ELK for OFW nginx logs¶
Imported from Confluence
Content may be outdated. Verify before following any procedures. View original | Last updated: January 2024
index template
{
"template": {
"settings": {
"index": {
"lifecycle": {
"name": "delete-logstash-indices",
"rollover_alias": "nginx"
},
"routing": {
"allocation": {
"include": {
"_tier_preference": "data_content"
}
}
},
"refresh_interval": "30s",
"number_of_shards": "3",
"number_of_replicas": "1"
}
},
"mappings": {
"properties": {
"@timestamp": {
"type": "date"
},
"@version": {
"type": "keyword",
"index": false,
"norms": true
},
"Adapter": {
"type": "text"
},
"AppId": {
"type": "text"
},
"GAID": {
"type": "text"
},
"User_id": {
"type": "text"
},
"action": {
"type": "text"
},
"action_id": {
"type": "text"
},
"adLocation": {
"type": "text"
},
"ad_format": {
"type": "text"
},
"ad_formats": {
"type": "text"
},
"ad_id": {
"type": "text"
},
"ad_network_name": {
"type": "text"
},
"ad_networks": {
"type": "text"
},
"ad_source": {
"type": "text"
},
"adapter_version": {
"type": "text"
},
"additional_param": {
"type": "text"
},
"adjust_adgroup": {
"type": "text"
},
"adjust_campaign": {
"type": "text"
},
"adjust_creative": {
"type": "text"
},
"adjust_network": {
"type": "text"
},
"adv_t": {
"type": "text"
},
"agent": {
"type": "text"
},
"aid": {
"type": "text"
},
"android_id": {
"type": "text"
},
"android_os_version": {
"type": "text"
},
"answer_received": {
"type": "text"
},
"api_key": {
"type": "text"
},
"apkversion": {
"type": "text"
},
"app_bundle_name": {
"type": "text"
},
"app_choice": {
"type": "text"
},
"app_id": {
"type": "text"
},
"app_version": {
"type": "text"
},
"appid": {
"type": "text"
},
"appids": {
"type": "text"
},
"apple_idfa": {
"type": "text"
},
"application_id": {
"type": "text"
},
"application_ids": {
"type": "text"
},
"application_interstitial_mode": {
"type": "text"
},
"appname": {
"type": "text"
},
"attributed": {
"type": "byte"
},
"banner": {
"type": "text"
},
"beat": {
"type": "text"
},
"blending_control_outcome": {
"type": "text"
},
"bucketId": {
"type": "integer"
},
"build_configuration": {
"type": "text"
},
"callback": {
"type": "text"
},
"campaign": {
"type": "text"
},
"campaign_name": {
"type": "text"
},
"carrier_country": {
"type": "text"
},
"carrier_name": {
"type": "text"
},
"client": {
"type": "text"
},
"client_id": {
"type": "text"
},
"client_version": {
"type": "text"
},
"clientip": {
"type": "text"
},
"close": {
"type": "text"
},
"cmlanguage": {
"type": "text"
},
"commision": {
"type": "text"
},
"company_id": {
"type": "text"
},
"countries": {
"type": "text"
},
"country": {
"type": "text"
},
"country_code": {
"type": "text"
},
"creative_type": {
"type": "text"
},
"cross_promotion": {
"type": "text"
},
"currency": {
"type": "text"
},
"currency_id": {
"type": "text"
},
"current_app_version": {
"type": "text"
},
"current_user_id": {
"type": "text"
},
"daysInstalled": {
"type": "text"
},
"daysPlayed": {
"type": "text"
},
"device": {
"type": "text"
},
"device_id": {
"type": "text"
},
"device_id_type": {
"type": "text"
},
"device_ip": {
"type": "text"
},
"displayFormat": {
"type": "text"
},
"domain": {
"type": "text"
},
"error": {
"type": "text"
},
"event": {
"type": "text"
},
"event_producer": {
"type": "text"
},
"feature_flags": {
"type": "text"
},
"fields": {
"type": "text"
},
"filter": {
"type": "text"
},
"filter_column": {
"type": "text"
},
"filter_ids": {
"type": "text"
},
"fqdn": {
"type": "text"
},
"framework": {
"type": "text"
},
"framework_version": {
"type": "text"
},
"geoip": {
"dynamic": "true",
"properties": {
"ip": {
"type": "ip"
},
"latitude": {
"type": "float"
},
"location": {
"type": "geo_point"
},
"longitude": {
"type": "float"
}
}
},
"google_a_id": {
"type": "text"
},
"google_ad_id": {
"type": "text"
},
"height": {
"type": "text"
},
"host": {
"type": "text"
},
"http_x_forwarded_for": {
"type": "text"
},
"id": {
"type": "text"
},
"impression": {
"type": "text"
},
"install_attributed": {
"type": "text"
},
"install_referrer": {
"type": "text"
},
"integration": {
"type": "text"
},
"interstitial": {
"type": "text"
},
"invalid_adcolony": {
"type": "byte",
"ignore_malformed": false,
"coerce": true
},
"invalid_applovin": {
"type": "byte"
},
"invalid_tapjoy": {
"type": "byte"
},
"invalid_unityads": {
"type": "byte"
},
"ip": {
"type": "ip"
},
"ip_address": {
"type": "ip"
},
"item_name": {
"type": "text"
},
"itemid": {
"type": "text"
},
"landing_page": {
"type": "text"
},
"language": {
"type": "text"
},
"line_item_id": {
"type": "text"
},
"lpid": {
"type": "integer"
},
"manufacturer": {
"type": "text"
},
"mobile_app_identifier": {
"type": "text"
},
"mobile_os": {
"type": "text"
},
"network_connection_type": {
"type": "text"
},
"offer_id": {
"type": "text"
},
"offer_title": {
"type": "text"
},
"offer_type": {
"type": "text"
},
"offer_types": {
"type": "text"
},
"offerid": {
"type": "text"
},
"orientation": {
"type": "text"
},
"origin": {
"type": "text"
},
"osVersion": {
"type": "text"
},
"os_name": {
"type": "text"
},
"os_version": {
"type": "text"
},
"phone_model": {
"type": "text"
},
"phone_version": {
"type": "text"
},
"phonelanguage": {
"type": "text"
},
"placement": {
"type": "text"
},
"placement_ID": {
"type": "text"
},
"placement_id": {
"type": "text"
},
"platform": {
"type": "text"
},
"plugin_version": {
"type": "text"
},
"program_url": {
"type": "text"
},
"provider_type": {
"type": "text"
},
"pubid": {
"type": "text"
},
"referer": {
"type": "text"
},
"referrer": {
"type": "text"
},
"request": {
"type": "text"
},
"response": {
"type": "integer"
},
"response_type": {
"type": "text"
},
"resptime": {
"type": "float"
},
"sdk_features": {
"type": "text"
},
"sdk_version": {
"type": "text"
},
"sdk_wrapper": {
"type": "text"
},
"sdkversion": {
"type": "text"
},
"server_addr": {
"type": "ip"
},
"server_port": {
"type": "integer"
},
"subId": {
"type": "text"
},
"sub_id": {
"type": "text"
},
"subid": {
"type": "text"
},
"tags": {
"type": "text"
},
"transaction_id": {
"type": "text"
},
"u": {
"type": "text"
},
"uid": {
"type": "text"
},
"user_id": {
"type": "text"
},
"userid": {
"type": "text"
},
"verb": {
"type": "text"
}
}
},
"aliases": {
"nginx": {}
}
}
}