update the ric-dep to the cherry release code
[it/dep.git] / ric-aux / helm / mc-stack / charts / logstash / values.yaml
1 ################################################################################
2 #   Copyright (c) 2019 AT&T Intellectual Property.                             #
3 #                                                                              #
4 #   Licensed under the Apache License, Version 2.0 (the "License");            #
5 #   you may not use this file except in compliance with the License.           #
6 #   You may obtain a copy of the License at                                    #
7 #                                                                              #
8 #       http://www.apache.org/licenses/LICENSE-2.0                             #
9 #                                                                              #
10 #   Unless required by applicable law or agreed to in writing, software        #
11 #   distributed under the License is distributed on an "AS IS" BASIS,          #
12 #   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.   #
13 #   See the License for the specific language governing permissions and        #
14 #   limitations under the License.                                             #
15 ################################################################################
16
17 replicaCount: 1
18
19 podDisruptionBudget:
20   maxUnavailable: 1
21
22 updateStrategy:
23   type: RollingUpdate
24
25 terminationGracePeriodSeconds: 30
26
27 image:
28   repository: docker.elastic.co/logstash/logstash-oss
29   tag: 7.3.0
30   pullPolicy: IfNotPresent
31   ## Add secrets manually via kubectl on kubernetes cluster and reference here
32   #  pullSecrets:
33   #    - name: "myKubernetesSecret"
34
35 service:
36   type: ClusterIP
37   # clusterIP: None
38   # nodePort:
39   # Set this to local, to preserve client source ip.  Default stripes out the source ip
40   # externalTrafficPolicy: Local
41   annotations: {}
42     ## AWS example for use with LoadBalancer service type.
43     # external-dns.alpha.kubernetes.io/hostname: logstash.cluster.local
44     # service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled: "true"
45     # service.beta.kubernetes.io/aws-load-balancer-internal: "true"
46   ports:
47     # syslog-udp:
48     #   port: 1514
49     #   targetPort: syslog-udp
50     #   protocol: UDP
51     # syslog-tcp:
52     #   port: 1514
53     #   targetPort: syslog-tcp
54     #   protocol: TCP
55     beats:
56       port: 5044
57       targetPort: 8080
58       protocol: TCP
59     # http:
60     #  port: 8080
61     #  targetPort: http
62     #  protocol: TCP
63     # loadBalancerIP: 10.0.0.1
64     # loadBalancerSourceRanges:
65     #   - 192.168.0.1
66 ports:
67   # - name: syslog-udp
68   #   containerPort: 1514
69   #   protocol: UDP
70   # - name: syslog-tcp
71   #   containerPort: 1514
72   #   protocol: TCP
73   - name: beats
74     containerPort: 5044
75     protocol: TCP
76   # - name: http
77   #   containerPort: 8080
78   #   protocol: TCP
79
80 ingress:
81   enabled: false
82   annotations: {}
83     # kubernetes.io/ingress.class: nginx
84     # kubernetes.io/tls-acme: "true"
85   path: /
86   hosts:
87     - logstash.cluster.local
88   tls: []
89   #  - secretName: logstash-tls
90   #    hosts:
91   #      - logstash.cluster.local
92
93 # set java options like heap size
94 logstashJavaOpts: "-Xmx1g -Xms1g"
95
96 resources: {}
97   # We usually recommend not to specify default resources and to leave this as a conscious
98   # choice for the user. This also increases chances charts run on environments with little
99   # resources, such as Minikube. If you do want to specify resources, uncomment the following
100   # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
101   # limits:
102   #  cpu: 100m
103   #  memory: 128Mi
104   # requests:
105   #  cpu: 100m
106   #  memory: 128Mi
107
108 priorityClassName: ""
109
110 nodeSelector: {}
111
112 tolerations: []
113
114 securityContext:
115   fsGroup: 1000
116   runAsUser: 1000
117
118 affinity: {}
119   # podAntiAffinity:
120   #   requiredDuringSchedulingIgnoredDuringExecution:
121   #     - topologyKey: "kubernetes.io/hostname"
122   #       labelSelector:
123   #         matchLabels:
124   #           release: logstash
125
126 podAnnotations: {}
127   # iam.amazonaws.com/role: "logstash-role"
