{
  "name": "elasticsearch",
  "title": "Elasticsearch",
  "version": "1.21.1",
  "release": "ga",
  "description": "Elasticsearch Integration",
  "type": "integration",
  "download": "/epr/elasticsearch/elasticsearch-1.21.1.zip",
  "path": "/package/elasticsearch/1.21.1",
  "icons": [
    {
      "src": "/img/logo_elasticsearch.svg",
      "path": "/package/elasticsearch/1.21.1/img/logo_elasticsearch.svg",
      "title": "logo elasticsearch",
      "size": "32x32",
      "type": "image/svg+xml"
    }
  ],
  "conditions": {
    "kibana": {
      "version": "^8.10.1 || ^9.0.0"
    },
    "elastic": {
      "subscription": "basic"
    }
  },
  "owner": {
    "github": "elastic/stack-monitoring"
  },
  "categories": [
    "elastic_stack",
    "datastore"
  ],
  "signature_path": "/epr/elasticsearch/elasticsearch-1.21.1.zip.sig",
  "format_version": "2.6.0",
  "readme": "/package/elasticsearch/1.21.1/docs/README.md",
  "license": "basic",
  "screenshots": [
    {
      "src": "/img/cluster_node_view.png",
      "path": "/package/elasticsearch/1.21.1/img/cluster_node_view.png",
      "title": "Cluster and Node View",
      "size": "2006×1138",
      "type": "image/png"
    },
    {
      "src": "/img/index_shard_view.png",
      "path": "/package/elasticsearch/1.21.1/img/index_shard_view.png",
      "title": "Index and Shard View",
      "size": "1992×1268",
      "type": "image/png"
    },
    {
      "src": "/img/capacity_overview.png",
      "path": "/package/elasticsearch/1.21.1/img/capacity_overview.png",
      "title": "Cluster Capacity Overview",
      "size": "3325x880",
      "type": "image/png"
    },
    {
      "src": "/img/indices_datastream_view.png",
      "path": "/package/elasticsearch/1.21.1/img/indices_datastream_view.png",
      "title": "Indices and Datastream View",
      "size": "3372x8258",
      "type": "image/png"
    },
    {
      "src": "/img/es_querylog_view.png",
      "path": "/package/elasticsearch/1.21.1/img/es_querylog_view.png",
      "title": "Elasticsearch query logs",
      "size": "2912x2048",
      "type": "image/png"
    }
  ],
  "assets": [
    "/package/elasticsearch/1.21.1/LICENSE.txt",
    "/package/elasticsearch/1.21.1/changelog.yml",
    "/package/elasticsearch/1.21.1/manifest.yml",
    "/package/elasticsearch/1.21.1/docs/README.md",
    "/package/elasticsearch/1.21.1/img/capacity_overview.png",
    "/package/elasticsearch/1.21.1/img/cluster_node_view.png",
    "/package/elasticsearch/1.21.1/img/es_querylog_view.png",
    "/package/elasticsearch/1.21.1/img/index_shard_view.png",
    "/package/elasticsearch/1.21.1/img/indices_datastream_view.png",
    "/package/elasticsearch/1.21.1/img/logo_elasticsearch.svg",
    "/package/elasticsearch/1.21.1/data_stream/audit/manifest.yml",
    "/package/elasticsearch/1.21.1/data_stream/audit/sample_event.json",
    "/package/elasticsearch/1.21.1/data_stream/ccr/manifest.yml",
    "/package/elasticsearch/1.21.1/data_stream/ccr/sample_event.json",
    "/package/elasticsearch/1.21.1/data_stream/cluster_stats/manifest.yml",
    "/package/elasticsearch/1.21.1/data_stream/cluster_stats/sample_event.json",
    "/package/elasticsearch/1.21.1/data_stream/deprecation/manifest.yml",
    "/package/elasticsearch/1.21.1/data_stream/deprecation/sample_event.json",
    "/package/elasticsearch/1.21.1/data_stream/enrich/manifest.yml",
    "/package/elasticsearch/1.21.1/data_stream/enrich/sample_event.json",
    "/package/elasticsearch/1.21.1/data_stream/gc/manifest.yml",
    "/package/elasticsearch/1.21.1/data_stream/gc/sample_event.json",
    "/package/elasticsearch/1.21.1/data_stream/index/manifest.yml",
    "/package/elasticsearch/1.21.1/data_stream/index/sample_event.json",
    "/package/elasticsearch/1.21.1/data_stream/index_recovery/manifest.yml",
    "/package/elasticsearch/1.21.1/data_stream/index_recovery/sample_event.json",
    "/package/elasticsearch/1.21.1/data_stream/index_summary/manifest.yml",
    "/package/elasticsearch/1.21.1/data_stream/index_summary/sample_event.json",
    "/package/elasticsearch/1.21.1/data_stream/ingest_pipeline/manifest.yml",
    "/package/elasticsearch/1.21.1/data_stream/ml_job/manifest.yml",
    "/package/elasticsearch/1.21.1/data_stream/ml_job/sample_event.json",
    "/package/elasticsearch/1.21.1/data_stream/node/manifest.yml",
    "/package/elasticsearch/1.21.1/data_stream/node/sample_event.json",
    "/package/elasticsearch/1.21.1/data_stream/node_stats/manifest.yml",
    "/package/elasticsearch/1.21.1/data_stream/node_stats/sample_event.json",
    "/package/elasticsearch/1.21.1/data_stream/pending_tasks/manifest.yml",
    "/package/elasticsearch/1.21.1/data_stream/pending_tasks/sample_event.json",
    "/package/elasticsearch/1.21.1/data_stream/querylog/manifest.yml",
    "/package/elasticsearch/1.21.1/data_stream/querylog/sample_event.json",
    "/package/elasticsearch/1.21.1/data_stream/server/manifest.yml",
