diff options
Diffstat (limited to 'testSchemaFiles/security_event_hits_log.json')
| -rw-r--r-- | testSchemaFiles/security_event_hits_log.json | 109 |
1 files changed, 109 insertions, 0 deletions
diff --git a/testSchemaFiles/security_event_hits_log.json b/testSchemaFiles/security_event_hits_log.json new file mode 100644 index 0000000..d8a6b89 --- /dev/null +++ b/testSchemaFiles/security_event_hits_log.json @@ -0,0 +1,109 @@ +{ + "type": "record", + "name": "security_event_hits_log", + "namespace": "druid", + "doc": { + "partition_key": "__time", + "functions": { + "$ref": "public_schema_info.json#/functions" + }, + "schema_query": { + "references": { + "$ref": "public_schema_info.json#/schema_query/references" + } + } + }, + "fields": [ + { + "name": "__time", + "label": "Time", + "type": "string", + "doc": { + "constraints": { + "type": "timestamp" + }, + "visibility": "enabled" + } + }, + { + "name": "isp", + "label": "ISP", + "type": "string", + "doc": { + "visibility": "disabled" + } + }, + { + "name": "entrance_id", + "label": "Entrance ID", + "type": "long", + "doc": { + "visibility": "disabled" + } + }, + { + "name": "policy_id", + "label": "Policy ID", + "type": "long", + "doc": { + "constraints": { + "operator_functions": "=,in" + }, + "visibility": "enabled" + } + }, + { + "name": "action", + "label": "Action", + "type": "long", + "doc": { + "constraints": { + "operator_functions": "=,in" + }, + "data": [ + { + "code": "1", + "value": "Monitor" + }, + { + "code": "2", + "value": "Intercept" + }, + { + "code": "16", + "value": "Deny" + }, + { + "code": "128", + "value": "Allow" + } + ], + "visibility": "enabled" + } + }, + { + "name": "hits", + "label": "Hits", + "doc": { + "visibility": "enabled" + }, + "type": "long" + }, + { + "name": "c2s_byte_num", + "label": "Bytes Sent", + "doc": { + "visibility": "enabled" + }, + "type": "long" + }, + { + "name": "s2c_byte_num", + "label": "Bytes Received", + "doc": { + "visibility": "enabled" + }, + "type": "long" + } + ] +}
\ No newline at end of file |