128   # prometheus.io/scrape: "true"
129   # prometheus.io/path: "/metrics"
130   # prometheus.io/port: "9198"
131
132 podLabels: {}
133   # team: "developers"
134   # service: "logstash"
135
136 extraEnv: []
137
138 extraInitContainers: []
139   # - name: echo
140   #   image: busybox
141   #   imagePullPolicy: Always
142   #   args:
143   #     - echo
144   #     - hello
145
146 podManagementPolicy: OrderedReady
147  # can be OrderReady or Parallel
148 #livenessProbe:
149   #httpGet:
150     #path: /
151     #port: monitor
152   #initialDelaySeconds: 20
153   # periodSeconds: 30
154   # timeoutSeconds: 30
155   # failureThreshold: 6
156   # successThreshold: 1
157
158 #readinessProbe:
159   #httpGet:
160     #path: /
161     #port: monitor
162   #initialDelaySeconds: 20
163   # periodSeconds: 30
164   # timeoutSeconds: 30
165   # failureThreshold: 6
166   # successThreshold: 1
167
168 persistence:
169   enabled: false
170   ## logstash data Persistent Volume Storage Class
171   ## If defined, storageClassName: <storageClass>
172   ## If set to "-", storageClassName: "", which disables dynamic provisioning
173   ## If undefined (the default) or set to null, no storageClassName spec is
174   ##   set, choosing the default provisioner.  (gp2 on AWS, standard on
175   ##   GKE, AWS & OpenStack)
176   ##
177   # storageClass: "-"
178   accessMode: ReadWriteOnce
179   size: 2Gi
180
181 volumeMounts:
182   - name: data
183     mountPath: /usr/share/logstash/data
184   - name: patterns
185     mountPath: /usr/share/logstash/patterns
186   - name: files
187     mountPath: /usr/share/logstash/files
188   - name: pipeline
189     mountPath: /usr/share/logstash/pipeline
190
191 volumes: []
192   # - name: tls
193   #   secret:
194   #     secretName: logstash-tls
195   # - name: pipeline
196   #   configMap:
197   #     name: logstash-pipeline
198   # - name: certs
199   #   hostPath:
200   #     path: /tmp
201
202 exporter:
203   logstash:
204     enabled: false
205     image:
206       repository: bonniernews/logstash_exporter
207       tag: v0.1.2
208       pullPolicy: IfNotPresent
209     env: {}
210     resources: {}
211     path: /metrics
212     port: 9198
213     target:
214       port: 9600
215       path: /metrics
216     livenessProbe:
217       httpGet:
218         path: /metrics
219         port: ls-exporter
220       periodSeconds: 15
221       timeoutSeconds: 60
222       failureThreshold: 8
223       successThreshold: 1
224     readinessProbe:
225       httpGet:
226         path: /metrics
227         port: ls-exporter
228       periodSeconds: 15
229       timeoutSeconds: 60
230       failureThreshold: 8
231       successThreshold: 1
232
233 elasticsearch:
234   host: elasticsearch-data.kube-system.svc.rec.io
235   port: 9200
236
237 ## ref: https://github.com/elastic/logstash-docker/blob/master/build/logstash/env2yaml/env2yaml.go
238 config:
239   config.reload.automatic: "true"
240   path.config: /usr/share/logstash/pipeline
241   path.data: /usr/share/logstash/data
242
243   ## ref: https://www.elastic.co/guide/en/logstash/current/persistent-queues.html
244   queue.checkpoint.writes: 1
245   queue.drain: "true"
246   queue.max_bytes: 1gb  # disk capacity must be greater than the value of `queue.max_bytes`
247   queue.type: persisted
248
249 ## Patterns for filters.
250 ## Each YAML heredoc will become a separate pattern file.
251 patterns:
252   # main: |-
253   #   TESTING {"foo":.*}$
254
255 ## Custom files that can be referenced by plugins.
256 ## Each YAML heredoc will become located in the logstash home directory under
257 ## the files subdirectory.
258 files:
259   # logstash-template.json: |-
260   #   {
261   #     "order": 0,
262   #     "version": 1,
263   #     "index_patterns": [
264   #       "logstash-*"
265   #     ],
266   #     "settings": {
267   #       "index": {
268   #         "refresh_interval": "5s"
269   #       }
270   #     },
271   #     "mappings": {
272   #       "doc": {
273   #         "_meta": {
274   #           "version": "1.0.0"
275   #         },
276   #         "enabled": false
277   #       }
278   #     },
279   #     "aliases": {}
280   #   }
281
282 ## Custom binary files encoded as base64 string that can be referenced by plugins
283 ## Each base64 encoded string is decoded & mounted as a file under logstash home directory under
284 ## the files subdirectory.
