{
  "url": "http://server:9200/_search",
  "debug": false,
  "loginform": {
    "login": ""
  },
  "keyname":{
    "app": "app",
    "application_type": "application_type"
  },
  "tableview_application_type": {
    "appapache": {
      "name": "APP-Apache"
    },
    "apptomcat": {
      "name": "APP-Rest"
    },
    "appnginx": {
      "name": "APP-nginx"
    }
  },
  "tableview": {
    "tomcat": {
      "name": "Tomcat", 
      "rows": {
        "0": { 
          "columns": { 
            "Date": {
              "type": "regexp",
              "tableclass": "col-2",
              "jsondata": "['_source']['message']",
              "regexpdata": "\\[(.*?)\\]"
            },
            "Host": {
              "type": "json",
              "tableclass": "col-2",
              "jsondata": "['_source']['beat']['hostname']"
            },
            "State": {
              "type": "regexp",
              "tableclass": "col-2",
              "jsondata": "['_source']['message']",
              "regexpdata": "\".*?\"\\s(\\d{1,3})"
            },
            "IP": {
              "type": "regexp",
              "tableclass": "col-2",
              "jsondata": "['_source']['message']",
              "regexpdata": "^(\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3})"
            },
            "Action": {
              "type": "regexp",
              "tableclass": "col-4",
              "jsondata": "['_source']['message']",
              "regexpdata": "\"(.*?)\""
            }
          }
        },
        "1": {
          "columns": {
            "Message": {
              "type": "regexp",
              "tableclass": "",
              "jsondata": "['_source']['message']",
              "regexpdata": "(.*)"
            }
          }
        }
      },
      "raw": {
        "type": "json_single",
        "jsondata": "['_source']['message']"
      }
    },
    "apache-access": {
      "name": "APP-apache-access",
      "rows": {
        "0": {
          "columns": {
            "Date": {
              "type": "json",
              "tableclass": "col-2",
              "jsondata": "['_source']['json']['date']"
            },
            "Host": {
              "type": "json",
              "tableclass": "col-2",
              "jsondata": "['_source']['beat']['hostname']"
            },
            "IP": {
              "type": "json",
              "tableclass": "col-1",
              "jsondata": "['_source']['json']['host']"
            },
            "Status": {
              "type": "json",
              "tableclass": "col-1",
              "jsondata": "['_source']['json']['status']"
            },
            "Request": {
              "type": "json",
              "tableclass": "col-2",
              "jsondata": "['_source']['json']['req']"
            },
            "User agent": {
              "type": "json",
              "tableclass": "col-3",
              "jsondata": "['_source']['json']['u_ag']"
            },
            "req_time_ms": {
              "type": "json",
              "tableclass": "col-1",
              "jsondata": "['_source']['json']['req_time_ms']"
            }
          }
        }
      },
      "raw": {
        "type": "json_all",
        "jsondata": "['_source']['json']"
      }
    },
    "apache-error": {
      "name": "APP-apache-error",
      "rows": {
        "0": {
          "columns": {
            "Date": {
              "type": "regexp",
              "tableclass": "col-2",
              "jsondata": "['_source']['message']",
              "regexpdata": "\\[(.*?)\\]"
            },
            "Host": {
              "type": "json",
              "tableclass": "col-2",
              "jsondata": "['_source']['beat']['hostname']"
            },
            "Type": {
              "type": "regexp",
              "tableclass": "col-8",
              "jsondata": "['_source']['message']",
              "regexpdata": "\\[.*?\\] \\[(.*?)\\]"
