diff options
Diffstat (limited to 'spec/fixtures/lib/elasticsearch')
8 files changed, 47 insertions, 7 deletions
diff --git a/spec/fixtures/lib/elasticsearch/query.json b/spec/fixtures/lib/elasticsearch/query.json index 75164a7439f..86431bac572 100644 --- a/spec/fixtures/lib/elasticsearch/query.json +++ b/spec/fixtures/lib/elasticsearch/query.json @@ -26,7 +26,7 @@ } }, { - "offset": { + "log.offset": { "order": "desc" } } diff --git a/spec/fixtures/lib/elasticsearch/query_with_container.json b/spec/fixtures/lib/elasticsearch/query_with_container.json index 11bc653441c..3cbe2e814b1 100644 --- a/spec/fixtures/lib/elasticsearch/query_with_container.json +++ b/spec/fixtures/lib/elasticsearch/query_with_container.json @@ -33,7 +33,7 @@ } }, { - "offset": { + "log.offset": { "order": "desc" } } diff --git a/spec/fixtures/lib/elasticsearch/query_with_cursor.json b/spec/fixtures/lib/elasticsearch/query_with_cursor.json index c5b81e97d3c..da697b0b081 100644 --- a/spec/fixtures/lib/elasticsearch/query_with_cursor.json +++ b/spec/fixtures/lib/elasticsearch/query_with_cursor.json @@ -26,7 +26,7 @@ } }, { - "offset": { + "log.offset": { "order": "desc" } } diff --git a/spec/fixtures/lib/elasticsearch/query_with_end_time.json b/spec/fixtures/lib/elasticsearch/query_with_end_time.json index 226e0f115e7..dca08382cd8 100644 --- a/spec/fixtures/lib/elasticsearch/query_with_end_time.json +++ b/spec/fixtures/lib/elasticsearch/query_with_end_time.json @@ -35,7 +35,7 @@ } }, { - "offset": { + "log.offset": { "order": "desc" } } diff --git a/spec/fixtures/lib/elasticsearch/query_with_filebeat_6.json b/spec/fixtures/lib/elasticsearch/query_with_filebeat_6.json new file mode 100644 index 00000000000..75164a7439f --- /dev/null +++ b/spec/fixtures/lib/elasticsearch/query_with_filebeat_6.json @@ -0,0 +1,40 @@ +{ + "query": { + "bool": { + "must": [ + { + "match_phrase": { + "kubernetes.pod.name": { + "query": "production-6866bc8974-m4sk4" + } + } + }, + { + "match_phrase": { + "kubernetes.namespace": { + "query": "autodevops-deploy-9-production" + } + } + } + ] + } + }, + "sort": [ + { + "@timestamp": { + "order": "desc" + } + }, + { + "offset": { + "order": "desc" + } + } + ], + "_source": [ + "@timestamp", + "message", + "kubernetes.pod.name" + ], + "size": 500 +} diff --git a/spec/fixtures/lib/elasticsearch/query_with_search.json b/spec/fixtures/lib/elasticsearch/query_with_search.json index ca63c12f3b8..ab5c0ef13c2 100644 --- a/spec/fixtures/lib/elasticsearch/query_with_search.json +++ b/spec/fixtures/lib/elasticsearch/query_with_search.json @@ -35,7 +35,7 @@ } }, { - "offset": { + "log.offset": { "order": "desc" } } diff --git a/spec/fixtures/lib/elasticsearch/query_with_start_time.json b/spec/fixtures/lib/elasticsearch/query_with_start_time.json index cb3e37de8a7..479e4b74cdf 100644 --- a/spec/fixtures/lib/elasticsearch/query_with_start_time.json +++ b/spec/fixtures/lib/elasticsearch/query_with_start_time.json @@ -35,7 +35,7 @@ } }, { - "offset": { + "log.offset": { "order": "desc" } } diff --git a/spec/fixtures/lib/elasticsearch/query_with_times.json b/spec/fixtures/lib/elasticsearch/query_with_times.json index 91d28b28842..8bb0109a053 100644 --- a/spec/fixtures/lib/elasticsearch/query_with_times.json +++ b/spec/fixtures/lib/elasticsearch/query_with_times.json @@ -36,7 +36,7 @@ } }, { - "offset": { + "log.offset": { "order": "desc" } } |