Response codes
{ "index": "logstash-*", "query": { "query_string": { "analyze_wildcard": true, "query": "type:apache_log" } }, "filter": [] }
{ "aggs": [ { "id": "1", "params": {}, "schema": "metric", "type": "count" }, { "id": "2", "params": { "extended_bounds": {}, "field": "@timestamp", "interval": "auto", "min_doc_count": 1 }, "schema": "segment", "type": "date_histogram" }, { "id": "3", "params": { "field": "response", "order": "desc", "orderBy": "1", "size": 10 }, "schema": "group", "type": "terms" } ], "listeners": {}, "params": { "addLegend": true, "addTooltip": true, "defaultYExtents": false, "mode": "stacked", "shareYAxis": true }, "type": "histogram" }
agents
{ "index": "logstash-*", "query": { "query_string": { "query": "type:apache_log", "analyze_wildcard": true } }, "filter": [] }
{ "type": "pie", "params": { "shareYAxis": true, "addTooltip": true, "addLegend": true, "isDonut": false }, "aggs": [ { "id": "1", "type": "count", "schema": "metric", "params": {} }, { "id": "2", "type": "terms", "schema": "segment", "params": { "field": "agent.raw", "size": 10, "order": "desc", "orderBy": "1" } } ], "listeners": {} }
country
{ "index": "logstash-*", "query": { "query_string": { "analyze_wildcard": true, "query": "type:apache_log" } }, "filter": [] }
{ "type": "pie", "params": { "addLegend": true, "addTooltip": true, "isDonut": false, "shareYAxis": true }, "aggs": [ { "id": "1", "type": "count", "schema": "metric", "params": {} }, { "id": "2", "type": "terms", "schema": "segment", "params": { "field": "geoip.country_name.raw", "size": 10, "order": "desc", "orderBy": "1" } } ], "listeners": {} }
vhost
{ "index": "logstash-*", "query": { "query_string": { "query": "type:apache_log", "analyze_wildcard": true } }, "filter": [] }
{ "type": "pie", "params": { "shareYAxis": true, "addTooltip": true, "addLegend": true, "isDonut": false }, "aggs": [ { "id": "1", "type": "count", "schema": "metric", "params": {} }, { "id": "2", "type": "terms", "schema": "segment", "params": { "field": "vhost.raw", "size": 20, "order": "desc", "orderBy": "1" } } ], "listeners": {} }
ISPs
{ "index": "logstash-*", "query": { "query_string": { "query": "type:apache_log", "analyze_wildcard": true } }, "filter": [] }
{ "type": "pie", "params": { "shareYAxis": true, "addTooltip": true, "addLegend": true, "isDonut": false }, "aggs": [ { "id": "1", "type": "count", "schema": "metric", "params": {} }, { "id": "2", "type": "terms", "schema": "segment", "params": { "field": "geoip.asn.raw", "size": 10, "order": "desc", "orderBy": "1" } } ], "listeners": {} }
Dashboard
{ "filter": [ { "query": { "query_string": { "analyze_wildcard": true, "query": "*" } } } ] }
[ { "col": 1, "id": "Response-codes", "row": 1, "size_x": 12, "size_y": 3, "type": "visualization" }, { "col": 1, "id": "agents", "row": 4, "size_x": 3, "size_y": 2, "type": "visualization" }, { "col": 4, "id": "country", "row": 4, "size_x": 3, "size_y": 2, "type": "visualization" }, { "col": 7, "id": "vhost", "row": 4, "size_x": 3, "size_y": 2, "type": "visualization" }, { "id": "ISPs", "type": "visualization", "size_x": 3, "size_y": 2, "col": 10, "row": 4 } ]