregate_metric_double_implicit_casting +required_capability: metrics_command +required_capability: max_over_time +required_capability: k8s_dataset_additional_fields +required_capability: aggregate_metric_double_implicit_casting_in_aggs +TS k8s* | STATS bytes = sum(max_over_time(network.eth0.rx)) by time_bucket = bucket(@timestamp, 10minute) | SORT bytes desc, time_bucket | LIMIT 10 ; + +bytes:double | time_bucket:datetime +9058.0 | 2024-05-10T00:20:00.000Z +8070.0 | 2024-05-10T00:10:00.000Z +7088.0 | 2024-05-09T23:50:00.000Z +6380.0 | 2024-05-09T23:30:00.000Z +6095.0 | 2024-05-09T23:40:00.000Z +4290.0 | 2024-05-10T00:00:00.000Z +; + +max_over_time_aggregate_metric_double_implicit_casting_grouping +required_capability: metrics_command +required_capability: max_over_time +required_capability: k8s_dataset_additional_fields +required_capability: aggregate_metric_double_implicit_casting_in_aggs +TS k8s* | STATS bytes = sum(max_over_time(network.eth0.rx)) by pod, time_bucket = bucket(@timestamp, 10minute) | SORT bytes desc, pod, time_bucket | LIMIT 10 ; + +bytes:double | pod:keyword | time_bucket:datetime +3156.0 | one | 2024-05-10T00:20:00.000Z +3028.0 | three | 2024-05-10T00:20:00.000Z +2874.0 | two | 2024-05-10T00:20:00.000Z +2825.0 | one | 2024-05-10T00:10:00.000Z +2810.0 | three | 2024-05-09T23:40:00.000Z +2710.0 | three | 2024-05-10T00:10:00.000Z +2653.0 | three | 2024-05-09T23:50:00.000Z +2570.0 | one | 2024-05-09T23:30:00.000Z +2535.0 | two | 2024-05-10T00:10:00.000Z +2478.0 | one | 2024-05-09T23:50:00.000Z +; + min_over_time required_capability: metrics_command required_capability: min_over_time @@ -220,6 +722,483 @@ cost:double | cluster:keyword | time_bucket:datetime 16.875 | qa | 2024-05-10T00:20:00.000Z ; +min_over_time_of_double_no_grouping +required_capability: metrics_command +required_capability: min_over_time +TS k8s | STATS cost=sum(min_over_time(network.cost)) BY time_bucket = bucket(@timestamp,1minute) +| SORT cost DESC, time_bucket DESC | LIMIT 10; + +cost:double | time_bucket:datetime +53.625 | 2024-05-10T00:09:00.000Z +47.875 | 2024-05-10T00:08:00.000Z +45.0 | 2024-05-10T00:22:00.000Z +40.375 | 2024-05-10T00:15:00.000Z +36.0 | 2024-05-10T00:06:00.000Z +35.75 | 2024-05-10T00:19:00.000Z +35.125 | 2024-05-10T00:17:00.000Z +34.0 | 2024-05-10T00:13:00.000Z +33.875 | 2024-05-10T00:12:00.000Z +33.75 | 2024-05-10T00:11:00.000Z +; + +min_over_time_of_ip +required_capability: metrics_command +required_capability: min_over_time +TS k8s | STATS ip = max(min_over_time(client.ip)) BY time_bucket = bucket(@timestamp,1minute) | SORT time_bucket | LIMIT 10; + +ip:ip | time_bucket:datetime +10.10.20.34 | 2024-05-10T00:00:00.000Z +10.10.20.33 | 2024-05-10T00:01:00.000Z +10.10.20.35 | 2024-05-10T00:02:00.000Z +10.10.20.35 | 2024-05-10T00:03:00.000Z +10.10.20.34 | 2024-05-10T00:04:00.000Z +10.10.20.35 | 2024-05-10T00:05:00.000Z +10.10.20.35 | 2024-05-10T00:06:00.000Z +10.10.20.33 | 2024-05-10T00:07:00.000Z +10.10.20.34 | 2024-05-10T00:08:00.000Z +10.10.20.35 | 2024-05-10T00:09:00.000Z +; + +min_over_time_of_ip_grouping +required_capability: metrics_command +required_capability: min_over_time +TS k8s | STATS ip = min(min_over_time(client.ip)) BY cluster, time_bucket = bucket(@timestamp,1minute) | SORT time_bucket, cluster | LIMIT 10; + +ip:ip | cluster:keyword | time_bucket:datetime +10.10.20.30 | prod | 2024-05-10T00:00:00.000Z +10.10.20.34 | staging | 2024-05-10T00:00:00.000Z +10.10.20.31 | prod | 2024-05-10T00:01:00.000Z +10.10.20.31 | qa | 2024-05-10T00:01:00.000Z +10.10.20.32 | prod | 2024-05-10T00:02:00.000Z +10.10.20.30 | qa | 2024-05-10T00:02:00.000Z +10.10.20.30 | staging | 2024-05-10T00:02:00.000Z +10.10.20.33 | prod | 2024-05-10T00:03:00.000Z +10.10.20.32 | qa | 2024-05-10T00:03:00.000Z +10.10.20.32 | staging | 2024-05-10T00:03:00.000Z +; + +min_over_time_of_long +required_capability: metrics_command +required_capability: min_over_time +TS k8s | STATS bytes_in = sum(min_over_time(network.bytes_in)) BY time_bucket = bucket(@timestamp,1minute) | SORT bytes_in DESC, time_bucket | LIMIT 10; + +bytes_in:long | time_bucket:datetime +4903 | 2024-05-10T00:20:00.000Z +3734 | 2024-05-10T00:18:00.000Z +3655 | 2024-05-10T00:14:00.000Z +3519 | 2024-05-10T00:15:00.000Z +3439 | 2024-05-10T00:02:00.000Z +2937 | 2024-05-10T00:08:00.000Z +2909 | 2024-05-10T00:03:00.000Z +2873 | 2024-05-10T00:13:00.000Z +2584 | 2024-05-10T00:17:00.000Z +2430 | 2024-05-10T00:19:00.000Z +; + +min_over_time_of_long_grouping +required_capability: metrics_command +required_capability: min_over_time +TS k8s | STATS bytes_in = sum(min_over_time(network.bytes_in)) BY cluster, time_bucket = bucket(@timestamp,1minute) | SORT bytes_in DESC, time_bucket | LIMIT 10; + +bytes_in:long | cluster:keyword | time_bucket:datetime +2405 | prod | 2024-05-10T00:20:00.000Z +2040 | prod | 2024-05-10T00:18:00.000Z +1908 | qa | 2024-05-10T00:20:00.000Z +1664 | prod | 2024-05-10T00:13:00.000Z +1560 | staging | 2024-05-10T00:12:00.000Z +1553 | prod | 2024-05-10T00:19:00.000Z +1509 | staging | 2024-05-10T00:14:00.000Z +1506 | staging | 2024-05-10T00:08:00.000Z +1498 | qa | 2024-05-10T00:02:00.000Z +1409 | staging | 2024-05-10T00:18:00.000Z +; + +min_over_time_of_boolean +required_capability: metrics_command +required_capability: min_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS eth0_up = max(min_over_time(network.eth0.up)) BY time_bucket = bucket(@timestamp,10minute) | SORT time_bucket | LIMIT 10; + +eth0_up:boolean | time_bucket:datetime +false | 2024-05-10T00:00:00.000Z +true | 2024-05-10T00:10:00.000Z +true | 2024-05-10T00:20:00.000Z +; + +min_over_time_of_boolean_grouping +required_capability: metrics_command +required_capability: min_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS eth0_up = min(min_over_time(network.eth0.up)) BY cluster, time_bucket = bucket(@timestamp,1minute) | SORT time_bucket, cluster | LIMIT 10; + +eth0_up:boolean | cluster:keyword | time_bucket:datetime +false | prod | 2024-05-10T00:00:00.000Z +true | staging | 2024-05-10T00:00:00.000Z +false | prod | 2024-05-10T00:01:00.000Z +false | qa | 