aboutsummaryrefslogtreecommitdiffstats
path: root/extra/docker/elk/tools/EsAutoQuery/timeSince.json
diff options
context:
space:
mode:
authorac2550 <ac2550@intl.att.com>2018-03-20 12:35:48 +0100
committerac2550 <ac2550@intl.att.com>2018-03-20 13:13:38 +0100
commit5082fd7ed2037dfdb9c37ae60b77bc3165262663 (patch)
tree2c78b8ff995d15b245b878bdde187a70bad016e5 /extra/docker/elk/tools/EsAutoQuery/timeSince.json
parent3dc5f2a4a5c066a57ef0ce346be884b045ae73c9 (diff)
Adding CLAMP Dashboard
Change-Id: I0496fa7303dbeaf72b00e4382f71bdb0069abb9a Issue-ID: CLAMP-77 Signed-off-by: ac2550 <ac2550@intl.att.com>
Diffstat (limited to 'extra/docker/elk/tools/EsAutoQuery/timeSince.json')
-rw-r--r--extra/docker/elk/tools/EsAutoQuery/timeSince.json51
1 files changed, 51 insertions, 0 deletions
diff --git a/extra/docker/elk/tools/EsAutoQuery/timeSince.json b/extra/docker/elk/tools/EsAutoQuery/timeSince.json
new file mode 100644
index 000000000..6ee14933d
--- /dev/null
+++ b/extra/docker/elk/tools/EsAutoQuery/timeSince.json
@@ -0,0 +1,51 @@
+{
+ "query" : {
+ "match_all": {}
+ },
+ "script_fields" : {
+ "timeSince" : {
+ "script" : {
+ "lang": "painless",
+ "source": "
+long now = System.currentTimeMillis();
+if (doc.get('closedLoopEventStatus.keyword').value == 'ABATED') {
+ return now - doc.get('closedLoopAlarmEnd').value;
+}
+if (doc.get('closedLoopEventStatus.keyword').value == 'ONSET') {
+ return now - doc.get('closedLoopAlarmStart').value;
+}
+if (doc.containsKey('notification.keyword')) {
+ return now - doc.get('notificationTime').value;
+}
+
+return null
+"
+ }
+ }
+ , "closedLoopAlarmStart" : {
+ "script" : {
+ "lang": "painless",
+ "source": "doc['closedLoopAlarmStart']"
+ }
+ }
+ , "closedLoopEventStatus" : {
+ "script" : {
+ "lang": "painless",
+ "source": "doc['closedLoopEventStatus.keyword']"
+ }
+ }
+ , "notification" : {
+ "script" : {
+ "lang": "painless",
+ "source": "doc['notification.keyword']"
+ }
+ }
+ , "notificationTime" : {
+ "script" : {
+ "lang": "painless",
+ "source": "doc['notificationTime'].value"
+ }
+ }
+
+ }
+}