{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin-web-console/issues/632","repository_url":"https://api.github.com/repos/openshift/origin-web-console","labels_url":"https://api.github.com/repos/openshift/origin-web-console/issues/632/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin-web-console/issues/632/comments","events_url":"https://api.github.com/repos/openshift/origin-web-console/issues/632/events","html_url":"https://github.com/openshift/origin-web-console/pull/632","id":181273521,"number":632,"title":"[DO NOT MERGE] support common data model for kibana index and field names","user":{"login":"richm","id":23066,"avatar_url":"https://avatars.githubusercontent.com/u/23066?v=3","gravatar_id":"","url":"https://api.github.com/users/richm","html_url":"https://github.com/richm","followers_url":"https://api.github.com/users/richm/followers","following_url":"https://api.github.com/users/richm/following{/other_user}","gists_url":"https://api.github.com/users/richm/gists{/gist_id}","starred_url":"https://api.github.com/users/richm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/richm/subscriptions","organizations_url":"https://api.github.com/users/richm/orgs","repos_url":"https://api.github.com/users/richm/repos","events_url":"https://api.github.com/users/richm/events{/privacy}","received_events_url":"https://api.github.com/users/richm/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-10-05T21:42:37Z","updated_at":"2016-10-06T14:35:42Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/openshift/origin-web-console/pulls/632","html_url":"https://github.com/openshift/origin-web-console/pull/632","diff_url":"https://github.com/openshift/origin-web-console/pull/632.diff","patch_url":"https://github.com/openshift/origin-web-console/pull/632.patch"},"body":"There are a few changes for the common data model for index and field\r\nnaming:\r\n\r\n* indices associated with pod logs have a prefix of \"project.\"\r\n* field names are \"dotted\" and not flattened - so \"kubernetes.pod_name\"\r\n  instead of \"kubernetes_pod_name\"\r\n* the time field is \"@timestamp\" instead of \"time\""},"comment":{"url":"https://api.github.com/repos/openshift/origin-web-console/issues/comments/251981698","html_url":"https://github.com/openshift/origin-web-console/pull/632#issuecomment-251981698","issue_url":"https://api.github.com/repos/openshift/origin-web-console/issues/632","id":251981698,"user":{"login":"jwforres","id":1467629,"avatar_url":"https://avatars.githubusercontent.com/u/1467629?v=3","gravatar_id":"","url":"https://api.github.com/users/jwforres","html_url":"https://github.com/jwforres","followers_url":"https://api.github.com/users/jwforres/followers","following_url":"https://api.github.com/users/jwforres/following{/other_user}","gists_url":"https://api.github.com/users/jwforres/gists{/gist_id}","starred_url":"https://api.github.com/users/jwforres/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jwforres/subscriptions","organizations_url":"https://api.github.com/users/jwforres/orgs","repos_url":"https://api.github.com/users/jwforres/repos","events_url":"https://api.github.com/users/jwforres/events{/privacy}","received_events_url":"https://api.github.com/users/jwforres/received_events","type":"User","site_admin":false},"created_at":"2016-10-06T14:35:42Z","updated_at":"2016-10-06T14:35:42Z","body":"@richm are we trying to support both formats, the current one and then this cdm version?"}}
{"actor":{"display_login":"jwforres"}}