2024-05-10T00:01:00.000Z +false | prod | 2024-05-10T00:02:00.000Z +true | qa | 2024-05-10T00:02:00.000Z +false | staging | 2024-05-10T00:02:00.000Z +false | prod | 2024-05-10T00:03:00.000Z +true | qa | 2024-05-10T00:03:00.000Z +false | staging | 2024-05-10T00:03:00.000Z +; + +min_over_time_of_date_nanos +required_capability: metrics_command +required_capability: min_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS last_up = max(min_over_time(network.eth0.last_up)) BY time_bucket = bucket(@timestamp,1minute) | SORT time_bucket | LIMIT 10; + +last_up:date_nanos | time_bucket:datetime +2024-05-03T15:37:33.324440296Z | 2024-05-10T00:00:00.000Z +2024-04-09T03:20:29.012174065Z | 2024-05-10T00:01:00.000Z +2024-05-02T13:22:35.021783722Z | 2024-05-10T00:02:00.000Z +2024-04-28T06:40:53.255612616Z | 2024-05-10T00:03:00.000Z +2024-05-09T23:18:49.214537497Z | 2024-05-10T00:04:00.000Z +2024-04-25T19:33:06.187780912Z | 2024-05-10T00:05:00.000Z +2024-04-29T07:31:14.888937625Z | 2024-05-10T00:06:00.000Z +2024-04-19T06:08:33.072053267Z | 2024-05-10T00:07:00.000Z +2024-05-08T06:59:00.224636703Z | 2024-05-10T00:08:00.000Z +2024-05-08T23:33:34.42759108Z | 2024-05-10T00:09:00.000Z +; + +min_over_time_of_date_nanos_grouping +required_capability: metrics_command +required_capability: min_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS last_up = max(min_over_time(network.eth0.last_up)) BY cluster, time_bucket = bucket(@timestamp,1minute) | SORT time_bucket, cluster | LIMIT 10; + +last_up:date_nanos | cluster:keyword | time_bucket:datetime +2024-03-20T09:48:57.054739676Z | prod | 2024-05-10T00:00:00.000Z +2024-05-03T15:37:33.324440296Z | staging | 2024-05-10T00:00:00.000Z +2024-04-09T03:20:29.012174065Z | prod | 2024-05-10T00:01:00.000Z +2024-03-31T23:14:25.575848186Z | qa | 2024-05-10T00:01:00.000Z +2024-03-21T19:14:43.937075439Z | prod | 2024-05-10T00:02:00.000Z +2024-05-02T13:22:35.021783722Z | qa | 2024-05-10T00:02:00.000Z +2024-05-02T02:15:40.627302753Z | staging | 2024-05-10T00:02:00.000Z +2024-04-04T01:13:26.805245198Z | prod | 2024-05-10T00:03:00.000Z +2024-04-28T06:40:53.255612616Z | qa | 2024-05-10T00:03:00.000Z +2024-04-09T11:53:40.737436413Z | staging | 2024-05-10T00:03:00.000Z +; + +min_over_time_of_version +required_capability: metrics_command +required_capability: min_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS version = max(min_over_time(network.eth0.firmware_version)) BY time_bucket = bucket(@timestamp,1minute) | SORT time_bucket | LIMIT 10; + +version:version | time_bucket:datetime +13.10.4 | 2024-05-10T00:00:00.000Z +13.10.4 | 2024-05-10T00:01:00.000Z +13.10.4 | 2024-05-10T00:02:00.000Z +15.6.9 | 2024-05-10T00:03:00.000Z +10.3.2 | 2024-05-10T00:04:00.000Z +13.10.4 | 2024-05-10T00:05:00.000Z +13.10.4 | 2024-05-10T00:06:00.000Z +10.4.2 | 2024-05-10T00:07:00.000Z +15.6.9 | 2024-05-10T00:08:00.000Z +15.6.9 | 2024-05-10T00:09:00.000Z +; + +min_over_time_of_version_grouping +required_capability: metrics_command +required_capability: min_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS version = max(min_over_time(network.eth0.firmware_version)) BY cluster, time_bucket = bucket(@timestamp,1minute) | SORT time_bucket, cluster | LIMIT 10; + +version:version | cluster:keyword | time_bucket:datetime +13.10.4 | prod | 2024-05-10T00:00:00.000Z +7.8.4 | staging | 2024-05-10T00:00:00.000Z +13.10.4 | prod | 2024-05-10T00:01:00.000Z +10.3.2 | qa | 2024-05-10T00:01:00.000Z +13.10.4 | prod | 2024-05-10T00:02:00.000Z +1.7.2 | qa | 2024-05-10T00:02:00.000Z +7.8.4 | staging | 2024-05-10T00:02:00.000Z +9.10.4 | prod | 2024-05-10T00:03:00.000Z +1.7.2 | qa | 2024-05-10T00:03:00.000Z +15.6.9 | staging | 2024-05-10T00:03:00.000Z +; + +min_over_time_of_integer +required_capability: metrics_command +required_capability: min_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS clients = avg(min_over_time(network.eth0.currently_connected_clients)) BY time_bucket = bucket(@timestamp,1minute) | SORT time_bucket | LIMIT 10; + +clients:double | time_bucket:datetime +553.3333333333334 | 2024-05-10T00:00:00.000Z +418.25 | 2024-05-10T00:01:00.000Z +467.5 | 2024-05-10T00:02:00.000Z +454.2 | 2024-05-10T00:03:00.000Z +279.3333333333333 | 2024-05-10T00:04:00.000Z +590.6 | 2024-05-10T00:05:00.000Z +578.6666666666666 | 2024-05-10T00:06:00.000Z +454.6666666666667 | 2024-05-10T00:07:00.000Z +512.25 | 2024-05-10T00:08:00.000Z +244.77777777777777 | 2024-05-10T00:09:00.000Z +; + +min_over_time_of_integer_grouping +required_capability: metrics_command +required_capability: min_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS clients = avg(min_over_time(network.eth0.currently_connected_clients)) BY cluster, time_bucket = bucket(@timestamp,1minute) | SORT time_bucket, cluster | LIMIT 10; + +clients:double | cluster:keyword | time_bucket:datetime +429.0 | prod | 2024-05-10T00:00:00.000Z +615.5 | staging | 2024-05-10T00:00:00.000Z +396.5 | prod | 2024-05-10T00:01:00.000Z +440.0 | qa | 2024-05-10T00:01:00.000Z +632.5 | prod | 2024-05-10T00:02:00.000Z +565.0 | qa | 2024-05-10T00:02:00.000Z +205.0 | staging | 2024-05-10T00:02:00.000Z +742.0 | prod | 2024-05-10T00:03:00.000Z +407.5 | qa | 2024-05-10T00:03:00.000Z +357.0 | staging | 2024-05-10T00:03:00.000Z +; + +min_over_time_of_text +required_capability: metrics_command +required_capability: min_over_time +TS k8s | STATS event_log = max(min_over_time(event_log)) BY time_bucket = bucket(@timestamp,1minute) | SORT event_log, time_bucket | LIMIT 10; + +event_log:keyword | time_bucket:datetime +interdum ridiculus tellus risus iaculis faucibus. Eu cursus ante et nullam litora nulla habitasse nisl dignissim quisque molestie pretium, a | 2024-05-10T00:00:00.000Z +lacus sociosqu, lacinia suspendisse quisque tristique cursus phasellus. Parturient aliquam cubilia libero ultrices a facilisi fermentum tempor blandit per, bibendum fringilla platea imperdiet phasellus nam euismod justo curae. Leo | 2024-05-10T00:01:00.000Z +libero ultrices a facilisi fermentum tempor blandit | 2024-05-10T00:03:00.000Z +nisl | 2024-05-10T00:09:00.000Z +per cras sed mauris cubilia, | 