285 binaryFiles: {}
286
287 ## NOTE: To achieve multiple pipelines with this chart, current best practice
288 ## is to maintain one pipeline per chart release. In this way configuration is
289 ## simplified and pipelines are more isolated from one another.
290
291 inputs:
292   main: |-
293     input {
294       # udp {
295       #   port => 1514
296       #   type => syslog
297       # }
298       # tcp {
299       #   port => 1514
300       #   type => syslog
301       # }
302       #beats {
303       #  port => 5044
304       #}
305       http {
306         port => 8080
307       }
308       # http {
309       #   port => 8080
310       # }
311       # kafka {
312       #   ## ref: https://www.elastic.co/guide/en/logstash/current/plugins-inputs-kafka.html
313       #   bootstrap_servers => "kafka-input:9092"
314       #   codec => json { charset => "UTF-8" }
315       #   consumer_threads => 1
316       #   topics => ["source"]
317       #   type => "example"
318       # }
319     }
320
321
322 filters:
323   main: |-
324     filter {
325       if "GS-LITE MC" in [message] {
326         if "mc_connected_cnt" in [message] {
327           csv {
328             columns => ["reportingEntityName","eventType","count_connected_ue","TS"]
329             separator => ","
330             convert => {
331               "count_connected_ue" => "integer"
332               "TS" => "integer"
333             }
334           }
335           date {
336             match => [ "TS", "UNIX" ]
337             target => "TS"
338           }
339         }
340         else if "mc_unique_ue_cnt" in [message] {
341           csv {
342             columns => ["reportingEntityName","eventType","count_unique_ue","TS"]
343             separator => ","
344             convert => {
345               "count_unique_ue" => "integer"
346               "TS" => "integer"
347             }
348           }
349           date {
350             match => [ "TS", "UNIX" ]
351             target => "TS"
352           }
353         }
354         else if "reconfig_status_reject_cause" in [message] {
355           csv {
356             columns => ["reportingEntityName","eventType","total_reconfig_reject","count_radio_network","count_transport","count_protocol","count_misc","GNB_ID","TS"]
357             separator => ","
358             convert => {
359               "total_reconfig_reject" => "integer"
360               "count_radio_network" => "integer"
361               "count_transport" => "integer"
362               "count_protocol" => "integer"
363               "count_misc" => "integer"
364               "TS" => "integer"
365             }
366           }
367           date {
368             match => [ "TS", "UNIX" ]
369             target => "TS"
370           }
371         }
372         else if "release_req_success_stats" in [message] {
373           csv {
374             columns => ["reportingEntityName","eventType","min_success_time","max_success_time","avg_success_time","pctl_05_success_time","pctl_95_success_time","GNB_ID","stddev_success_time","TS"]
375             separator => ","
376             convert => {
377               "min_success_time" => "float"
378               "max_success_time" => "float"
379               "avg_success_time" => "float"
380               "pctl_05_success_time" => "float"
381               "pctl_95_success_time" => "float"
382               "stddev_success_time" => "float"
383               "TS" => "integer"
384             }
385           }
386           date {
387             match => [ "TS", "UNIX" ]
388             target => "TS"
389           }
390         }
391         else if "mod_status_refuse_cause" in [message] {
392           csv {
393             columns => ["reportingEntityName","eventType","total_reconfig_refuse","count_radio_network","count_transport","count_protocol","count_misc","GNB_ID","TS"]
394             separator => ","
395             convert => {
396               "total_reconfig_refuse" => "integer"
397               "count_radio_network" => "integer"
398               "count_transport" => "integer"
399               "count_protocol" => "integer"
400               "count_misc" => "integer"
401               "TS" => "integer"
402             }
403           }
404           date {
405             match => [ "TS", "UNIX" ]
406             target => "TS"
407           }
408         }
409         else if "release_cause" in [message] {
410           csv { 
411             columns => ["reportingEntityName","eventType","total_reconfig_refuse","count_radio_network","count_transport","count_protocol","count_misc","GNB_ID","TS"]
412             separator => ","
413             convert => { 
414               "total_reconfig_refuse" => "integer"
415               "count_radio_network" => "integer"
416               "count_transport" => "integer"
417               "count_protocol" => "integer"
418               "count_misc" => "integer"
