[itsi_entities] external_type = kvstore collection = itsi_services fields_list = _key, title, identifier.values, informational.values, informational.fields, services._key, in_maintenance, sec_grp, _itsi_identifier_lookups, _itsi_informational_lookups, Cloud, entity_type, entity_type_ids, sai_entity_key, _status, _itsi_entity_status_lookups, retired, retirable, last_retired, retiring_policy filter = object_type="entity" max_matches = 1 case_sensitive_match = false [itsi_notable_event_entities] external_type = kvstore collection = itsi_services fields_list = _key, title, itsi_event_name, identifier.values, informational.values, informational.fields, services._key, in_maintenance, sec_grp, _itsi_identifier_lookups, _itsi_informational_lookups, Cloud, entity_type, entity_type_ids, sai_entity_key, _status, _itsi_entity_status_lookups, retired, retirable, last_retired, retiring_policy filter = object_type="entity" max_matches = 1 [itsi_entity_types] external_type = kvstore collection = itsi_entity_type fields_list = _key, title, identifying_name, description max_matches = 1 case_sensitive_match = false [itsi_refresh_queue] external_type = kvstore collection = itsi_refresh_queue fields_list = _key, create_time, processor, change_type [alarm_console_lookup] external_type = kvstore collection = itsi_services fields_list = _key, title, object_type, sec_grp, kpis._key, kpis.title, kpis.alert_period, kpis.urgency, kpis.anomaly_detection_sensitivity filter = object_type="service" [service_kpi_lookup] external_type = kvstore collection = itsi_services fields_list = _key, title, sec_grp, kpis._key, kpis.title, kpis.search_type, kpis.base_search_id, service_tags.tags, service_tags.template_tags filter = (object_type="service") [kpi_at_info_lookup] external_type = kvstore collection = itsi_kpi_at_info fields_list = _key, service_id, adaptive_thresholding_training_window [entity_thresholds_at_lookup] external_type = kvstore collection = itsi_entity_thresholds fields_list = _key, service_id, kpi_id, entity_key, entity_title, adaptive_thresholds_is_enabled, adaptive_thresholding_training_window [disabled_service_kpi_lookup] external_type = kvstore collection = itsi_services fields_list = _key, title, sec_grp, kpis._key, kpis.title, kpis.urgency, enabled filter=(object_type="service") AND (enabled=0) [itsi_notable_event_tag_lookup] external_type = kvstore collection = itsi_notable_event_tag fields_list = _key, tag_name, event_id, mod_time, create_time, user [itsi_notable_event_comment_lookup] external_type = kvstore collection = itsi_notable_event_comment fields_list = _key, comment, event_id, mod_time, create_time, user [operative_maintenance_log] external_type = kvstore collection = operative_maintenance_log fields_list = _key, maintenance_object_key, maintenance_object_type, calendar_origin, start_time, end_time [itsi_maintenance_calendar] external_type = kvstore collection = maintenance_calendar fields_list = _key title objects._key [itsi_user_realnames_lookup] external_type = kvstore collection = itsi_user_realnames fields_list = _key,user,realname max_matches = 1 [itsi_notable_event_external_ticket] external_type = kvstore collection = itsi_notable_event_ticketing fields_list = _key, _user, create_time, object_type, event_id, mod_time, ticket_system, tickets.ticket_id, tickets.ticket_url, tickets.ticket_system, itsi_policy_id [itsi_notable_event_ref_url] external_type = kvstore collection = itsi_notable_event_ref_url fields_list = _key, _user, event_id, object_type, url, description, mod_time, itsi_policy_id ## ITSI Health Dashboard Functions [itsi_migration_check] external_type = kvstore collection = itsi_migration fields_list = itsi_old_version, itsi_latest_version [service_kpi_sbs_lookup] external_type = kvstore collection = itsi_services fields_list = _key, title, sec_grp, kpis._key, kpis.title, kpis.base_search, kpis.base_search_metric, kpis.search_type, kpis.base_search_id filter=(object_type="service") [kpi_base_search_title_lookup] external_type = kvstore collection = itsi_services fields_list = _key, title filter = object_type="kpi_base_search" [service_telemetry_lookup] external_type = kvstore collection = itsi_services fields_list = _key, title, base_service_template_id, sec_grp, services_depends_on, services_depending_on_me, kpis._key, kpis.title, kpis.base_search, kpis.search_type filter=(object_type="service") ## THIS IS DEPRECATED AS OF 4.0.0 [itsi_notable_event_group_lookup] external_type = kvstore collection = itsi_notable_event_group fields_list = _key, status, severity, title, owner, description ## THIS IS DEPRECATED AS OF 4.0.0 [itsi_notable_event_state_lookup] external_type = kvstore collection = itsi_notable_event_state fields_list = _key, status, severity, owner [itsi_notable_group_user_lookup] external_type = kvstore collection = itsi_notable_group_user fields_list = _key, _user, event_identifier_hash, object_type, status, severity, owner, instruction, mod_time, itsi_policy_id [itsi_notable_group_system_lookup] external_type = kvstore collection = itsi_notable_group_system fields_list = _key, _user, event_count, object_type, start_time, last_time, is_active, title, description, mod_time, policy_id, itsi_policy_id, parent_group_id, split_by_hash, first_event_id, group_template_id, action_rule_keys, last_execution_time # Lookup to check queue status and register consumer ids/refresh rate [itsi_notable_event_actions_queue_lookup] external_type = kvstore fields_list = _key, transaction_id, method, create_time, object_type, id, uri, content, _user, timeout collection = itsi_notable_event_actions_queue filter = object_type="action_queue_job" [itsi_notable_event_actions_registration_lookup] external_type = kvstore fields_list = _key, mod_time, object_type collection = itsi_notable_event_actions_queue filter = object_type="consumer_registration" [itsi_entity_relationships_lookup] external_type = kvstore collection = itsi_entity_relationships fields_list = _key, subject_identifier, predicate, object_identifier, create_time, create_source, mod, state max_matches = 1 [itsi_entity_relationship_rules_lookup] external_type = kvstore collection = itsi_entity_relationship_rules fields_list = _key, title, subject_entity_search, object_entity_search, predicate_rules, subject_identifier_field, object_identifier_field, predicate, entity_relationship_search, run_interval max_matches = 1 [itsi_entity_filter_rules_lookup] external_type = kvstore collection = itsi_entity_filter_rules fields_list = _key, entity_filtering_field, service_id, kpi_id, base_search_id, filtering_search, entity_info [itsi_services_in_team_lookup] external_type = kvstore collection = itsi_services fields_list = _key, title, sec_grp filter = object_type="service" [itsi_service_template_sync_status_lookup] external_type = kvstore collection = itsi_base_service_template fields_list = _key, title, sync_status, scheduled_time filter = object_type="base_service_template" # Lookup last generated alert value (both entity and aggregate) for KPI, using "kpi_id + '_' + entity_title" as _key. # Used to override data gaps (N/A alert values) for KPIs with cached alert values to fill data gaps for KPIs # with Last Available Value. [itsi_kpi_alert_value_cache] external_type = kvstore collection = itsi_kpi_summary_cache fields_list = _key, kpi_id, base_search_id, serviceid, metric_id, entity_title, entity_split_field, cached_alert_value, mod_time case_sensitive_match = false [itsi_import_objects_cache] external_type = kvstore collection = itsi_import_objects_cache fields_list = _key, checksums [kpi_alert_info_lookup] filename = kpi_alert_mapping.csv [custom_threshold_window_telemetry_lookup] external_type = kvstore collection = itsi_custom_threshold_windows fields_list = _key, duration, cron_schedule, recurrence, linked_services filter = (object_type="custom_threshold_windows") [calculation_window_telemetry_lookup] external_type = kvstore collection = itsi_services fields_list = kpis.title, kpis.search_alert_earliest filter=(object_type="service") [itsi_refresh_queue] external_type = kvstore collection = itsi_refresh_queue fields_list = _key, transaction_id, number_of_failures, change_type, change_detail, changed_object_type, \ changed_object_key, job_data, parent_job, handler_object, create_time, last_queued_time, queue_time [itsi_retired_entity_delete_status] external_type = kvstore collection = itsi_retired_entity_delete_status fields_list = _key, percentage_completed, retired_entities_deleted, status, operation_start_time, operation_end_time [itsi_duplicate_aliases_cache] external_type = kvstore collection = itsi_duplicate_aliases_cache fields_list = _key,alias_type,count,duplicate_entities,searches [itsi_duplicate_entities_cache] external_type = kvstore collection = itsi_duplicate_entities_cache fields_list = _key,duplicate_aliases,duplicate_types,retired [itsi_duplicate_alias_entity_relationship_cache] external_type = kvstore collection = itsi_duplicate_alias_entity_relationship_cache fields_list = _key,alias_key,entity_key [itsi_duplicate_entities_job_queue] external_type = kvstore collection = itsi_duplicate_entities_job_queue fields_list = _key,job_result,job_type,status,create_time,complete_timestamp,mod_source [itsi_nats] external_type = kvstore collection = itsi_nats fields_list = _key,cert_pem,key_pem,expiry # Transforms from VMWare/SII [hydra_logger_fields] REGEX = ^\d\d\d\d-\d\d-\d\d\s\d\d:\d\d:\d\d,\d\d\d (\w+) \[([\w_]+):\/\/([^\]]+)\] (\[[^\]]+\])?\s?(.+)$ FORMAT = level::$1 input::$2 scheduler::$3 component::$4 message::$5 [hydra_worker_log_fields] REGEX = ^\d\d\d\d-\d\d-\d\d\s\d\d:\d\d:\d\d,\d\d\d (\w+) \[([\w_]+):\/\/([^:]+):(\d+)\] (\[[^\]]+\])?\s?(.+)$ FORMAT = level::$1 input::$2 worker::$3 pid::$4 component::$5 message::$6 [pool_name_field_extraction] REGEX = \[pool=([^\]]*)\] FORMAT = pool::$1 MV_ADD = true [hydra_scheduler_log_fields] REGEX = ^\d\d\d\d-\d\d-\d\d\s\d\d:\d\d:\d\d,\d\d\d (\w+) \[([\w_]+):\/\/([^\]]+)\] (\[[^\]]+\])?\s?(.+)$ FORMAT = level::$1 input::$2 scheduler::$3 component::$4 message::$5 [hydra_gateway_log_fields] REGEX = ^\d\d\d\d-\d\d-\d\d\s\d\d:\d\d:\d\d,\d\d\d (\w+) \[([\w_]+):([^\]]+)\] (\[[^\]]+\])?\s?(.+)$ FORMAT = level::$1 service::$2 pid::$3 component::$4 message::$5 [hydra_access_log_fields] REGEX = ^\d\d\d\d-\d\d-\d\d\s\d\d:\d\d:\d\d,\d\d\d (\w+) ((\w+) ([^\s]+)) '((\d+) ([^']+))' - - - (\d+)ms$ FORMAT = level::$1 request::$2 method::$3 uri_path::$4 status_full::$5 status::$6 status_message::$7 spent::$8