{"action":"created","comment":{"url":"https://api.github.com/repos/elastic/beats/pulls/comments/149532474","pull_request_review_id":74941927,"id":149532474,"diff_hunk":"@@ -0,0 +1,301 @@\n+- name: log\n+  type: group\n+  description: >\n+    Contains fields from the Elasticsearch standard logs.\n+  fields:\n+    - name: component\n+      description: >\n+        The component within Elasticsearch that generated this event.\n+    - name: reason\n+      description: >\n+        Extra reason or details for a particular event.\n+    - name: exception\n+      type: text\n+      description: >\n+        An exception trace for this event.\n+    - name: allocation_info\n+      type: text\n+      description: >\n+        Detailed cluster allocation information.\n+    - name: cluster\n+      type: group\n+      description: >\n+        Contains fields related to an Elasticsearch cluster.\n+      fields:\n+        - name: discovery_type\n+          description: >\n+            The discovery method this cluster is using.\n+        - name: license_id\n+          description: >\n+            The license ID for this cluster.\n+        - name: license_type\n+          description: >\n+            The type of license used on this cluster (i.e., trial, platinum, etc.)\n+        - name: license_status\n+          description: >\n+            The license status (i.e., validity).\n+        - name: action\n+          description: >\n+            A cluster-level action.\n+        - name: action_details\n+          type: text\n+          description: >\n+            A cluster-level action details.\n+        - name: state\n+          type: group\n+          description: >\n+            Contains fields related to the cluster state.\n+          fields:\n+            - name: version\n+              type: long\n+              description: >\n+                The cluster state version.\n+            - name: uuid\n+              description: >\n+                A cluster state UUID.\n+            - name: diff\n+              description: >\n+                A diff size of the cluster state version.\n+        - name: health\n+          type: group\n+          description: >\n+            Contains fields related to the cluster health.\n+          fields:\n+            - name: old_value\n+              description: >\n+                The previous health of the cluster.\n+            - name: new_value\n+              description: >\n+                The new health of the cluster.\n+        - name: setting\n+          type: group\n+          description: >\n+            Contains fields related to cluster settings.\n+          fields:\n+            - name: action\n+              description: >\n+                The action being applied to this cluster setting.\n+            - name: name\n+              description: >\n+                The cluster setting name.\n+            - name: old_value\n+              description: >\n+                The previous value of the setting.\n+            - name: new_value\n+              description: >\n+                The new value of the setting.\n+    - name: node","path":"filebeat/module/elasticsearch/log/_meta/fields.yml","position":87,"original_position":87,"commit_id":"648f786a012eefb5a72c1c4a0fe7085825c4e8d9","original_commit_id":"648f786a012eefb5a72c1c4a0fe7085825c4e8d9","user":{"login":"ruflin","id":244900,"avatar_url":"https://avatars3.githubusercontent.com/u/244900?v=4","gravatar_id":"","url":"https://api.github.com/users/ruflin","html_url":"https://github.com/ruflin","followers_url":"https://api.github.com/users/ruflin/followers","following_url":"https://api.github.com/users/ruflin/following{/other_user}","gists_url":"https://api.github.com/users/ruflin/gists{/gist_id}","starred_url":"https://api.github.com/users/ruflin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ruflin/subscriptions","organizations_url":"https://api.github.com/users/ruflin/orgs","repos_url":"https://api.github.com/users/ruflin/repos","events_url":"https://api.github.com/users/ruflin/events{/privacy}","received_events_url":"https://api.github.com/users/ruflin/received_events","type":"User","site_admin":false},"body":"In a second step we should unify this with the data from metricbeat: https://github.com/elastic/beats/blob/master/metricbeat/module/elasticsearch/node/_meta/fields.yml#L1 So if someone searches for `elasticsearch.node.name` for example he gets information for logs and