419               "TS" => "integer"
420             }
421           }
422           date {
423             match => [ "TS", "UNIX" ]
424             target => "TS"
425           }
426         }
427         else if "addreq_pdf_nr_gnb" in [message] {
428           csv {
429             columns => ["reportingEntityName","eventType","rsrp_medium","rsrp_bad","cnt","rsrp_vbad","GNB_ID","rsrp_good","rsrp_vgood","TS"]
430             separator => ","
431             convert => {
432               "rsrp_medium" => "integer"
433               "rsrp_bad" => "integer"
434               "cnt" => "integer"
435               "rsrp_vbad" => "integer"
436               "rsrp_good" => "integer"
437               "rsrp_vgood" => "integer"
438               "TS" => "integer"
439             }
440           }
441           date {
442             match => [ "TS", "UNIX" ]
443             target => "TS"
444           }
445         }
446         else if "addreq_success_stats" in [message] {
447           csv {
448             columns => ["reportingEntityName","eventType","stddev_success_time","max_success_time","avg_success_time","pctl_95_success_time","pctl_05_success_time","GNB_ID","min_success_time","TS"]
449             separator => ","
450             convert => {
451               "stddev_success_time" => "float"
452               "max_success_time" => "float"
453               "avg_success_time" => "float"
454               "pctl_95_success_time" => "float"
455               "pctl_05_success_time" => "float"
456               "min_success_time" => "float"
457               "TS" => "integer"
458             }
459           }
460           date {
461             match => [ "TS", "UNIX" ]
462             target => "TS"
463           }
464         }
465         else if "mc_connects_cnt" in [message] {
466           csv { 
467             columns => ["reportingEntityName","eventType","count_ue_connects","TS"]
468             separator => ","
469             convert => { 
470               "count_ue_connects" => "integer"
471               "TS" => "integer"
472             } 
473           }
474           date {
475             match => [ "TS", "UNIX" ]
476             target => "TS"
477           }
478         }
479         else if "erab_stats" in [message] {
480           csv {
481             columns => ["reportingEntityName","eventType","qCI_other","total_erabs","qCI_9","qCI_8","qCI_7","qCI_6","qCI_5","qCI_4","qCI_3","qCI_2","qCI_1","TS"]
482             separator => ","
483             convert => {
484               "qCI_other" => "integer"
485               "total_erabs" => "integer"
486               "qCI_9" => "integer"
487               "qCI_8" => "integer"
488               "qCI_7" => "integer"
489               "qCI_6" => "integer"
490               "qCI_5" => "integer"
491               "qCI_4" => "integer"
492               "qCI_3" => "integer"
493               "qCI_2" => "integer"
494               "qCI_1" => "integer" 
495               "TS" => "integer"
496             }
497           }
498           date {
499             match => [ "TS", "UNIX" ]
500             target => "TS"
501           }
502         }
503         else if "mc_disconnects_cnt" in [message] {
504           csv { 
505             columns => ["reportingEntityName","eventType","count_ue_disconnects","TS"]
506             separator => ","
507             convert => { 
508               "count_ue_disconnects" => "integer"
509               "TS" => "integer"
510             }
511           }
512           date {
513             match => [ "TS", "UNIX" ]
514             target => "TS"
515           }
516         }
517         else if "reconfig_status_success_rate" in [message] {
518           csv {
519             columns => ["reportingEntityName","eventType","successful_reconfiguration_requests","GNB_ID","success_rate","total_reconfiguration_requests","TS"]
520             separator => ","
521             convert => {
522               "successful_reconfiguration_requests" => "integer"
523               "success_rate" => "integer"
524               "total_reconfiguration_requests" => "integer"
525               "TS" => "integer"
526             }
527           }
528           date {
529             match => [ "TS", "UNIX" ]
530             target => "TS"
531           }
532         }
533         else if "addreq_pdf_nr_cell" in [message] {
534           csv {
535             columns => ["reportingEntityName","eventType","rsrp_medium","rsrp_bad","cnt","rsrp_vbad","CELL_ID","rsrp_good","rsrp_vgood","TS"]
536             separator => ","
537             convert => {
538               "rsrp_medium" => "integer"
539               "rsrp_bad" => "integer"
540               "cnt" => "integer"
541               "rsrp_vbad" => "integer"
542               "CELL_ID" => "integer"
543               "rsrp_good" => "integer"
544               "rsrp_vgood" => "integer"
545               "TS" => "integer"
546             }
547           }