2024-05-10T00:07:00.000Z +platea morbi. Maecenas etiam venenatis augue orci | 2024-05-10T00:10:00.000Z +primis habitant nullam porta pharetra, purus eleifend dictumst semper morbi volutpat tristique erat. Metus urna vestibulum ornare sodales torquent pulvinar leo | 2024-05-10T00:19:00.000Z +quisque molestie pretium, a sapien | 2024-05-10T00:17:00.000Z +quisque tristique cursus phasellus. Parturient aliquam cubilia libero ultrices a facilisi fermentum tempor blandit per, bibendum fringilla | 2024-05-10T00:04:00.000Z +semper morbi volutpat | 2024-05-10T00:16:00.000Z +; + +min_over_time_of_text_grouping +required_capability: metrics_command +required_capability: min_over_time +TS k8s | STATS event_log = max(min_over_time(event_log)) BY cluster, time_bucket = bucket(@timestamp,1minute) | SORT event_log, time_bucket | LIMIT 10; + +event_log:keyword | cluster:keyword | time_bucket:datetime +Aenean himenaeos urna | prod | 2024-05-10T00:03:00.000Z +a et turpis, praesent fermentum auctor massa at tortor dis. Pulvinar id quam enim lobortis pellentesque neque facilisis dapibus, velit interdum mattis magna iaculis | qa | 2024-05-10T00:04:00.000Z +at nibh, nisl a lobortis lacus ultrices primis, vulputate quis volutpat hac tristique mattis. Hendrerit integer mattis venenatis nibh ad nascetur posuere et, viverra tincidunt eu | qa | 2024-05-10T00:10:00.000Z +bibendum lacus lacinia | qa | 2024-05-10T00:21:00.000Z +bibendum netus posuere, sodales aenean mauris ante orci curabitur | prod | 2024-05-10T00:14:00.000Z +condimentum lacinia elementum vivamus, sociis erat lectus torquent luctus pharetra, nunc cubilia imperdiet | qa | 2024-05-10T00:13:00.000Z +cursus phasellus. Parturient aliquam cubilia libero ultrices a facilisi fermentum tempor blandit per, bibendum fringilla platea imperdiet phasellus nam euismod | qa | 2024-05-10T00:11:00.000Z +dictumst tristique condimentum gravida proin facilisi at praesent. Diam primis euismod fusce dapibus condimentum vulputate orci himenaeos, enim luctus viverra vitae sollicitudin ullamcorper maecenas | qa | 2024-05-10T00:12:00.000Z +dignissim libero ultrices posuere nam facilisis parturient, luctus | prod | 2024-05-10T00:01:00.000Z +erat. Placerat mi litora fringilla tellus pretium aliquet ut ridiculus magnis magna, interdum dictumst lacinia hendrerit gravida torquent bibendum netus posuere, sodales aenean mauris | qa | 2024-05-10T00:03:00.000Z +; + +min_over_time_of_keyword +required_capability: metrics_command +required_capability: min_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS pod = min(min_over_time(pod)) BY time_bucket = bucket(@timestamp,1minute) | SORT time_bucket | LIMIT 10; + +pod:keyword | time_bucket:datetime +three | 2024-05-10T00:00:00.000Z +one | 2024-05-10T00:01:00.000Z +three | 2024-05-10T00:02:00.000Z +one | 2024-05-10T00:03:00.000Z +one | 2024-05-10T00:04:00.000Z +one | 2024-05-10T00:05:00.000Z +one | 2024-05-10T00:06:00.000Z +one | 2024-05-10T00:07:00.000Z +one | 2024-05-10T00:08:00.000Z +one | 2024-05-10T00:09:00.000Z +; + +min_over_time_of_keyword_grouping +required_capability: metrics_command +required_capability: min_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS pod = min(min_over_time(pod)) BY cluster, time_bucket = bucket(@timestamp,1minute) | SORT time_bucket, cluster | LIMIT 10; + +pod:keyword | cluster:keyword | time_bucket:datetime +three | prod | 2024-05-10T00:00:00.000Z +three | staging | 2024-05-10T00:00:00.000Z +one | prod | 2024-05-10T00:01:00.000Z +one | qa | 2024-05-10T00:01:00.000Z +three | prod | 2024-05-10T00:02:00.000Z +three | qa | 2024-05-10T00:02:00.000Z +three | staging | 2024-05-10T00:02:00.000Z +one | prod | 2024-05-10T00:03:00.000Z +three | qa | 2024-05-10T00:03:00.000Z +one | staging | 2024-05-10T00:03:00.000Z +; + +min_over_time_of_aggregate_metric_double +required_capability: metrics_command +required_capability: min_over_time +TS k8s-downsampled | STATS tx = sum(min_over_time(network.eth0.tx)) BY time_bucket = bucket(@timestamp, 10minute) | SORT time_bucket | LIMIT 10; + +tx:double | time_bucket:datetime +3087.0 | 2024-05-09T23:30:00.000Z +2815.0 | 2024-05-09T23:40:00.000Z +3085.0 | 2024-05-09T23:50:00.000Z +; + +min_over_time_of_aggregate_metric_double_grouping +required_capability: metrics_command +required_capability: min_over_time +TS k8s-downsampled | STATS tx = sum(min_over_time(network.eth0.tx)) BY cluster, time_bucket = bucket(@timestamp, 10minute) | SORT time_bucket, cluster | LIMIT 10; + +tx:double | cluster:keyword | time_bucket:datetime +786.0 | prod | 2024-05-09T23:30:00.000Z +1255.0 | qa | 2024-05-09T23:30:00.000Z +1046.0 | staging | 2024-05-09T23:30:00.000Z +870.0 | prod | 2024-05-09T23:40:00.000Z +938.0 | qa | 2024-05-09T23:40:00.000Z +1007.0 | staging | 2024-05-09T23:40:00.000Z +1137.0 | prod | 2024-05-09T23:50:00.000Z +786.0 | qa | 2024-05-09T23:50:00.000Z +1162.0 | staging | 2024-05-09T23:50:00.000Z +; + +min_over_time_with_filtering +required_capability: metrics_command +required_capability: min_over_time +TS k8s | WHERE pod != "three" | STATS tx = sum(min_over_time(network.bytes_in)) BY cluster, time_bucket = bucket(@timestamp, 10minute) | SORT time_bucket, cluster | LIMIT 10; + +tx:long | cluster:keyword | time_bucket:datetime +181 | prod | 2024-05-10T00:00:00.000Z +4 | qa | 2024-05-10T00:00:00.000Z +32 | staging | 2024-05-10T00:00:00.000Z +4 | prod | 2024-05-10T00:10:00.000Z +6 | qa | 2024-05-10T00:10:00.000Z +7 | staging | 2024-05-10T00:10:00.000Z +694 | prod | 2024-05-10T00:20:00.000Z +1110 | qa | 2024-05-10T00:20:00.000Z +241 | staging | 2024-05-10T00:20:00.000Z +; + +min_over_time_older_than_10h +required_capability: metrics_command +required_capability: min_over_time +TS k8s-downsampled | WHERE cluster == "qa" AND @timestamp < now() - 10 day | STATS cost = avg(min_over_time(network.eth0.rx)) BY pod, time_bucket = bucket(@timestamp, 10minute) | SORT time_bucket, pod | LIMIT 5; + +cost:double | pod:keyword | time_bucket:datetime +329.0 | one | 2024-05-09T23:30:00.000Z +1.0 | three | 2024-05-09T23:30:00.000Z +382.0 | two | 2024-05-09T23:30:00.000Z +684.0 | one | 2024-05-09T23:40:00.000Z +690.0 | three | 2024-05-09T23:40:00.000Z +; + +eval_on_min_over_time +required_capability: metrics_command +required_capability: min_over_time +TS k8s | STATS min_bytes = sum(min_over_time(network.bytes_in)) BY pod, time_bucket = bucket(@timestamp, 10minute) | EVAL kb = to_double(min_bytes) / 1000.0 | LIMIT 10 | SORT time_bucket, pod; + +min_bytes:long | pod:keyword | time_bucket:datetime | kb:double +35 | one | 2024-05-10T00:00:00.000Z | 0.035 +293 | three | 2024-05-10T00:00:00.000Z | 0.293 +182 | two | 2024-05-10T00:00:00.000Z | 0.182 +6 | one | 2024-05-10T00:10:00.000Z | 0.006 +200 | three | 2024-05-10T00:10:00.000Z | 0.2 +11 | two | 2024-05-10T00:10:00.000Z | 0.011 +451 | one | 2024-05-10T00:20:00.000Z | 0.451 +1747 | three | 2024-05-10T00:20:00.000Z | 1.747 +1594 | two | 2024-05-10T00:20:00.000Z | 1.594 +; + +min_over_time_multi_values +required_capability: metrics_command +required_capability: min_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | WHERE @timestamp < "2024-05-10T00:10:00.000Z" | STATS events = sum(min_over_time(events_received)) by pod, time_bucket = bucket(@timestamp, 1minute) | SORT events, time_bucket | LIMIT 10; + +events:long | pod:keyword | time_bucket:datetime +0 | two | 2024-05-10T00:07:00.000Z +1 | two | 2024-05-10T00:05:00.000Z +1 | one | 2024-05-10T00:07:00.000Z +2 | two | 2024-05-10T00:04:00.000Z +2 | one | 2024-05-10T00:05:00.000Z +3 | one | 2024-05-10T00:03:00.000Z +3 | one | 2024-05-10T00:04:00.000Z +3 | two | 2024-05-10T00:06:00.000Z +3 | one | 2024-05-10T00:09:00.000Z +4 | one | 2024-05-10T00:06:00.000Z +; + +min_over_time_null_values +required_capability: metrics_command +required_capability: min_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | WHERE @timestamp > "2024-05-10T00:10:00.000Z" and @timestamp < "2024-05-10T00:15:00.000Z" | STATS events = sum(min_over_time(events_received)) by pod, time_bucket = bucket(@timestamp, 1minute) | SORT events NULLS FIRST, time_bucket | LIMIT 10; + +events:long | pod:keyword | time_bucket:datetime +null | one | 2024-05-10T00:12:00.000Z +null | two | 2024-05-10T00:13:00.000Z +2 | three | 2024-05-10T00:11:00.000Z +3 | three | 2024-05-10T00:13:00.000Z +3 | three | 2024-05-10T00:14:00.000Z +5 | two | 2024-05-10T00:11:00.000Z +7 | two | 2024-05-10T00:10:00.000Z +7 | three | 2024-05-10T00:12:00.000Z +9 | one | 2024-05-10T00:11:00.000Z +11 | one | 2024-05-10T00:10:00.000Z +; + +min_over_time_all_value_types +required_capability: metrics_command +required_capability: min_over_time +required_capability: k8s_dataset_additional_fields +TS k8s | STATS events = sum(min_over_time(events_received)) by pod, time_bucket = bucket(@timestamp, 10minute) | SORT events NULLS FIRST, pod, time_bucket | LIMIT 10 ; + +events:long | pod:keyword | time_bucket:datetime +0 | one | 2024-05-10T00:00:00.000Z +2 | three | 2024-05-10T00:00:00.000Z +2 | two | 2024-05-10T00:00:00.000Z +3 | two | 2024-05-10T00:20:00.000Z +4 | three | 2024-05-10T00:10:00.000Z +4 | two | 2024-05-10T00:10:00.000Z +5 | one | 2024-05-10T00:10:00.000Z +13 | three | 2024-05-10T00:20:00.000Z +15 | one | 2024-05-10T00:20:00.000Z +; + +min_over_time_aggregate_metric_double_implicit_casting +required_capability: metrics_command +required_capability: min_over_time +required_capability: k8s_dataset_additional_fields +required_capability: aggregate_metric_double_implicit_casting_in_aggs +TS k8s* | STATS bytes = sum(min_over_time(network.eth0.rx)) by time_bucket = bucket(@timestamp, 10minute) | SORT bytes, time_bucket | LIMIT 10 ; + +bytes:double | time_bucket:datetime +535.0 | 2024-05-10T00:00:00.000Z +2775.0 | 2024-05-09T23:30:00.000Z +3076.0 | 2024-05-09T23:40:00.000Z +3111.0 | 2024-05-09T23:50:00.000Z +4552.0 | 2024-05-10T00:10:00.000Z +8465.0 | 2024-05-10T00:20:00.000Z +; + +min_over_time_aggregate_metric_double_implicit_casting_grouping +required_capability: metrics_command +required_capability: min_over_time +required_capability: k8s_dataset_additional_fields +required_capability: aggregate_metric_double_implicit_casting_in_aggs +TS k8s* | STATS bytes = sum(min_over_time(network.eth0.rx)) by pod, time_bucket = bucket(@timestamp, 10minute) | SORT bytes, pod, time_bucket | LIMIT 10 ; + +bytes:double | pod:keyword | time_bucket:datetime +114.0 | two | 2024-05-10T00:00:00.000Z +196.0 | three | 2024-05-10T00:00:00.000Z +225.0 | one | 2024-05-10T00:00:00.000Z +742.0 | three | 2024-05-09T23:30:00.000Z +781.0 | two | 2024-05-09T23:40:00.000Z +947.0 | one | 2024-05-09T23:30:00.000Z +974.0 | three | 2024-05-09T23:50:00.000Z +1035.0 | two | 2024-05-09T23:50:00.000Z +1086.0 | two | 2024-05-09T23:30:00.000Z +1102.0 | one | 2024-05-09T23:50:00.000Z +; + max_of_avg_over_time required_capability: metrics_command required_capability: avg_over_time diff --git a/x-pack/plugin/esql/qa/testFixtures/src/main/resources/lookup-join.csv-spec b/x-pack/plugin/esql/qa/testFixtures/src/main/resources/lookup-join.csv-spec index c71bf34cafd1a..77f678b28acc2 100644 --- a/x-pack/plugin/esql/qa/testFixtures/src/main/resources/lookup-join.csv-spec +++ b/x-pack/plugin/esql/qa/testFixtures/src/main/resources/lookup-join.csv-spec @@ -4726,7 +4726,7 @@ FROM k8s | RENAME network.bytes_in AS language_code | WHERE language_code < 10 | LOOKUP JOIN languages_lookup ON language_code -| DROP network*, event +| DROP network*, event* | SORT language_code, @timestamp ; diff --git a/x-pack/plugin/esql/src/main/java/org/elasticsearch/xpack/esql/action/EsqlCapabilities.java b/x-pack/plugin/esql/src/main/java/org/elasticsearch/xpack/esql/action/EsqlCapabilities.java index 1641afd6307ab..408486a75c690 100644 --- a/x-pack/plugin/esql/src/main/java/org/elasticsearch/xpack/esql/action/EsqlCapabilities.java +++ b/x-pack/plugin/esql/src/main/java/org/elasticsearch/xpack/esql/action/EsqlCapabilities.java @@ -1148,6 +1148,11 @@ public enum Cap { */ COUNT_DISTINCT_OVER_TIME(Build.current().isSnapshot()), + /** + * Extra field types in the k8s.csv dataset + */ + K8S_DATASET_ADDITIONAL_FIELDS(Build.current().isSnapshot()), + /** * Resolve groupings before resolving references to groupings in the aggregations. */