            }
          }
        },
        "1": {
          "columns": {
            "Message": {
              "type": "regexp",
              "tableclass": "",
              "jsondata": "['_source']['message']",
              "regexpdata": "\\[.*?\\] (.*)"
            }
          }
        }
      },
      "raw": {
        "type": "json_single",
        "jsondata": "['_source']['message']"
      }
    },
    "rest": {
      "name": "APP-Rest",
      "rows": {
        "0": {
          "columns": {
            "Date": {
              "type": "regexp",
              "tableclass": "col-2",
              "jsondata": "['_source']['message']",
              "regexpdata": "^(\\d{4}\\.\\d{2}\\.\\d{2} \\d{2}:\\d{2}:\\d{2})"
            },
            "Node": {
              "type": "json",
              "tableclass": "col-2",
              "jsondata": "['_source']['beat']['hostname']"
            },
            "State": {
              "type": "regexp",
              "tableclass": "col-2",
              "jsondata": "['_source']['message']",
              "regexpdata": "^\\d{4}\\.\\d{2}\\.\\d{2} \\d{2}:\\d{2}:\\d{2} \\d* *(INFO|DEBUG|WARN|ERROR)"
            },
            "Cnum": {
              "type": "regexp",
              "tableclass": "col-2",
              "jsondata": "['_source']['message']",
              "regexpdata": "^\\d{4}\\.\\d{2}\\.\\d{2} \\d{2}:\\d{2}:\\d{2} (?:INFO|DEBUG|WARN|ERROR)* *(\\d*)"
            },
            "Action": {
              "type": "regexp",
              "tableclass": "col-4",
              "jsondata": "['_source']['message']",
              "regexpdata": "^\\d{4}\\.\\d{2}\\.\\d{2} \\d{2}:\\d{2}:\\d{2} *\\w* *\\d*.* - \\[?(.*?)[\\]:]?\\s"
            }
          }
        },
        "1": {
          "columns": {
            "Message": {
              "type": "regexp",
              "tableclass": "",
              "jsondata": "['_source']['message']",
              "regexpdata": "^\\d{4}\\.\\d{2}\\.\\d{2} \\d{2}:\\d{2}:\\d{2} *\\w* *\\d* *([\\s\\S]*)"
            }
          }
        }
      },
      "raw": {
        "type": "json_single",
        "jsondata": "['_source']['message']"
      }
    },
    "app-product": {
      "name": "APP product",
      "rows": {
        "0": {
          "columns": {
            "Date": {
              "type": "regexp",
              "tableclass": "col-2",
              "jsondata": "['_source']['message']",
              "regexpdata": "^(\\d{4}\\.\\d{2}\\.\\d{2} \\d{2}:\\d{2}:\\d{2})"
            },
            "Node": {
              "type": "json",
              "tableclass": "col-2",
              "jsondata": "['_source']['beat']['hostname']"
            },
            "State": {
              "type": "regexp",
              "tableclass": "col-2",
              "jsondata": "['_source']['message']",
              "regexpdata": "^\\d{4}\\.\\d{2}\\.\\d{2} \\d{2}:\\d{2}:\\d{2} \\d* *(INFO|DEBUG|WARN|ERROR)"
            },
            "Cnum": {
              "type": "regexp",
              "tableclass": "col-2",
              "jsondata": "['_source']['message']",
              "regexpdata": "^\\d{4}\\.\\d{2}\\.\\d{2} \\d{2}:\\d{2}:\\d{2} (?:INFO|DEBUG|WARN|ERROR)* *(\\d*)"
            },
            "Action": {
              "type": "regexp",
              "tableclass": "col-4",
              "jsondata": "['_source']['message']",
              "regexpdata": "^\\d{4}\\.\\d{2}\\.\\d{2} \\d{2}:\\d{2}:\\d{2} *\\w* *\\d*.* - \\[?(.*?)[\\]:]?\\s"
            }
          }
        },
        "1": {
          "columns": {
            "Message": {
              "type": "regexp",
              "tableclass": "",
              "jsondata": "['_source']['message']",
              "regexpdata": "^\\d{4}\\.\\d{2}\\.\\d{2} \\d{2}:\\d{2}:\\d{2} *\\w* *\\d* *([\\s\\S]*)"
            }
          }
        }
      },
      "raw": {
        "type": "json_single",
        "jsondata": "['_source']['message']"
      }
    }
  }
}