    "/package/elasticsearch/1.21.1/data_stream/server/sample_event.json",
    "/package/elasticsearch/1.21.1/data_stream/shard/manifest.yml",
    "/package/elasticsearch/1.21.1/data_stream/shard/sample_event.json",
    "/package/elasticsearch/1.21.1/data_stream/slowlog/manifest.yml",
    "/package/elasticsearch/1.21.1/data_stream/slowlog/sample_event.json",
    "/package/elasticsearch/1.21.1/elasticsearch/ingest_pipeline/monitoring_indices.yml",
    "/package/elasticsearch/1.21.1/kibana/dashboard/elasticsearch-b1399af0-628c-11ee-9c63-732d7f759a7a.json",
    "/package/elasticsearch/1.21.1/kibana/dashboard/elasticsearch-consumption.json",
    "/package/elasticsearch/1.21.1/kibana/dashboard/elasticsearch-ea5b81a0-7fbf-11ed-8509-ddabeb9daeaf.json",
    "/package/elasticsearch/1.21.1/kibana/dashboard/elasticsearch-ea888f80-61e4-11ee-b5a1-0d1803efe5cf.json",
    "/package/elasticsearch/1.21.1/kibana/dashboard/elasticsearch-metrics-ingest-pipelines.json",
    "/package/elasticsearch/1.21.1/kibana/dashboard/elasticsearch-query-analytics-dashboard.json",
    "/package/elasticsearch/1.21.1/kibana/index_pattern/befe6dd7-ec0b-4cb7-aa59-e4d5e6f39ae9.json",
    "/package/elasticsearch/1.21.1/kibana/index_pattern/elasticsearch-monitoringindices.json",
    "/package/elasticsearch/1.21.1/kibana/index_pattern/elasticsearch-querylog-dataview.json",
    "/package/elasticsearch/1.21.1/kibana/index_pattern/elasticsearch-sm-metrics.json",
    "/package/elasticsearch/1.21.1/kibana/search/elasticsearch-5df8f5ab-0459-4c89-95b4-3b3d235386bd.json",
    "/package/elasticsearch/1.21.1/data_stream/audit/fields/base-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/audit/fields/ecs.yml",
    "/package/elasticsearch/1.21.1/data_stream/audit/fields/fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/audit/fields/package-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/ccr/fields/base-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/ccr/fields/ecs.yml",
    "/package/elasticsearch/1.21.1/data_stream/ccr/fields/fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/ccr/fields/package-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/cluster_stats/fields/base-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/cluster_stats/fields/ecs.yml",
    "/package/elasticsearch/1.21.1/data_stream/cluster_stats/fields/fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/cluster_stats/fields/package-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/deprecation/fields/base-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/deprecation/fields/ecs.yml",
    "/package/elasticsearch/1.21.1/data_stream/deprecation/fields/fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/deprecation/fields/package-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/enrich/fields/base-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/enrich/fields/ecs.yml",
    "/package/elasticsearch/1.21.1/data_stream/enrich/fields/fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/enrich/fields/package-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/gc/fields/base-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/gc/fields/ecs.yml",
    "/package/elasticsearch/1.21.1/data_stream/gc/fields/fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/gc/fields/package-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/index/fields/base-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/index/fields/ecs.yml",
    "/package/elasticsearch/1.21.1/data_stream/index/fields/fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/index/fields/package-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/index_recovery/fields/base-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/index_recovery/fields/ecs.yml",
    "/package/elasticsearch/1.21.1/data_stream/index_recovery/fields/fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/index_recovery/fields/package-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/index_summary/fields/base-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/index_summary/fields/ecs.yml",
    "/package/elasticsearch/1.21.1/data_stream/index_summary/fields/fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/index_summary/fields/package-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/ingest_pipeline/fields/base-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/ingest_pipeline/fields/ecs.yml",
    "/package/elasticsearch/1.21.1/data_stream/ingest_pipeline/fields/fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/ingest_pipeline/fields/package-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/ml_job/fields/base-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/ml_job/fields/ecs.yml",
    "/package/elasticsearch/1.21.1/data_stream/ml_job/fields/fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/ml_job/fields/package-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/node/fields/base-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/node/fields/ecs.yml",