metrics.","created_at":"2017-11-07T23:08:46Z","updated_at":"2017-11-07T23:09:37Z","html_url":"https://github.com/elastic/beats/pull/5394#discussion_r149532474","pull_request_url":"https://api.github.com/repos/elastic/beats/pulls/5394","author_association":"CONTRIBUTOR","_links":{"self":{"href":"https://api.github.com/repos/elastic/beats/pulls/comments/149532474"},"html":{"href":"https://github.com/elastic/beats/pull/5394#discussion_r149532474"},"pull_request":{"href":"https://api.github.com/repos/elastic/beats/pulls/5394"}}},"pull_request":{"url":"https://api.github.com/repos/elastic/beats/pulls/5394","id":146576378,"html_url":"https://github.com/elastic/beats/pull/5394","diff_url":"https://github.com/elastic/beats/pull/5394.diff","patch_url":"https://github.com/elastic/beats/pull/5394.patch","issue_url":"https://api.github.com/repos/elastic/beats/issues/5394","number":5394,"state":"open","locked":false,"title":"Initial commit of Elasticsearch Filebeat module.","user":{"login":"joshuar","id":7401,"avatar_url":"https://avatars3.githubusercontent.com/u/7401?v=4","gravatar_id":"","url":"https://api.github.com/users/joshuar","html_url":"https://github.com/joshuar","followers_url":"https://api.github.com/users/joshuar/followers","following_url":"https://api.github.com/users/joshuar/following{/other_user}","gists_url":"https://api.github.com/users/joshuar/gists{/gist_id}","starred_url":"https://api.github.com/users/joshuar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/joshuar/subscriptions","organizations_url":"https://api.github.com/users/joshuar/orgs","repos_url":"https://api.github.com/users/joshuar/repos","events_url":"https://api.github.com/users/joshuar/events{/privacy}","received_events_url":"https://api.github.com/users/joshuar/received_events","type":"User","site_admin":false},"body":"This adds an initial rudimentary Filebeat module for Elasticsearch.  At the moment, it will parse the base Elasticsearch log but in the future will hopefully also handle other Elasticsearch log types like deprecation, slowlogs and audit log.","created_at":"2017-10-14T00:10:36Z","updated_at":"2017-11-07T23:09:37Z","closed_at":null,"merged_at":null,"merge_commit_sha":"416dc69f3d5e35aec7699ddaa1937e6c312f0552","assignee":null,"assignees":[],"requested_reviewers":[],"milestone":null,"commits_url":"https://api.github.com/repos/elastic/beats/pulls/5394/commits","review_comments_url":"https://api.github.com/repos/elastic/beats/pulls/5394/comments","review_comment_url":"https://api.github.com/repos/elastic/beats/pulls/comments{/number}","comments_url":"https://api.github.com/repos/elastic/beats/issues/5394/comments","statuses_url":"https://api.github.com/repos/elastic/beats/statuses/648f786a012eefb5a72c1c4a0fe7085825c4e8d9","head":{"label":"joshuar:master","ref":"master","sha":"648f786a012eefb5a72c1c4a0fe7085825c4e8d9","user":{"login":"joshuar","id":7401,"avatar_url":"https://avatars3.githubusercontent.com/u/7401?v=4","gravatar_id":"","url":"https://api.github.com/users/joshuar","html_url":"https://github.com/joshuar","followers_url":"https://api.github.com/users/joshuar/followers","following_url":"https://api.github.com/users/joshuar/following{/other_user}","gists_url":"https://api.github.com/users/joshuar/gists{/gist_id}","starred_url":"https://api.github.com/users/joshuar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/joshuar/subscriptions","organizations_url":"https://api.github.com/users/joshuar/orgs","repos_url":"https://api.github.com/users/joshuar/repos","events_url":"https://api.github.com/users/joshuar/events{/privacy}","received_events_url":"https://api.github.com/users/joshuar/received_events","type":"User","site_admin":false},"repo":{"id":104527429,"name":"beats","full_name":"joshuar/beats","owner":{"login":"joshuar","id":7401,"avatar_url":"https://avatars3.githubusercontent.com/u/7401?v=4","gravatar_id":"","url":"https://api.github.com/users/joshuar","html_url":"https://github.com/joshuar","followers_url":"https://api.github.com/users/joshuar/followers","following_url":"https://api.github.com/users/joshuar/following{/other_user}","gists_url":"https://api.github.com/users/joshuar/gists{/gist_id}","starred_url":"https://api.github.com/users/joshuar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/joshuar/subscriptions","organizations_url":"https://api.github.com/users/joshuar/orgs","repos_url":"https://api.github.com/users/joshuar/repos","events_url":"https://api.github.com/users/joshuar/events{/privacy}","received_events_url":"https://api.github.com/users/joshuar/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/joshuar/beats","description":":tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash ","fork":true,"url":"https://api.github.com/repos/joshuar/beats","forks_url":"https://api.github.com/repos/joshuar/beats/forks","keys_url":"https://api.github.com/repos/joshuar/beats/keys{/key_id}","collaborators_url":"https://api.github.com/repos/joshuar/beats/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/joshuar/beats/teams","hooks_url":"https://api.github.com/repos/joshuar/beats/hooks","issue_events_url":"https://api.github.com/repos/joshuar/beats/issues/events{/number}","events_url":"https://api.github.com/repos/joshuar/beats/events","assignees_url":"https://api.github.com/repos/joshuar/beats/assignees{/user}","branches_url":"https://api.github.com/repos/joshuar/beats/branches{/branch}","tags_url":"https://api.github.com/repos/joshuar/beats/tags","blobs_url":"https://api.github.com/repos/joshuar/beats/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/joshuar/beats/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/joshuar/beats/git/refs{/sha}","trees_url":"https://api.github.com/repos/joshuar/beats/git/trees{/sha}","statuses_url":"https://api.github.com/repos/joshuar/beats/statuses/{sha}","languages_url":"https://api.github.com/repos/joshuar/beats/languages","stargazers_url":"https://api.github.com/repos/joshuar/beats/stargazers","contributors_url":"https://api.github.com/repos/joshuar/beats/contributors","subscribers_url":"https://api.github.com/repos/joshuar/beats/subscribers","subscription_url":"https://api.github.com/repos/joshuar/beats/subscription","commits_url":"https://api.github.com/repos/joshuar/beats/commits{/sha}","git_commits_url":"https://api.github.com/repos/joshuar/beats/git/commits{/sha}","comments_url":"https://api.github.com/repos/joshuar/beats/comments{/number}","issue_comment_url":"https://api.github.com/repos/joshuar/beats/issues/comments{/number}","contents_url":"https://api.github.com/repos/joshuar/beats/contents/{+path}","compare_url":"https://api.github.com/repos/joshuar/beats/compare/{base}...{head}","merges_url":"https://api.github.com/repos/joshuar/beats/merges","archive_url":"https://api.github.com/repos/joshuar/beats/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/joshuar/beats/downloads","issues_url":"https://api.github.com/repos/joshuar/beats/issues{/number}","pulls_url":"https://api.github.com/repos/joshuar/beats/pulls{/number}","milestones_url":"https://api.github.com/repos/joshuar/beats/milestones{/number}","notifications_url":"https://api.github.com/repos/joshuar/beats/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/joshuar/beats/labels{/name}","releases_url":"https://api.github.com/repos/joshuar/beats/releases{/id}","deployments_url":"https://api.github.com/repos/joshuar/beats/deployments","created_at":"2017-09-22T23:44:08Z","updated_at":"2017-09-22T23:44:14Z","pushed_at":"2017-11-07T06:58:41Z","git_url":"git://github.com/joshuar/beats.git","ssh_url":"git@github.com:joshuar/beats.git","clone_url":"https://github.com/joshuar/beats.git","svn_url":"https://github.com/joshuar/beats","homepage":"https://www.elastic.co/products/beats","size":64576,"stargazers_count":0,"watchers_count":0,"language":"Go","has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"elastic:master","ref":"master","sha":"1ec7437036852f6ab234c8b5d25ca8ce45bcb3f5","user":{"login":"elastic","id":6764390,"avatar_url":"https://avatars0.githubusercontent.com/u/6764390?v=4","gravatar_id":"","url":"https://api.github.com/users/elastic","html_url":"https://github.com/elastic","followers_url":"https://api.github.com/users/elastic/followers","following_url":"https://api.github.com/users/elastic/following{/other_user}","gists_url":"https://api.github.com/users/elastic/gists{/gist_id}","starred_url":"https://api.github.com/users/elastic/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/elastic/subscriptions","organizations_url":"https://api.github.com/users/elastic/orgs","repos_url":"https://api.github.com/users/elastic/repos","events_url":"https://api.github.com/users/elastic/events{/privacy}","received_events_url":"https://api.github.com/users/elastic/received_events","type":"Organization","site_admin":false},"repo":{"id":16554739,"name":"beats","full_name":"elastic/beats","owner":{"login":"elastic","id":6764390,"avatar_url":"https://avatars0.githubusercontent.com/u/6764390?v=4","gravatar_id":"","url":"https://api.github.com/users/elastic","html_url":"https://github.com/elastic","followers_url":"https://api.github.com/users/elastic/followers","following_url":"https://api.github.com/users/elastic/following{/other_user}","gists_url":"https://api.github.com/users/elastic/gists{/gist_id}","starred_url":"https://api.github.com/users/elastic/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/elastic/subscriptions","organizations_url":"https://api.github.com/users/elastic/orgs","repos_url":"https://api.github.com/users/elastic/repos","events_url":"https://api.github.com/users/elastic/events{/privacy}","received_events_url":"https://api.github.com/users/elastic/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/elastic/beats","description":":tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash ","fork":false,"url":"https://api.github.com/repos/elastic/beats","forks_url":"https://api.github.com/repos/elastic/beats/forks","keys_url":"https://api.github.com/repos/elastic/beats/keys{/key_id}","collaborators_url":"https://api.github.com/repos/elastic/beats/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/elastic/beats/teams","hooks_url":"https://api.github.com/repos/elastic/beats/hooks","issue_events_url":"https://api.github.com/repos/elastic/beats/issues/events{/number}","events_url":"https://api.github.com/repos/elastic/beats/events","assignees_url":"https://api.github.com/repos/elastic/beats/assignees{/user}","branches_url":"https://api.github.com/repos/elastic/beats/branches{/branch}","tags_url":"https://api.github.com/repos/elastic/beats/tags","blobs_url":"https://api.github.com/repos/elastic/beats/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/elastic/beats/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/elastic/beats/git/refs{/sha}","trees_url":"https://api.github.com/repos/elastic/beats/git/trees{/sha}","statuses_url":"https://api.github.com/repos/elastic/beats/statuses/{sha}","languages_url":"https://api.github.com/repos/elastic/beats/languages","stargazers_url":"https://api.github.com/repos/elastic/beats/stargazers","contributors_url":"https://api.github.com/repos/elastic/beats/contributors","subscribers_url":"https://api.github.com/repos/elastic/beats/subscribers","subscription_url":"https://api.github.com/repos/elastic/beats/subscription","commits_url":"https://api.github.com/repos/elastic/beats/commits{/sha}","git_commits_url":"https://api.github.com/repos/elastic/beats/git/commits{/sha}","comments_url":"https://api.github.com/repos/elastic/beats/comments{/number}","issue_comment_url":"https://api.github.com/repos/elastic/beats/issues/comments{/number}","contents_url":"https://api.github.com/repos/elastic/beats/contents/{+path}","compare_url":"https://api.github.com/repos/elastic/beats/compare/{base}...{head}","merges_url":"https://api.github.com/repos/elastic/beats/merges","archive_url":"https://api.github.com/repos/elastic/beats/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/elastic/beats/downloads","issues_url":"https://api.github.com/repos/elastic/beats/issues{/number}","pulls_url":"https://api.github.com/repos/elastic/beats/pulls{/number}","milestones_url":"https://api.github.com/repos/elastic/beats/milestones{/number}","notifications_url":"https://api.github.com/repos/elastic/beats/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/elastic/beats/labels{/name}","releases_url":"https://api.github.com/repos/elastic/beats/releases{/id}","deployments_url":"https://api.github.com/repos/elastic/beats/deployments","created_at":"2014-02-05T19:01:02Z","updated_at":"2017-11-07T18:58:28Z","pushed_at":"2017-11-07T23:01:03Z","git_url":"git://github.com/elastic/beats.git","ssh_url":"git@github.com:elastic/beats.git","clone_url":"https://github.com/elastic/beats.git","svn_url":"https://github.com/elastic/beats","homepage":"https://www.elastic.co/products/beats","size":64787,"stargazers_count":4643,"watchers_count":4643,"language":"Go","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":1243,"mirror_url":null,"archived":false,"open_issues_count":616,"forks":1243,"open_issues":616,"watchers":4643,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/elastic/beats/pulls/5394"},"html":{"href":"https://github.com/elastic/beats/pull/5394"},"issue":{"href":"https://api.github.com/repos/elastic/beats/issues/5394"},"comments":{"href":"https://api.github.com/repos/elastic/beats/issues/5394/comments"},"review_comments":{"href":"https://api.github.com/repos/elastic/beats/pulls/5394/comments"},"review_comment":{"href":"https://api.github.com/repos/elastic/beats/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/elastic/beats/pulls/5394/commits"},"statuses":{"href":"https://api.github.com/repos/elastic/beats/statuses/648f786a012eefb5a72c1c4a0fe7085825c4e8d9"}},"author_association":"MEMBER"}}
{"actor":{"display_login":"ruflin"}}