548           date {
549             match => [ "TS", "UNIX" ]
550             target => "TS"
551           }
552         }
553         else if "rrcx_pdf_serv_cell" in [message] {
554           csv {
555             columns => ["reportingEntityName","eventType","rsrp_medium","rsrp_bad","cnt","rsrp_vbad","CELL_ID","rsrp_good","rsrp_vgood","TS"]
556             separator => ","
557             convert => {
558               "rsrp_medium" => "integer"
559               "rsrp_bad" => "integer"
560               "cnt" => "integer"
561               "rsrp_vbad" => "integer"
562               "CELL_ID" => "integer"
563               "rsrp_good" => "integer"
564               "rsrp_vgood" => "integer"
565               "TS" => "integer"
566             }
567           }
568           date {
569             match => [ "TS", "UNIX" ]
570             target => "TS"
571           }
572         }
573         else if "rrcx_stats_serv_gnb" in [message] {
574           csv {
575             columns => ["reportingEntityName","eventType","median_rsrp","cnt","max_rsrp","stddev_rsrp","GNB_ID","pctl_95_rsrp","pctl_05_rsrp","TS","min_rsrp"]
576             separator => ","
577             convert => {
578               "median_rsrp" => "integer"
579               "cnt" => "integer"
580               "max_rsrp" => "integer"
581               "stddev_rsrp" => "float"
582               "pctl_95_rsrp" => "integer"
583               "pctl_05_rsrp" => "integer"
584               "TS" => "integer"
585               "min_rsrp" => "integer"
586             }
587           }
588           date {
589             match => [ "TS", "UNIX" ]
590             target => "TS"
591           }
592         }
593         else if "addreq_stats_nr_cell" in [message] {
594           csv {
595             columns => ["reportingEntityName","eventType","median_rsrp","cnt","max_rsrp","stddev_rsrp","CELL_ID","pctl_95_rsrp","pctl_05_rsrp","TS","min_rsrp"]
596             separator => ","
597             convert => {
598               "median_rsrp" => "integer"
599               "cnt" => "integer"
600               "max_rsrp" => "integer"
601               "stddev_rsrp" => "float"
602               "CELL_ID" => "integer"
603               "pctl_95_rsrp" => "integer"
604               "pctl_05_rsrp" => "integer"
605               "TS" => "integer"
606               "min_rsrp" => "integer"
607             }
608           }
609           date {
610             match => [ "TS", "UNIX" ]
611             target => "TS"
612           }
613         }
614         else if "addreq_stats_nr_gnb" in [message] {
615           csv { 
616             columns => ["reportingEntityName","eventType","median_rsrp","cnt","max_rsrp","stddev_rsrp","GNB_ID","pctl_95_rsrp","pctl_05_rsrp","TS","min_rsrp"]
617             separator => ","
618             convert => {
619               "median_rsrp" => "integer"
620               "cnt" => "integer"
621               "max_rsrp" => "integer"
622               "stddev_rsrp" => "float"
623               "pctl_95_rsrp" => "integer"
624               "pctl_05_rsrp" => "integer"
625               "TS" => "integer"
626               "min_rsrp" => "integer"
627             }
628           }
629           date {
630             match => [ "TS", "UNIX" ]
631             target => "TS"
632           }
633         }
634         else if "mc_connection_stats" in [message] {
635           csv {
636             columns => ["reportingEntityName","eventType","avg_connected_time","pctl_05_connected_time","pctl_95_connected_time","min_connected_time","stddev_connected_time", "max_connected_time", "TS"]
637             separator => ","
638             convert => {
639               "avg_connected_time" => "float"
640               "pctl_05_connected_time" => "float"
641               "pctl_95_connected_time" => "float"
642               "min_connected_time" => "float"
643               "stddev_connected_time" => "float"
644               "max_connected_time" => "float"
645               "TS" => "float"
646             }
647           }
648           date {
649             match => [ "TS", "UNIX" ]
650             target => "TS"
651           }
652         }
653       }
654       else if "AC xAPP" in [message] {
655         csv {
656           columns => ["reportingEntityName","SgNB_Request_Rate","SgNB_Accept_Rate"]
657           separator => ","
658           convert => {
659             "SgNB_Request_Rate" => "integer"
660             "SgNB_Accept_Rate" => "integer"
661           }
662         }
663       }
664       else {
665         csv {
666           columns => ["reportingEntityName","Unknown1","Unknown2"]
667           separator => ","
668         }
669       }
670     }
671
672
673 outputs:
674   main: |-
675     output {
676       if "GS-LITE MC" in [reportingEntityName] {
677          if "mc_connected_cnt" in [eventType] {
678             elasticsearch {
679                   hosts => "elasticsearch-data.kube-system.svc.rec.io"