    "/package/elasticsearch/1.21.1/data_stream/node/fields/fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/node/fields/package-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/node_stats/fields/base-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/node_stats/fields/ecs.yml",
    "/package/elasticsearch/1.21.1/data_stream/node_stats/fields/fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/node_stats/fields/package-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/pending_tasks/fields/base-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/pending_tasks/fields/ecs.yml",
    "/package/elasticsearch/1.21.1/data_stream/pending_tasks/fields/fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/pending_tasks/fields/package-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/querylog/fields/base-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/querylog/fields/ecs.yml",
    "/package/elasticsearch/1.21.1/data_stream/querylog/fields/fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/querylog/fields/package-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/server/fields/base-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/server/fields/ecs.yml",
    "/package/elasticsearch/1.21.1/data_stream/server/fields/fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/server/fields/package-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/shard/fields/base-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/shard/fields/ecs.yml",
    "/package/elasticsearch/1.21.1/data_stream/shard/fields/fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/shard/fields/package-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/slowlog/fields/base-fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/slowlog/fields/ecs.yml",
    "/package/elasticsearch/1.21.1/data_stream/slowlog/fields/fields.yml",
    "/package/elasticsearch/1.21.1/data_stream/slowlog/fields/package-fields.yml",
    "/package/elasticsearch/1.21.1/elasticsearch/transform/index_pivot/manifest.yml",
    "/package/elasticsearch/1.21.1/elasticsearch/transform/index_pivot/transform.yml",
    "/package/elasticsearch/1.21.1/data_stream/audit/agent/stream/log.yml.hbs",
    "/package/elasticsearch/1.21.1/data_stream/audit/elasticsearch/ingest_pipeline/default.yml",
    "/package/elasticsearch/1.21.1/data_stream/audit/elasticsearch/ingest_pipeline/pipeline-json.yml",
    "/package/elasticsearch/1.21.1/data_stream/ccr/agent/stream/stream.yml.hbs",
    "/package/elasticsearch/1.21.1/data_stream/cluster_stats/agent/stream/stream.yml.hbs",
    "/package/elasticsearch/1.21.1/data_stream/deprecation/agent/stream/log.yml.hbs",
    "/package/elasticsearch/1.21.1/data_stream/deprecation/elasticsearch/ingest_pipeline/default.yml",
    "/package/elasticsearch/1.21.1/data_stream/deprecation/elasticsearch/ingest_pipeline/pipeline-json.yml",
    "/package/elasticsearch/1.21.1/data_stream/enrich/agent/stream/stream.yml.hbs",
    "/package/elasticsearch/1.21.1/data_stream/gc/agent/stream/log.yml.hbs",
    "/package/elasticsearch/1.21.1/data_stream/gc/elasticsearch/ingest_pipeline/default.yml",
    "/package/elasticsearch/1.21.1/data_stream/index/agent/stream/stream.yml.hbs",
    "/package/elasticsearch/1.21.1/data_stream/index_recovery/agent/stream/stream.yml.hbs",
    "/package/elasticsearch/1.21.1/data_stream/index_summary/agent/stream/stream.yml.hbs",
    "/package/elasticsearch/1.21.1/data_stream/ingest_pipeline/agent/stream/stream.yml.hbs",
    "/package/elasticsearch/1.21.1/data_stream/ingest_pipeline/elasticsearch/ingest_pipeline/default.yml",
    "/package/elasticsearch/1.21.1/data_stream/ml_job/agent/stream/stream.yml.hbs",
    "/package/elasticsearch/1.21.1/data_stream/node/agent/stream/stream.yml.hbs",
    "/package/elasticsearch/1.21.1/data_stream/node_stats/agent/stream/stream.yml.hbs",
    "/package/elasticsearch/1.21.1/data_stream/pending_tasks/agent/stream/stream.yml.hbs",
    "/package/elasticsearch/1.21.1/data_stream/querylog/agent/stream/log.yml.hbs",
    "/package/elasticsearch/1.21.1/data_stream/querylog/elasticsearch/ingest_pipeline/default.yml",
    "/package/elasticsearch/1.21.1/data_stream/querylog/elasticsearch/ingest_pipeline/pipeline-json.yml",
    "/package/elasticsearch/1.21.1/data_stream/server/agent/stream/log.yml.hbs",
    "/package/elasticsearch/1.21.1/data_stream/server/elasticsearch/ingest_pipeline/default.yml",
    "/package/elasticsearch/1.21.1/data_stream/server/elasticsearch/ingest_pipeline/pipeline-json.yml",
    "/package/elasticsearch/1.21.1/data_stream/shard/agent/stream/stream.yml.hbs",
    "/package/elasticsearch/1.21.1/data_stream/slowlog/agent/stream/log.yml.hbs",
    "/package/elasticsearch/1.21.1/data_stream/slowlog/elasticsearch/ingest_pipeline/default.yml",
    "/package/elasticsearch/1.21.1/data_stream/slowlog/elasticsearch/ingest_pipeline/pipeline-json.yml",
