# eventtypes.conf

##### Customization ####
# In case of index name customization or spliting data into multiple indexes, you should
# copy the eventtypes.conf to local/eventtypes.conf to adapt eventtypes definition to your needs
########################

####################
# All data         #
####################

[nmon]
search = (index=os-unix-nmon-events* OR index=os-unix-nmon-internal* OR index=os-unix-nmon-config*)

####################
# Performance data #
####################

[nmon:events]
search = index=os-unix-nmon-events* sourcetype=nmon_data

#####################
# Others type of data
#####################

[nmon:config]
search = index=os-unix-nmon-config* sourcetype=nmon_config

[nmon:collect]
search = index=os-unix-nmon-internal* sourcetype=nmon_collect

[nmon:processing]
search = index=os-unix-nmon-internal* sourcetype=nmon_processing

[nmon:clean]
search = index=os-unix-nmon-internal* sourcetype=nmon_clean

###################
# CIM normalization
###################

# CIM - Uptime stdout (nmon external)
[uptime]
search = index=os-unix-nmon-events* sourcetype=nmon_data type=UPTIME

[inventory]
search = index=os-unix-nmon-config* sourcetype=nmon_config