680                   index => "events-ves-mc-connected-cnt"
681            }
682          }
683          else if "erab_stats" in [eventType] {
684             elasticsearch {
685                   hosts => "elasticsearch-data.kube-system.svc.rec.io"
686                   index => "events-ves-mc-erab-stats"
687            }
688          }
689          else if "reconfig_status_reject_cause" in [eventType] {
690             elasticsearch {
691                   hosts => "elasticsearch-data.kube-system.svc.rec.io"
692                   index => "events-ves-mc-reconfig-status-reject-cause"
693            }
694          }
695          else if "release_req_success_stats" in [eventType] {
696             elasticsearch {
697                   hosts => "elasticsearch-data.kube-system.svc.rec.io"
698                   index => "events-ves-mc-release-req-success-stats"
699            }
700          }
701          else if "mod_status_refuse_cause" in [eventType] {
702             elasticsearch {
703                   hosts => "elasticsearch-data.kube-system.svc.rec.io"
704                   index => "events-ves-mc-mod-status-refuse-cause"
705            }      
706          }
707          else if "release_cause" in [eventType] {
708             elasticsearch {
709                   hosts => "elasticsearch-data.kube-system.svc.rec.io"
710                   index => "events-ves-mc-release-cause"
711            }
712          }
713          else if "mc_unique_ue_cnt" in [eventType] {
714             elasticsearch {
715                   hosts => "elasticsearch-data.kube-system.svc.rec.io"
716                   index => "events-ves-mc-unique-ue-cnt"
717            }
718          }
719          else if "mc_connection_stats" in [eventType] {
720            elasticsearch {
721               hosts => "elasticsearch-data.kube-system.svc.rec.io"
722               index => "events-ves-mc-conn-stats"
723            }
724         }
725         else if "addreq_pdf_nr_gnb" in [eventType] {
726            elasticsearch {
727               hosts => "elasticsearch-data.kube-system.svc.rec.io"
728               index => "events-ves-mc-addreq-pdf-nr-gnb"
729            }
730         }
731         else if "rrcx_stats_serv_gnb" in [eventType] {
732            elasticsearch {
733               hosts => "elasticsearch-data.kube-system.svc.rec.io"
734               index => "events-ves-mc-rrcx-stats-serv-gnb"
735            }
736         }
737         else if "rrcx_pdf_serv_cell" in [eventType] {
738            elasticsearch {
739               hosts => "elasticsearch-data.kube-system.svc.rec.io"
740               index => "events-ves-mc-rrcx-pdf-serv-cell"
741            }
742         }
743         else if "reconfig_status_success_rate" in [eventType] {
744            elasticsearch {
745               hosts => "elasticsearch-data.kube-system.svc.rec.io"
746               index => "events-ves-mc-reconfig-status-success-rate"
747            }
748         }
749         else if "mc_disconnects_cnt" in [eventType] {
750            elasticsearch {
751               hosts => "elasticsearch-data.kube-system.svc.rec.io"
752               index => "events-ves-mc-disconnects-cnt"
753            }
754         }
755         else if "mc_connects_cnt" in [eventType] {
756            elasticsearch {
757               hosts => "elasticsearch-data.kube-system.svc.rec.io"
758               index => "events-ves-mc-connects-cnt"
759            }
760         }
761         else if "addreq_success_stats" in [eventType] {
762            elasticsearch {
763               hosts => "elasticsearch-data.kube-system.svc.rec.io"
764               index => "events-ves-mc-addreq-success-stats"
765            }
766         }
767         else if "addreq_stats_nr_gnb" in [eventType] {
768            elasticsearch {
769               hosts => "elasticsearch-data.kube-system.svc.rec.io"
770               index => "events-ves-mc-addreq-stats-nr-gnb"
771            }
772         }
773         else if "addreq_stats_nr_cell" in [eventType] {
774            elasticsearch {
775               hosts => "elasticsearch-data.kube-system.svc.rec.io"
776               index => "events-ves-mc-addreq-stats-nr-cell"
777            }
778         }
779         else if "addreq_pdf_nr_cell" in [eventType] {
780            elasticsearch {
781               hosts => "elasticsearch-data.kube-system.svc.rec.io"
782               index => "events-ves-mc-addreq-pdf-nr-cell"
783            }
784         }
785       }
786       else if "AC xAPP" in [reportingEntityName] {
787           elasticsearch {
788              hosts => "elasticsearch-data.kube-system.svc.rec.io"
789              index => "events-ves-ac"
790           }
791       }
792       else {
793            elasticsearch {
794               hosts => "elasticsearch-data.kube-system.svc.rec.io"
795               index => "events-ves-other"
796            }
797       }
798     }