    "/package/elasticsearch/1.21.1/elasticsearch/transform/index_pivot/fields/fields.yml"
  ],
  "policy_templates": [
    {
      "name": "elasticsearch",
      "title": "Elasticsearch logs and metrics",
      "description": "Collect logs and metrics from Elasticsearch instances",
      "inputs": [
        {
          "type": "logfile",
          "vars": [
            {
              "name": "condition",
              "type": "text",
              "title": "Condition",
              "description": "Condition to filter when to collect this input",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "title": "Logs",
          "description": "Collect audit, deprecation, gc, server, slowlog and query logs from Elasticsearch instances"
        },
        {
          "type": "elasticsearch/metrics",
          "vars": [
            {
              "name": "hosts",
              "type": "text",
              "title": "Hosts",
              "multi": true,
              "required": true,
              "show_user": true,
              "default": [
                "http://localhost:9200"
              ]
            },
            {
              "name": "username",
              "type": "text",
              "title": "Username",
              "description": "Use when connecting to elasticsearch",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "password",
              "type": "password",
              "title": "Password",
              "description": "Use when connecting to elasticsearch",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "api_key",
              "type": "password",
              "title": "API Key",
              "description": "Elasticsearch API Key in Beats format. Use when connecting to elasticsearch in place of username/password.",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "scope",
              "type": "select",
              "title": "Scope",
              "description": "By default, scope is set to node and each entry in the hosts list indicates a distinct node in an Elasticsearch cluster.  If the scope is set to cluster then each entry in the hosts list indicates a single endpoint for a distinct Elasticsearch cluster (for example, a load-balancing proxy fronting the cluster).  Cluster should be used if the cluster has dedicated master nodes, and configure the endpoint in the hosts list not to direct requests to the dedicated master nodes.",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": "node"
            },
            {
              "name": "timeout",
              "type": "text",
              "title": "HTTP Timeout",
              "description": "Total time limit for HTTP requests.",
              "multi": false,
              "required": false,
              "show_user": false,
              "default": "10s"
            },
            {
              "name": "ssl",
              "type": "yaml",
              "title": "SSL Configuration",
              "description": "SSL configuration options. See [documentation](https://www.elastic.co/guide/en/beats/metricbeat/current/configuration-ssl.html#ssl-client-config) for details.",
              "multi": false,
              "required": false,
              "show_user": false,
              "default": "#certificate_authorities: [\"/etc/ca.crt\"]\n#certificate: \"/etc/client.crt\"\n#key: \"/etc/client.key\"\n"
            },
            {
              "name": "leaderelection",
              "type": "bool",
              "title": "Leader Election",
              "description": "Enable leaderelection between a set of Elastic Agents running on Kubernetes. Useful for when scope is `cluster`.",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": false
            },
            {
              "name": "condition",
              "type": "text",
              "title": "Condition",
              "description": "Condition to filter when to collect this input",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "title": "Metrics (Stack Monitoring)",
          "description": "Collect index, CCR, cluster stats, machine learning and node metrics from Elasticsearch instances to power the Stack Monitoring application in Kibana"
        }
      ],
      "multiple": true
    }
  ],
  "data_streams": [
    {
      "type": "logs",
      "dataset": "elasticsearch.audit",
      "title": "Elasticsearch audit logs",
      "release": "ga",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "logfile",
          "vars": [
            {
              "name": "paths",
              "type": "text",
              "title": "Paths",
              "multi": true,
              "required": true,
              "show_user": true,
              "default": [
                "/var/log/elasticsearch/*_audit.json"
              ]
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "log.yml.hbs",
          "title": "Audit logs",
          "description": "Collect Elasticsearch audit logs using log input",
          "enabled": true,
          "ingestion_method": "File"
        }
      ],
      "package": "elasticsearch",
      "path": "audit"
    },
    {
      "type": "metrics",
      "dataset": "elasticsearch.stack_monitoring.ccr",
      "title": "Elasticsearch ccr metrics",
      "release": "ga",
      "streams": [
        {
          "input": "elasticsearch/metrics",
          "vars": [
            {
              "name": "period",
              "type": "text",
              "title": "Period",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "10s"
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "CCR metrics",
          "description": "Collect Elasticsearch Cross Cluster Replication metrics",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "elasticsearch",
      "elasticsearch": {
        "index_template.mappings": {
          "dynamic": false
        }
      },
      "path": "ccr"
    },
    {
      "type": "metrics",
      "dataset": "elasticsearch.stack_monitoring.cluster_stats",
      "title": "Elasticsearch cluster_stats metrics",
      "release": "ga",
      "streams": [
        {
          "input": "elasticsearch/metrics",
          "vars": [
            {
              "name": "period",
              "type": "text",
              "title": "Period",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "10s"
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "Cluster stats",
          "description": "Collect Elasticsearch cluster wide metrics",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "elasticsearch",
      "elasticsearch": {
        "index_template.mappings": {
          "dynamic": false
        }
      },
      "path": "cluster_stats"
    },
    {
      "type": "logs",
      "dataset": "elasticsearch.deprecation",
      "title": "Elasticsearch deprecation logs",
      "release": "ga",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "logfile",
          "vars": [
            {
              "name": "paths",
              "type": "text",
              "title": "Paths",
              "multi": true,
              "required": true,
              "show_user": true,
              "default": [
                "/var/log/elasticsearch/*_deprecation.json"
              ]
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "log.yml.hbs",
          "title": "Deprecation logs",
          "description": "Collect Elasticsearch deprecation logs using log input",
          "enabled": true,
          "ingestion_method": "File"
        }
      ],
      "package": "elasticsearch",
      "path": "deprecation"
    },
    {
      "type": "metrics",
      "dataset": "elasticsearch.stack_monitoring.enrich",
      "title": "Elasticsearch enrich metrics",
      "release": "ga",
      "streams": [
        {
          "input": "elasticsearch/metrics",
          "vars": [
            {
              "name": "period",
              "type": "text",
              "title": "Period",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "10s"
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "Enrich policies metrics",
          "description": "Collect Elasticsearch enrich policies stats",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "elasticsearch",
      "elasticsearch": {
        "index_template.mappings": {
          "dynamic": false
        }
      },
      "path": "enrich"
    },
    {
      "type": "logs",
      "dataset": "elasticsearch.gc",
      "title": "Elasticsearch gc logs",
      "release": "ga",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "logfile",
          "vars": [
            {
              "name": "paths",
              "type": "text",
              "title": "Paths",
              "multi": true,
              "required": true,
              "show_user": true,
              "default": [
                "/var/log/elasticsearch/gc.log.[0-9]*",
                "/var/log/elasticsearch/gc.log"
              ]
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "log.yml.hbs",
          "title": "Garbage Collection logs",
          "description": "Collect Elasticsearch gc logs using log input",
          "enabled": true,
          "ingestion_method": "File"
        }
      ],
      "package": "elasticsearch",
      "path": "gc"
    },
    {
      "type": "metrics",
      "dataset": "elasticsearch.stack_monitoring.index",
      "title": "Elasticsearch index metrics",
      "release": "ga",
      "streams": [
        {
          "input": "elasticsearch/metrics",
          "vars": [
            {
              "name": "period",
              "type": "text",
              "title": "Period",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "10s"
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "Index metrics",
          "description": "Collect Elasticsearch index metrics",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "elasticsearch",
      "elasticsearch": {
        "index_template.mappings": {
          "dynamic": false
        }
      },
      "path": "index"
    },
    {
      "type": "metrics",
      "dataset": "elasticsearch.stack_monitoring.index_recovery",
      "title": "Elasticsearch index_recovery metrics",
      "release": "ga",
      "streams": [
        {
          "input": "elasticsearch/metrics",
          "vars": [
            {
              "name": "active.only",
              "type": "bool",
              "title": "Fetch active only indices",
              "multi": false,
              "required": false,
              "show_user": true,
              "default": true
            },
            {
              "name": "period",
              "type": "text",
              "title": "Period",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "10s"
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "Index recovery metrics",
          "description": "Returns information about ongoing and completed shard recoveries for one or more indices.",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "elasticsearch",
      "elasticsearch": {
        "index_template.mappings": {
          "dynamic": false
        }
      },
      "path": "index_recovery"
    },
    {
      "type": "metrics",
      "dataset": "elasticsearch.stack_monitoring.index_summary",
      "title": "Elasticsearch index_summary metrics",
      "release": "ga",
      "streams": [
        {
          "input": "elasticsearch/metrics",
          "vars": [
            {
              "name": "period",
              "type": "text",
              "title": "Period",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "10s"
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "Index summary metrics",
          "description": "Collect summaries of Elasticsearch index metrics",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "elasticsearch",
      "elasticsearch": {
        "index_template.mappings": {
          "dynamic": false
        }
      },
      "path": "index_summary"
    },
    {
      "type": "metrics",
      "dataset": "elasticsearch.ingest_pipeline",
      "title": "Elasticsearch ingest metrics",
      "release": "experimental",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "elasticsearch/metrics",
          "vars": [
            {
              "name": "ingest_pipeline_processor_sampling_rate",
              "type": "text",
              "title": "Processor metrics sampling rate",
              "description": "How often to collect the processor-level metrics. Number between 0 and 1.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "0.25"
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "Ingest Pipeline metrics",
          "description": "Collect metrics on Ingest Pipelines",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "elasticsearch",
      "elasticsearch": {
        "index_template.mappings": {
          "dynamic": false
        },
        "ingest_pipeline.name": "default"
      },
      "path": "ingest_pipeline"
    },
    {
      "type": "metrics",
      "dataset": "elasticsearch.stack_monitoring.ml_job",
      "title": "Elasticsearch ml_job metrics",
      "release": "ga",
      "streams": [
        {
          "input": "elasticsearch/metrics",
          "vars": [
            {
              "name": "period",
              "type": "text",
              "title": "Period",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "10s"
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "Anomaly detection machine learning job metrics",
          "description": "Collect usage information for anomaly detection Machine Learning jobs",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "elasticsearch",
      "elasticsearch": {
        "index_template.mappings": {
          "dynamic": false
        }
      },
      "path": "ml_job"
    },
    {
      "type": "metrics",
      "dataset": "elasticsearch.stack_monitoring.node",
      "title": "Elasticsearch node metrics",
      "release": "ga",
      "streams": [
        {
          "input": "elasticsearch/metrics",
          "vars": [
            {
              "name": "period",
              "type": "text",
              "title": "Period",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "10s"
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "Node metrics",
          "description": "Collect node metrics from Elasticsearch",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "elasticsearch",
      "elasticsearch": {
        "index_template.mappings": {
          "dynamic": false
        }
      },
      "path": "node"
    },
    {
      "type": "metrics",
      "dataset": "elasticsearch.stack_monitoring.node_stats",
      "title": "Elasticsearch node_stats metrics",
      "release": "ga",
      "streams": [
        {
          "input": "elasticsearch/metrics",
          "vars": [
            {
              "name": "period",
              "type": "text",
              "title": "Period",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "10s"
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "Cluster nodes statistics",
          "description": "Collect node stats from Elasticsearch",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "elasticsearch",
      "elasticsearch": {
        "index_template.mappings": {
          "dynamic": false
        }
      },
      "path": "node_stats"
    },
    {
      "type": "metrics",
      "dataset": "elasticsearch.stack_monitoring.pending_tasks",
      "title": "Elasticsearch pending_tasks metrics",
      "release": "ga",
      "streams": [
        {
          "input": "elasticsearch/metrics",
          "vars": [
            {
              "name": "period",
              "type": "text",
              "title": "Period",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "10s"
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "Pending tasks metrics",
          "description": "Collect cluster-level changes that have not yet been executed.",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "elasticsearch",
      "elasticsearch": {
        "index_template.mappings": {
          "dynamic": false
        }
      },
      "path": "pending_tasks"
    },
    {
      "type": "logs",
      "dataset": "elasticsearch.querylog",
      "title": "Elasticsearch query logs",
      "release": "ga",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "logfile",
          "vars": [
            {
              "name": "paths",
              "type": "text",
              "title": "Paths",
              "multi": true,
              "required": true,
              "show_user": true,
              "default": [
                "/var/log/elasticsearch/*_querylog.json"
              ]
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "log.yml.hbs",
          "title": "Query logs",
          "description": "Collect Elasticsearch query logs (NDJSON) using log input. Override `paths` on macOS or Windows to match your install (same defaults as the Filebeat `elasticsearch` querylog fileset).",
          "enabled": true,
          "ingestion_method": "File"
        }
      ],
      "package": "elasticsearch",
      "path": "querylog"
    },
    {
      "type": "logs",
      "dataset": "elasticsearch.server",
      "title": "Elasticsearch server logs",
      "release": "ga",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "logfile",
          "vars": [
            {
              "name": "paths",
              "type": "text",
              "title": "Paths",
              "multi": true,
              "required": true,
              "show_user": true,
              "default": [
                "/var/log/elasticsearch/*_server.json"
              ]
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "log.yml.hbs",
          "title": "Server logs",
          "description": "Collect server logs using log input",
          "enabled": true,
          "ingestion_method": "File"
        }
      ],
      "package": "elasticsearch",
      "path": "server"
    },
    {
      "type": "metrics",
      "dataset": "elasticsearch.stack_monitoring.shard",
      "title": "Elasticsearch shard metrics",
      "release": "ga",
      "streams": [
        {
          "input": "elasticsearch/metrics",
          "vars": [
            {
              "name": "period",
              "type": "text",
              "title": "Period",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "10s"
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "Shards metrics",
          "description": "Collect Elasticsearch shard metrics",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "elasticsearch",
      "elasticsearch": {
        "index_template.mappings": {
          "dynamic": false
        }
      },
      "path": "shard"
    },
    {
      "type": "logs",
      "dataset": "elasticsearch.slowlog",
      "title": "Elasticsearch slowlog logs",
      "release": "ga",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "logfile",
          "vars": [
            {
              "name": "paths",
              "type": "text",
              "title": "Paths",
              "multi": true,
              "required": true,
              "show_user": true,
              "default": [
                "/var/log/elasticsearch/*_index_search_slowlog.json",
                "/var/log/elasticsearch/*_index_indexing_slowlog.json"
              ]
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "log.yml.hbs",
          "title": "Slowlog logs",
          "description": "Collect Elasticsearch slowlog logs using log input",
          "enabled": true,
          "ingestion_method": "File"
        }
      ],
      "package": "elasticsearch",
      "path": "slowlog"
    }
  ]
}